JP6677293B2 - Electronic device management system, communication device, communication method, and program - Google Patents

Description

The present invention relates to an electronic apparatus including a communication device (communication adapter) that communicates with each electronic device such as one or a plurality of OA devices (for example, a copying machine, a facsimile machine, a printer, or a printing machine). The present invention relates to an electronic device management system that manages an electronic device, a communication device, a communication method, and a program thereof .

As an electronic equipment management system , for example, as disclosed in Patent Document 1, an image forming apparatus (OA equipment) such as a copying machine installed in an office or the like of a user (customer) includes an intermediary apparatus (management terminal) and a communication line. 2. Description of the Related Art A remote device management system that can be connected to a management device (center system) installed in a service center or the like is generally known.

  On the other hand, in recent years, encryption of data flowing over a LAN (Local Area Network) or a WAN (Wide Area Network) has been used due to an increase in information security awareness. Therefore, in addition to communication using HTTPS (Hypertext Transfer Protocol Security) performed in the transport layer, communication using a communication mode (communication method) of IPsec (IP Security Protocol) performing encryption in the network (IP) layer is performed using VPN (Virtual). With the spread of Private Network) and the like, a large number of activities are being carried out.

Here, the IPsec communication mode will be briefly described.
There are two IPsec communication modes, a “transport mode” and a “tunnel mode”. In the transport mode, encryption (or authentication) processing is performed only on the data portion of an IP packet (hereinafter, also simply referred to as a “packet”). In the tunnel mode, encryption (or authentication) of both the header information and the data portion of the packet is performed. The receiving side of the encrypted packet needs to decrypt the packet with a device that supports IPsec.

  IPsec has come to be used for communication with OA devices connected to a network environment such as a LAN in an office. However, in IPsec communication (encrypted communication in the IPsec communication mode), encryption (or authentication) processing is performed at the IP level, so that in an office environment, OA devices that perform IP communication and OA devices that perform IPsec communication are mixed. May be installed. Even if only OA devices that perform only IPsec communication are installed, the communication is performed in a tunnel mode when communicating via a router because of different network segments, and in a transport mode when the same network segment is used. It is necessary to perform communication by.

Therefore, according to the conventional remote device management system that manages the maintenance and maintenance of OA devices, when the mediation device communicates with a plurality of OA devices in different communication modes, the following (1) to (1) to The problem shown in (3) occurs.
(1) A network administrator consumes a great deal of labor for managing OA devices connected on a network.
(2) Since the configuration management of the OA device is not performed for the new introduction of the OA device to the customer, the operation status of the OA device cannot be grasped, and the burden on the customer's business may occur. is there.
(3) When OA equipment that performs IP communication and OA equipment that performs IPsec communication are mixed due to new introduction of OA equipment to the customer, each OA equipment cannot be managed. This lowers the security level of the network.

The present invention has been made in view of the above problems, and allows a management device and one or more electronic devices to communicate with each other via a communication device, and allows the management device to communicate with the electronic device via the communication device. In an electronic device management system for managing devices , even when the communication device communicates with a plurality of OA devices or other electronic devices in a different communication mode, an increase in the burden of management work by a network administrator and an increase in network security. In addition to reducing the number of times device search processing is performed on the communication device side, communication between the electronic device and the communication device is prevented from being disabled even when the setting of the communication mode is changed in the electronic device. With the goal.

The present invention, in the electronic equipment management system including a communication device that communicates with the one or more electronics, and a management device for managing the electronic device via the communication device, in order to achieve the above object,
A device information acquisition unit configured to sequentially execute communication in a plurality of different communication schemes for each of the one or more electronic devices until a response is received, and acquire device information from the electronic device that has responded to the communication device; When communicating with the electronic device whose device information is obtained by the device information obtaining unit, the communication unit performs communication in the communication method at the time when the device information is obtained , and the communication is performed by the device information obtaining unit. Transmitting means for transmitting to the management device information associated with the device information and the communication method at the time of its acquisition , provided
The management device includes a receiving unit that receives the information transmitted from the communication device.

Further, the communication device may be provided with setting means for setting an execution order of communication in each of the plurality of different communication methods used by the device information acquisition means.
Further, it is preferable that the setting means of the communication device include means for setting whether or not to execute communication in each of the communication methods used by the device information acquisition means.

In these electronic device management systems , the communication device includes, in the communication device, a communication status check unit that checks a communication status with the one or more electronic devices, and as a result of the check by the communication status check unit, the one or more electronic devices. When communication with any of the above is disabled, the device information acquisition means, sequentially execute communication in a plurality of different communication schemes to the one or more electronic devices, if there is a response, Means for starting a process of acquiring device information from the electronic device in a communication method to which the response has been sent may be provided.

Further, the communication device according to the present invention is an electronic device management system that includes a communication device that communicates with one or more electronic devices and a management device that manages the electronic device via the communication device. And, for each of the one or more electronic devices, sequentially executes communication in a plurality of different communication methods until there is a response, device information obtaining means for obtaining device information from the electronic device that responded, When communicating with the electronic device from which the device information has been obtained by the device information obtaining means, a communication means for performing communication using the communication method used when the device information was obtained, and the device information obtained by the device information obtaining means And transmitting means for transmitting information in which the communication method is associated with the communication method at the time of the acquisition to the management device .
Further, the communication method according to the present invention is a communication device that constitutes an electronic device management system including a communication device that communicates with one or more electronic devices, and a management device that manages the electronic device via the communication device. a communication method according to one or to each of the plurality of electronic devices, the device information acquiring sequentially executed until there is a response to communication at a plurality of different communication schemes, to acquire the device information from the electronic apparatus that responded A procedure for communicating with the electronic device whose device information has been obtained by the device information obtaining procedure, a communication procedure for performing communication by the communication method used when the device information was obtained, and a communication procedure for obtaining the device information obtained by the device information obtaining procedure. Transmitting the information in which the acquired device information is associated with the communication method at the time of the acquisition to the management device .

A program according to the present invention controls the communication device that constitutes an electronic device management system including a communication device that communicates with one or more electronic devices and a management device that manages the electronic device via the communication device. A computer, for each of one or more electronic devices, sequentially executes communication using a plurality of different communication methods until a response is received, and device information obtaining means for obtaining device information from the electronic device that has responded, and When communicating with the electronic device whose device information has been obtained by the device information obtaining means, the communication means performing communication in the communication method at the time when the device information was obtained, and the device information obtained by the device information obtaining means the information associating the communication system when the obtained is a program for functioning as a transmitting means for transmitting to said management apparatus.

According to the present invention, in the electronic equipment management system including a communication device that communicates with the one or more electronics, and a management device for managing the electronic device via the communication device, the communication device is one or more Even in an environment where communication is performed in a communication mode different from that of the electronic device, it is possible to avoid an increase in the burden of management work by the network administrator and a decrease in network security, and to change the setting of the communication mode with the electronic device. Even in the case where communication is performed, communication with the communication device is not disabled, and the number of device search processes performed on the communication device side can be reduced.

Is a block diagram showing a configuration example of an electronic equipment management system according to the present invention. FIG. 2 is a block diagram illustrating a configuration example of a server 3a in FIG. FIG. 2 is a block diagram illustrating a configuration example of a communication adapter 21 in FIG. 1. FIG. 2 is a block diagram showing a configuration example of a control system of the copying machines 13 and 23 of FIG. FIG. 4 is a flowchart showing an example of the content of a search condition setting process by a communication adapter 21 shown in FIG. 3. It is a flowchart which shows an example of the content of the device search processing similarly. FIG. 12 is a diagram for explaining a specific example of the device search process. FIG. 5 is a flowchart showing an example of the content of a communication mode setting change process by the copying machine 23 shown in FIG. 4. FIG. 4 is a flowchart showing an example of the content of a communication-related information update process by the communication adapter 21 shown in FIG. 3. FIG. 3 is a diagram for explaining a specific example of a process related to a change in communication mode setting by the copying machine and the communication adapter when a change in communication mode setting is instructed by the copying machine in FIG. FIG. 4 is a flowchart showing an example of the content of a communication mode setting change information transmission process by the center system 1 shown in FIG. 1. FIG. 4 is a flowchart illustrating another example of the content of the communication-related information updating process performed by the communication adapter 21 illustrated in FIG. 3. FIG. 3 is a diagram for explaining a specific example of processing relating to a change in communication mode setting by the center system 1, the communication adapter 21, and the copying machine 23 when a change in communication mode setting is instructed by the center system 1 in FIG. FIG. 4 is a flowchart illustrating an example of the content of security information selection / transmission processing by the communication adapter 21 illustrated in FIG. 3. FIG. 5 is a flowchart showing an example of the content of a security information update process performed by the copying machine 23 shown in FIG. 4. FIG. 4 is a diagram for describing a specific example of processing relating to updating of security information by communication adapter 21 and copying machine 23 when selection of security information is instructed by communication adapter 21 in FIG. 1. FIG. 2 is a flowchart showing an example of the content of a security information selection / transmission process by the center system 1 shown in FIG. 1. FIG. 4 is a flowchart showing an example of the content of a security information transmission process by the communication adapter 21 shown in FIG. 3. FIG. 3 is a diagram for describing a specific example of processing related to updating of security information by the center system 1, the communication adapter 21, and the copying machine when selection of security information is instructed by the center system 1 of FIG.

Hereinafter, the best mode for carrying out the present invention will be specifically described with reference to the drawings.
Figure 1 is a block diagram showing a configuration example of an electronic equipment management system (image forming apparatus management system) according to the present invention.
This electronic device management system includes a center system 1 as a central management device (also simply referred to as a “management device”) installed in a service center, and electronic devices installed in customer sites (user side) A and B, respectively. It is composed of a device group.

The center system 1 includes a router 2, a plurality of servers 3a and 3b, and a network 4 such as a LAN for connecting the servers 3a and 3b so that they can communicate with each other.
The customer site A includes a router 11, a communication adapter (communication device) 12 communicably connected to the center system 1 via the router 11 and the Internet 5, and OA equipment such as a copying machine 13 and a printer 14 as electronic equipment. A network segment is constituted by the (image forming apparatus) and a network 15 such as a LAN for connecting the OA equipment, the router 11, and the communication adapter 12 so that they can communicate with each other.

  The customer site B includes a communication adapter (communication device) 21 communicably connected to the center system 1 via the public communication network 6 and the access point 7, a facsimile (FAX) device 22 as an electronic device, a copying machine 23, An OA device such as a printer 24, a network 25 such as a LAN for connecting the communication adapter 21, the copying machine 23, and the printer 24 to each other so that they can communicate with each other, and the communication adapter 21 and the facsimile machine 22 so as to be communicable. A network segment is configured by a dedicated I / F 26 through a wired interface.

FIG. 2 is a block diagram illustrating a configuration example of the server 3a in FIG.
The server 3a includes a CPU 31, a real-time clock circuit 32, a ROM 33, a RAM 34, an external memory control unit 35, a network I / F unit 36, a hard disk device (hereinafter abbreviated as "HDD") 37, and the like. Since the server 3b has the same configuration as the server 3a, illustration and description of each unit other than the network I / F unit 36 are omitted.

The CPU 31 is a central processing unit that controls the entire server 3 a by a control program in the ROM 33.
The real-time clock circuit 32 generates time information, and the CPU 31 can read the information to know the current time.
The ROM 33 is a read-only memory that stores various fixed data including a control program used by the CPU 31.
The RAM 34 is a readable and writable memory used as a work memory or the like used when the CPU 31 performs data processing.

The external memory control unit 35 controls the interface with the HDD 37.
The network I / F unit 36 controls the interface with other servers 3 b and the router 2 connected to the network 4.
The HDD 37 is a storage unit that can store various types of information including communication-related information and security information, which will be described later, as DBs (databases). The server 3a may be provided with a non-volatile memory, and various information may be stored in the non-volatile memory.

  Here, the CPUs 31 of the servers 3a and 3b operate in accordance with the control program in the ROM 33, input information such as various instructions from a terminal device such as a PC (personal computer) not shown, and store information in the RAM 34 and the external memory control unit 35. , The network I / F unit 36, the HDD 37, and the like to control communication status check means, device search request transmission means, communication-related information management means, communication-related information update means, setting change, which are various functions related to the present invention. Functions as an instruction unit, a setting change information transmitting unit, a security information holding unit, a security information selecting unit, a security information change destination selecting unit, and a security information transmitting unit can be realized.

  Alternatively, a disk device such as a flexible disk device or an optical disk device is built in or external to the server 3a, 3b, and the disk device controls the data recorded on the inserted recording medium (a disk such as a flexible disk or an optical disk). The various functions described above can also be realized by reading a program, installing it in a built-in HDD or RAM, and operating according to the control program.

FIG. 3 is a block diagram showing a configuration example of the communication adapter 21 of FIG. Since the communication adapter 12 has the same configuration, its illustration and description are omitted. However, the communication adapter 12 differs from the communication adapter 21 in communicating with the router 11.
In the communication adapter 21, data from the public communication network 6 is first input to the line switching circuit 41. Here, if the communication from the public communication network 6 is addressed to the facsimile device 22 connected to the communication adapter 21, the public communication network 6 is connected to the facsimile device 22 and the communication from the center system 1 is performed. For communication, the public communication network 6 is connected to the modem 42.

The network I / F unit 43 communicates with the OA equipment such as the copying machine 23.
These controls and processes are performed mainly by the CPU 44 according to a control program (software including firmware) in the ROM 45.
The ROM 45 stores various fixed data including a control program used by the CPU 44.

The RAM 46 is a storage unit that can store various information including communication-related information and security information described below. A backup battery (battery) 47 is connected to the RAM 46.
The switch 48 is used to selectively set various modes and to input information such as various instructions.
The display unit 49 displays various information.
The communication adapter 21 continuously performs polling operations on each of the OA devices connected thereto, periodically and in the order of the device addresses assigned thereto.

  Here, the CPUs 44 of the communication adapters 21 and 12, which are communication devices, operate according to a control program in the ROM 45 to input information from a switch 48 or a terminal device such as a PC (not shown), and to input information from the network I / F unit 43, By controlling the RAM 46, the display unit 49, and the like, various functions related to the present invention, such as device information acquisition means, device search means, storage means (communication-related information holding means, security information holding means), search condition setting means, Communication state checking means, device search instruction means, communication related information transmitting means, communication related information updating means, updated communication related information transmitting means, security information selecting means, security information change destination selecting means, security information transmitting means, and setting change information A function as a transmission unit can be realized.

  Alternatively, a disk device such as a flexible disk device or an optical disk device is built in or external to the communication adapter 21, and the control program recorded on the inserted recording medium (a disk such as a flexible disk or an optical disk) by the disk device. Is read, installed in a built-in RAM, and operated according to the control program, thereby realizing the various functions described above.

FIG. 4 is a block diagram showing a configuration example of a control system of the copying machines 13 and 23 of FIG.
The control of the copying machines 13 and 23 is performed based on a control program and data stored in the ROM 102 with the CPU 101 as the center. The RAM 103 (storage means) is used to store intermediate results of processing, various set values, device states, and the like. The RAM 103 is a nonvolatile RAM backed up by a battery. Note that, in addition to the RAM 103, a nonvolatile storage medium such as a nonvolatile memory or an HDD may be provided.

The A / D converter 104 includes a supply voltage to the exposure lamp, a light emission voltage and a light reception voltage of the P sensor, an output of the potential sensor, an output of the ADS sensor, an output of a lamp light amount sensor for detecting a light amount of the exposure lamp, and a photoconductor drum. It is used to input the output of the drum current sensor for detecting the flowing current, thermistor voltage in the fixing unit, and the like.
The optical system control unit 105 controls the exposure lamp.
The high-voltage power supply unit 106 supplies a high voltage to be applied to each of the charging charger, the separation charger, the transfer charger, and the pre-transfer charger (PTC), and a developing bias voltage to be applied to the developing roller in the developing unit.

The motor control unit 107 controls the main motor that drives the photosensitive drum, the paper feed units, the rollers of the transport unit, and the like.
The heater control unit 108 controls the power supply to the fixing heater that heats the fixing roller of the fixing unit, and maintains the surface temperature of the fixing roller within a predetermined range.
The sensor control unit 109 is used to change the light receiving gain of the lamp light amount sensor, the light receiving gain of the ADS sensor, the light receiving gain of the P sensor, the light emitting voltage of the LED of the P sensor, and the like.
The network I / F unit 110 is a unit that performs communication with the communication adapters 12 and 21.

The operation unit 111 is an operation / display panel having a display unit for displaying various information and a switch unit (operation keys) for inputting various information.
Here, the CPUs 101 of the copiers 13 and 23 operate according to the control program in the ROM 102 to input information such as various instructions from the operation unit 111, and to input information such as the RAM 103, the network I / F unit 110, and the operation unit 111. , It is possible to realize various functions related to the present invention, such as communication mode setting means, setting change information transmitting means, setting change instructing means, security information holding means, and security information updating means.
The control system of the copying machines 13 and 23 has been described above. However, other OA devices such as the printers 14 and 24 also have the same control system, so that illustration and description thereof are omitted.

Hereinafter, each embodiment of the control and processing according to the present invention in the electronic device management system configured as described above will be specifically described with reference to FIGS.
For convenience of description, communication control in the electronic device management system includes an electronic device including an image forming apparatus (hereinafter, also referred to as “OA device”) such as a communication adapter 21 installed at a customer site B and a copying machine 23. Only the communication control between the device and the communication control between the communication adapter 21 and the server 3a of the center system 1 will be described.

  Although not shown in FIG. 1, for example, as shown in FIG. 7, the communication adapter 21 includes a copier 231, a printer 241, and a router 300 together with the copier 23 and the printer 24 via a network 25. The copier 301 and the printer 302 are connected to the router 300 via a network 310. The network 25 side is a network segment C, and the network 310 side is a network segment D. The copiers 231 and 301 have the same configuration as the copier 23 (FIG. 4), and the printers 241 and 302 have the same configuration as the printer 24, respectively.

Further, it is assumed that the transport mode and the tunnel mode as the IPsec communication modes, which are the security communication modes, are applied to some OA devices and routers 300 according to the security policy of the customer. Therefore, the network environment has a mixture of OA devices set to the IP communication mode, OA devices set to the transport mode, and the router 300 set to the tunnel mode.
In this network environment, the communication adapter 21 has a device search function of searching for each electronic device (OA device, router) in a state where the communication mode of each electronic device (OA device, router) is not grasped. Required.

[First Embodiment]
First, a first embodiment will be described.
FIG. 5 is a flowchart illustrating an example of the content of the search condition setting process performed by the communication adapter 21.

  The CPU 44 of the communication adapter 21 starts the processing routine of FIG. 5 in response to a search condition setting instruction through a user interface (an operation of the switch 48 or an operation on the terminal device), and firstly proceeds to step S1, which is necessary for communication in the IPsec communication mode. When IKE (Internet Key Exchange) information, which is important security information, is input through a user interface (hereinafter abbreviated as “UI”), the IKE information is stored and set in a RAM 46 (internal storage area). When a plurality of IKE information is used in the network 25 connected to the communication adapter 21, all the IKE information is stored. The IKE information is protocol information for completely determining an encryption method constituting SA (Security Association) information, exchanging an encryption key (or an electronic certificate including the same), and performing mutual authentication.

Next, proceeding to step S2, when SA (Security Association) information, which is security information required for communication in the IPsec communication mode (transport mode, tunnel mode), is input via the UI, the SA information is stored in the RAM 46. And set. The SA information includes information such as an encryption method and an encryption key. This information can be exchanged and shared with a communication partner during communication in the IPsec communication mode, and a secure communication path can be established.
Finally, the process proceeds to step S3, and when the execution order of the communication for each communication mode (communication in each communication mode) is designated and input by the UI, the execution order of the communication for each communication mode is stored and set in the RAM 46. .

For example, if the IPsec communication mode (transport mode or tunnel mode) is not set for any of the electronic devices registered as managed devices, the communication in the IPsec communication mode should not be performed during device search. If so, the processing load on the CPU 44 is reduced by that much. Therefore, it is preferable that the presence / absence of communication in each communication mode can be designated and input by the UI, and can be stored and set in the RAM 46.
When searching for each electronic device registered as a device to be managed by the CPU 44 of the communication adapter 21, it is necessary to set an IP address range. Therefore, after setting the search condition in the communication adapter 21, the range of the IP address input from the UI is stored and set in the RAM 46 as the target IP address.

Here, the process based on the IKE information performed immediately before the start of the communication in the IPsec communication mode will be described.
The process based on the IKE information determines SA information used at the time of communication in the IPsec communication mode, and is divided into two stages.
In the first half, the encryption method to be used in the second half is determined, and the same encryption key is generated and shared by both parties with the communication partner. After sharing the encryption key, use it to proceed to the second half.

  In the latter half of the stage, since IKE-limited encrypted communication becomes possible, negotiation for communication (encrypted communication) in the IPsec communication mode is started, and by presenting mutually usable encryption methods, both sides are presented. After determining an encryption method that can be used in step (1), various kinds of information (SA information) necessary for communication in the IPsec communication mode are exchanged, such as exchanging an encryption key corresponding to the encryption method. This enables communication in the IPsec communication mode.

  Note that security information necessary for communication in the IPsec communication mode (transport mode, tunnel mode) includes SP (security policy) information in addition to SA (Security Association) information. This SP information indicates a processing rule for a packet at the time of communication in the IPsec communication mode, and is stored and set in the RAM 46 in advance. This SP information is used together with the above-mentioned IKE information and SA information at the time of communication in the IPsec communication mode, but a description of a communication procedure including the SP information will be omitted.

FIG. 6 is a flowchart illustrating an example of the content of the device search process performed by the communication adapter 21. The target IP addresses are IP1 and IP2 here for convenience of explanation.
The CPU 44 of the communication adapter 21 starts the processing routine of FIG. 6 at a predetermined timing, and first performs the processing of step S11.

Here, the start timing will be described.
For example, device information (remote management model number, model name, model number, machine number, MIB information, etc.) of each electronic device registered as a device to be managed is stored in the RAM 46, and each device having the device information is stored. The state of communication with the electronic device is checked, and as a result of the check, if communication with any of the electronic devices becomes impossible, the processing routine of FIG. 6 is started.
Alternatively, in the server 3a of the center system 1, device information of each electronic device registered as a device to be managed is stored (stored) in the HDD (DB) 37, and communication with each electronic device having the device information is performed. When the status is checked, and as a result of the check, communication with any one of the electronic devices is disabled, a request for device search is transmitted to the communication adapter 21 so that the CPU 44 of the communication adapter 21 6 is started.

In step S11, the execution order of communication for each communication mode is read from the RAM 46. The execution order here is the IP communication mode, the transport mode, and the tunnel mode.
Next, in steps S12 to S14, communication (connection) in the IP communication mode, the transport mode, and the tunnel mode with respect to the IP address (target IP address) of each electronic device registered as a device to be managed, one IP address at a time. Are sequentially performed, and when communication can be performed, device information is acquired from the electronic device of the IP address in the communication mode, and a device search is performed to determine whether the electronic device is to be managed. Although the description is omitted here, as described above, the process based on the IKE information is performed immediately before each of the communications in the transport mode and the tunnel mode, which are the IPsec communication modes. The same applies hereinafter.

  In step S12, Ping (network diagnosis) is performed on the IP1 in the communication in the IP communication mode, and when a Ping response is received from the IP1 electronic device, the IP1 electronic device transmits the device using HTTPS or SNMP. Information is acquired, and a device search is performed to determine whether the device is an electronic device to be managed. Next, a similar device search is performed for IP2 (the next IP address). Note that the device search is ended for the IP address (electronic device having the obtained device information) to which the Ping response has been sent, and the Ping is performed in the subsequent communication in the IPsec communication mode (transport mode, tunnel mode). No device search is performed.

  In step S13, Ping is performed for IP1 in the communication in the transport mode, which is one of the IPsec communication modes, and when a Ping response is received from the IP1 electronic device, HTTPS or HTTPS is transmitted from the IP1 electronic device. Device information is acquired by SNMP, and a device search is performed to determine whether the device is an electronic device to be managed. Next, a similar device search is performed for IP2. The device search is ended for the IP address to which the Ping response has been sent, and the device search including the execution of the Ping in the subsequent communication in the tunnel mode is not performed.

In step S14, Ping is performed on the IP1 in the communication in the tunnel mode, which is one of the IPsec communication modes, and when a Ping response is received from the IP1 electronic device, HTTPS or SNMP is transmitted from the IP1 electronic device. The device information is obtained, and a device search is performed to determine whether the device is an electronic device to be managed. Next, a similar device search is performed for IP2.
After the device search is completed, the process proceeds to step S15, and the device to be managed is registered based on the result of the device search. That is, the device information (device information of the electronic device to be managed) that is obtained by the device search is stored in the RAM 46. Thereby, the electronic device having the device information is registered as a device to be managed.

  Next, the process proceeds to step S16, and the following processing is performed. That is, the device information of the electronic device to be managed is associated with the communication mode at the time of acquisition, and is held in the RAM 46 as communication-related information. At this time, if the communication mode at the time of acquiring the device information of the electronic device to be managed is the IPsec communication mode (transport mode or tunnel mode), the SA information and the SP information used for the communication in the IPsec communication mode Are respectively associated with the device information, and are stored in the RAM 46 as an SA database (hereinafter abbreviated as “SAD”) and an SP database (hereinafter abbreviated as “SPD”). The communication mode at the time of acquiring the device information may be added to the SP information.

After that, in step S17, the communication-related information, SAD, and SPD held in the RAM 46 are transmitted to the center system 1 by HTTPS communication.
When the CPU 31 of the server 3a of the center system 1 receives the communication-related information and the SAD and SPD sent from the communication adapter 21, the CPU 31 accumulates and manages them in the HDD (DB) 37 as device management information.

Here, the device search processing by the communication adapter 21 will be described in more detail.
FIG. 7 is a diagram for explaining a specific example of the device search processing by the communication adapter 21.
For example, the communication execution order for each communication mode, which is a search condition set in the communication adapter 21, is the order of the IP communication mode, the transport mode, and the tunnel mode, and the copying machine 23 installed in the network segment C. , 231, printers 24, 241, and the IP addresses of the router 300, copier 301, and printer 302 installed in the network segment D, and the communication modes set for them are as shown in FIG. The communication adapter 21 uses one IP address from the IP address “192.168.30.50” for each communication mode (IP communication mode, transport mode, tunnel mode) for the IP address range “192.168.30.50-192.168.40.85”. Perform a device search at a time.

Then, at the time of the first device search in the IP communication mode, the Ping in the communication in the IP communication mode is sequentially performed for each of the IP addresses “192.168.30.55” and “192.168.30.56”. Since there is a Ping response sequentially from the printer 231 and the printer 241, device information is sequentially obtained from the copier 231 and the printer 241 by HTTPS or SNMP.
At the time of device search in the next transport mode, when Ping in communication in the transport mode is sequentially performed on each IP address “192.168.30.70” and “192.168.30.71”, the copying machine 23 of each IP address Since there is a Ping response sequentially from the printer 24, the device information is sequentially acquired from the copying machine 23 and the printer 24 by HTTPS or SNMP.

At the time of the device search in the last tunnel mode, when the Ping in the communication in the transport mode is performed on each of the IP addresses “192.168.40.11”, “192.168.40.80”, and “192.168.40.82”, the respective IP addresses are obtained. Since the Ping response is received from each of the router 300, the copying machine 301, and the printer 302, the device information is acquired from the router 300, the copying machine 301, and the printer 302 by using HTTPS or SNMP.
Here, the device search for each communication mode is sequentially repeated for each IP address in each communication mode, but may be sequentially repeated for each IP address. In this case, if there is a Ping response, the device search for the IP address at that time may be ended, and the process may proceed to the device search for the next IP address.

As described above, according to the first embodiment, the following effects (1) to (6) can be obtained.
(1) The communication adapter (communication device) presets the execution order of communication for each of a plurality of communication modes including a security communication mode (transport mode or tunnel mode, which is an IPsec communication mode) used for device search. , Sequentially executes communication in each communication mode with each electronic device registered as a management target device, performs device search to obtain device information in a communication mode in which communication can be performed from each electronic device, and obtains by device search. The device information and the communication mode at the time of acquiring the device information are held as communication-related information. By referring to the communication-related information, a communication different from each of the electronic devices registered as the management target device is performed. Communication can be performed reliably in the mode.

Also, even when one of the electronic devices registered as a device to be managed is in a communication disabled state due to an abnormality such as a failure, it is possible to reliably perform communication in a different communication mode with each of the other electronic devices. Will be possible.
Therefore, even in an environment where the communication adapter communicates with a plurality of electronic devices in different communication modes, it is possible to avoid an increase in the burden of management work by the network administrator and a reduction in network security, and to reduce the operational efficiency of the electronic devices. Can be improved.

(2) If the communication adapter can set whether or not to execute communication for each communication mode used for device search, communication in an unnecessary communication mode is not performed and device search need not be performed. The processing load on the adapter is reduced, and the processing efficiency is improved.
(3) When the communication adapter acquires the device information in the communication mode in which communication is possible, and ends the device search for the electronic device having the device information, the communication is repeatedly executed in the communication mode to perform the device search. Since it is not necessary, the processing load on the communication adapter is reduced accordingly.
(4) The communication adapter checks the communication status with each electronic device registered as a device to be managed, and if the result of the check indicates that communication with any of the electronic devices is disabled, the device search is performed. Since the device search does not need to be performed periodically, the processing load on the communication adapter is reduced accordingly.

(5) When the center system (management device) checks the communication status with each electronic device registered as a device to be managed, and as a result of the check, communication with any of the electronic devices becomes impossible. If the communication adapter requests the communication adapter to perform a device search, the communication adapter does not need to check the communication state with each electronic device registered as a management target device, so that the processing load on the communication adapter is further reduced. .
(6) The communication adapter associates the device information obtained by the device search with the communication mode at the time of obtaining the device information and holds it as communication-related information, and then transmits the communication-related information to the center system. However, by receiving the communication-related information from the communication adapter and storing and managing the information in the HDD, each electronic device registered as a device to be managed can be reliably managed on the center system side.

[Second embodiment]
Next, a second embodiment will be described. In the second embodiment, the following processing is performed in addition to the processing of the first embodiment.
FIG. 8 is a flowchart showing an example of the content of the communication mode setting change process by the copying machine 23. It should be noted that other electronic devices such as the printer 24 perform the same processing, and the corresponding illustration and description will be omitted.
FIG. 9 is a flowchart illustrating an example of the content of the communication-related information updating process performed by the communication adapter 21.

  The communication adapter 21 can manage a plurality of electronic devices performing communication in different communication modes by the device search described above. However, if the setting of the communication mode of any of the electronic devices is changed (IP communication mode⇔IPsec communication mode), the communication adapter 21 attempts to perform communication in the communication mode in which communication was possible up to now. , Can not communicate. For this reason, the state becomes the same as when the power of the electronic device is turned off, and it is impossible to manage the electronic device even when the electronic device is operating.

Therefore, the CPU 101 of the copying machine 23 periodically starts the processing routine of FIG. 8, and first determines in step S21 whether or not an instruction to change the communication mode setting has been given by the user interface (operation of the operation unit 111). If the setting change is not instructed, the processing routine of FIG. 8 ends.
When the setting change of the communication mode is instructed, the communication mode is specified by the user interface. Therefore, in step S22, the setting change information including the information of the specified communication mode is transmitted to the communication adapter 21 together with its own device information. Send to

Then, after the communication is successful, the setting is changed to the communication mode specified by the user interface in step S23. For example, when the IPsec communication mode (transport mode) is specified in a state where the IP communication mode is set, the setting is changed to the specified IPsec communication mode. Alternatively, when the IP communication mode is specified in a state where the IPsec communication mode (transport mode) is set, the setting is changed to the specified IP communication mode.
When the setting change is completed, the processing routine of FIG. 8 ends.

On the other hand, the CPU 44 of the communication adapter 21 periodically starts the processing routine of FIG. 9, and first determines in step S31 whether or not setting change information has been received from any of the electronic devices. If not, the processing routine of FIG. 9 is terminated.
If the setting change information is received together with the device information from any one of the electronic devices, the communication-related information stored in the RAM 46 is updated based on the information in step S32.

That is, the communication mode corresponding to the received device information in the communication related information is updated to the communication mode specified by the setting change information (the communication mode after the setting change).
Then, in step S33, the updated communication-related information is transmitted to the center system 1 by HTTPS communication, and the processing routine in FIG. 9 ends.
When receiving the updated communication-related information from the communication adapter 21, the CPU 31 of the server 3a of the center system 1 receives the communication-related information stored in the HDD (DB) 37 based on the communication-related information. Device management information).

Here, the processing related to the change of the communication mode setting by the copying machine 23 and the communication adapter 21 when the change of the communication mode setting is instructed by the copying machine 23 will be described in more detail.
FIG. 10 is a diagram for explaining a specific example of a process related to a change in communication mode setting by the copying machine 23 and the communication adapter 21.

The CPU 101 of the copying machine 23 having the IP address “192.168.30.70” is in a state where the transport mode (one of the IPsec communication modes) is set and the user interface instructs the setting change to the IP communication mode. After transmitting the setting change information to the communication adapter 21 together with the device information, the setting change is performed from the transport mode to the specified IP communication mode.
When the CPU 44 of the communication adapter 21 receives the setting change information from the copying machine 23 with the IP address “192.168.30.70” together with the device information, the communication mode corresponding to the received device information among the communication-related information held in the RAM 46. Is updated to the communication mode specified by the setting change information, and the updated communication-related information is transmitted to the center system 1.

  As described above, according to the second embodiment, the following operation and effect can be obtained in addition to the same operation and effect as the first embodiment. That is, when each electronic device is instructed to change the setting of the communication mode used for communication with the communication adapter, the setting change information is transmitted to the communication adapter, and then the communication mode setting is changed. When the adapter receives the setting change information from any of the electronic devices, the adapter updates the communication-related information held by itself based on the setting change information, and transmits the updated communication-related information to the center system. When the center system receives the updated communication-related information from the communication adapter, the center system updates the communication-related information stored and managed therein based on the communication-related information. Even if the communication mode setting is changed on the device, there is no possibility that communication with the communication adapter will be disabled. The number is reduced.

[Third embodiment]
Next, a third embodiment will be described. In the third embodiment, the following processing is performed in addition to the processing of the first embodiment.
FIG. 11 is a flowchart illustrating an example of the content of the communication mode setting change information transmission process performed by the center system 1.
FIG. 12 is a flowchart illustrating another example of the content of the communication-related information updating process performed by the communication adapter 21.

The CPU 31 of the server 3a of the center system 1 periodically starts the processing routine of FIG. 11, and first, in step S41, the user interface (a terminal device such as a PC (not shown) in the center system 1) communicates with the customer's electronic device. It is determined whether a change in the mode setting has been instructed. If the change in the mode has not been instructed, the processing routine in FIG. 11 ends.
When the communication mode setting change is instructed, the user interface is used to input the device information of the electronic device whose setting is to be changed and the communication mode is specified. Therefore, the following process is performed in step S42.

That is, the setting change information including the communication mode information specified by the user interface is transmitted to the communication adapter 21 by HTTPS communication together with the device information input by the user interface.
After the communication is successful, the communication-related information stored in the HDD (DB) 37 is updated based on the device information of the electronic device to be changed and the communication mode specified by the user interface in step S43. . That is, the communication mode corresponding to the input device information in the communication related information is updated to the specified communication mode.

On the other hand, the CPU 44 of the communication adapter 21 periodically starts the processing routine of FIG. 12, first determines in step S51 whether or not the setting change information has been received from the center system 1, and receives the setting change information. If not, the processing routine of FIG. 12 ends.
When the setting change information is received from the center system 1 together with the device information, the following processing is performed in step S52.

That is, the electronic device to be managed is searched, and if there is an electronic device indicated by the received device information, the setting change information received by HTTPS is transmitted to the electronic device.
After the communication is successful, the communication-related information stored in the RAM 46 is updated based on the setting change information and the device information received in step S53.
Upon receiving the setting change information from the communication adapter 21, the CPU of each electronic device (such as the CPU 101 of the copying machine 23) changes the setting to the communication mode specified by the setting change information.

Here, the processing related to the change of the communication mode setting by the center system 1, the communication adapter 21, and the copying machine 23 when the change of the communication mode setting is instructed by the center system 1 will be described in more detail.
FIG. 13 is a diagram for explaining a specific example of processing relating to a change in communication mode setting by the center system 1, the communication adapter 21, and the copying machine 23.

  The CPU 31 of the server 3a of the center system 1 sends a command to the copier 23 of the IP address "192.168.30.70" for which the transport mode has been set by the user interface to change the setting to the IP communication mode. After transmitting the setting change information to the communication adapter 21 together with the device information of the copying machine 23, the communication mode corresponding to the input device information is designated from among the communication-related information stored in the HDD (DB) 37. Update the communication mode.

When the CPU 44 of the communication adapter 21 receives the setting change information from the center system 1 together with the device information, the CPU 44 transmits the setting change information to the copying machine 23 indicated by the device information. Then, the communication mode corresponding to the received device information is updated to the communication mode specified by the setting change information.
Upon receiving the setting change information from the communication adapter 21, the CPU 101 of the copying machine 23 having the IP address “192.168.30.70” changes the setting from the transport mode to the IP communication mode specified by the setting change information.

  As described above, according to the third embodiment, the following operation and effect can be obtained in addition to the same operation and effect as the first embodiment. In other words, when the center system is instructed to change the setting of the communication mode used for communication with one of the communication adapters of each electronic device, the center system transmits the setting change information to the communication adapter, and transmits the setting change information. Updates the communication-related information stored and managed on the basis of the communication adapter, and when the communication adapter receives the setting change information from the center system, transmits the setting change information to the corresponding one of the electronic devices. And updates the communication-related information held by itself based on the received setting change information. When each electronic device receives the setting change information from the communication adapter, the communication is performed based on the setting change information. By changing the mode setting, communication with the communication adapter may not be disabled even if the communication mode setting is changed on the electronic device. Becomes therefore, it decreases the number of times to perform the device search processing in the communication adapter side. Further, since the setting change of the communication mode of each electronic device is performed by remote control using the center system, the work load on the user side is reduced.

[Fourth embodiment]
Next, a fourth embodiment will be described. In the fourth embodiment, the following processing is performed in addition to the processing of the second embodiment.
FIG. 14 is a flowchart illustrating an example of the content of the security information selection / transmission process performed by the communication adapter 21.
FIG. 15 is a flowchart showing an example of the content of the security information update process by the copying machine 23. It should be noted that other electronic devices such as the printer 24 perform the same processing, and the corresponding illustration and description will be omitted.

The CPU 44 of the communication adapter 21 periodically starts the processing routine of FIG. 14, and first determines in step S61 whether a change in security information has been instructed by the user interface (the switch 48 or the input unit of the terminal device). If the change is not instructed, the processing routine of FIG. 14 ends.
When the change of the security information is instructed, the following processing is performed in step S62.

  That is, a list of a plurality of different pieces of security information (SA information or SP information) required for communication in the IPsec communication mode (security communication mode) held in the RAM 46 is read out and displayed on the display unit 49 or a terminal such as a PC (not shown). Display on the display of the device. Note that the security information list can be input in advance through the user interface and stored in the RAM 46.

Next, proceeding to step S63, when selection of any security information in the list of security information displayed on the display unit 49 or the display unit of the terminal device is instructed by the user interface, the security information is selected. .
Next, the process proceeds to step S64, and when a change destination of the security information is designated by the user interface from the electronic devices to be managed, the change destination electronic device is selected.
When the selection of the security information and the change destination electronic device is completed, the selected security information is transmitted to the selected electronic device by HTTPS communication in step S65, and the processing routine of FIG. 14 ends.

On the other hand, the CPU 101 of the copying machine 23 starts the processing routine of FIG. 15 periodically, first determines in step S71 whether security information has been received from the communication adapter 21, and if the security information has not been received. The processing routine in FIG. 15 ends.
If security information is received from the communication adapter 21, the security information held in the RAM 103 is updated to the received security information in step S72, and the processing routine of FIG. 15 ends. When security information is received for the first time after the initial installation of the copying machine 23, the security information is held in the RAM 103 as it is.

Here, the processing related to the update of the security information by the communication adapter 21 and the copying machine 23 when the selection of the security information is instructed by the communication adapter 21 will be described in more detail.
FIG. 16 is a diagram for explaining a specific example of a process related to updating of security information by the communication adapter 21 and the copying machine 23.

The CPU 44 of the communication adapter 21 selects any security information from the security information list according to an instruction from the user interface, selects the copy machine 23 with the IP address “192.168.30.70” as the security information change destination, and then selects The selected security information is transmitted to the copying machine 23 via HTTPS communication.
When receiving the security information from the communication adapter 21, the CPU 101 of the copying machine 23 having the IP address “192.168.30.70” updates the security information stored in the RAM 103 to the received security information. The updated security information is used when performing IPsec communication.

  As described above, according to the fourth embodiment, the following operation and effect can be obtained in addition to the same operation and effect as the second embodiment. In other words, the communication adapter selects any of the security information held by the communication adapter, selects a destination to change the security information from among the electronic devices, and then transmits the selected security information to the selected electronic device. Since the electronic device that has transmitted and received the security information updates the security information held by itself with the received security information, the communication adapter can centrally update the security information of each electronic device. In addition, the operation time can be secured by shortening the time required for the update. Thus, the operation efficiency of the electronic device can be further improved.

[Fifth embodiment]
Next, a fifth embodiment will be described. In the fifth embodiment, the following processing is performed in addition to the processing of the third embodiment.
FIG. 17 is a flowchart showing an example of the content of the security information selection / transmission processing by the center system 1.
FIG. 18 is a flowchart illustrating an example of the content of the security information transmission process performed by the communication adapter 21.

  The CPU 31 of the server 3a of the center system 1 periodically starts the processing routine of FIG. 17, and first determines in step S81 whether or not an instruction to change the security information for the electronic device of the customer has been issued by the user interface. If no change is instructed, the processing routine of FIG. 17 ends.

  If the change of the security information is instructed, the process proceeds to step S82, where a list of a plurality of different security information (SA information or SP information) necessary for communication in the IPsec communication mode held in the HDD 37 is read out and read. It is displayed on a display unit of a terminal device (not shown). The security information list can be input in advance through the user interface and stored in the HDD 37.

Next, the process proceeds to step S83, and when selection of any security information in the list of security information displayed on the display unit of the terminal device is instructed by the user interface, the security information is selected.
Next, in step S84, when a change destination of the security information is designated by the user interface from the electronic devices to be managed, the change destination electronic device is selected.
When the selection of the security information and the electronic device to be changed is completed, the selected security information is transmitted to the communication adapter 21 together with the device information of the selected electronic device by HTTPS communication in step S85, and the processing routine of FIG. 17 ends. .

On the other hand, the CPU 44 of the communication adapter 21 starts the processing routine of FIG. 18 periodically, first determines in step S91 whether or not security information has been received from the center system 1, and if the security information has not been received. The processing routine of FIG. 18 ends.
If the security information is received together with the device information from the center system 1, the process proceeds to step S92, where the electronic device to be managed is searched, and if there is an electronic device indicated by the received device information, the electronic device is sent to the electronic device. The received security information is transmitted by HTTPS communication.

When security information is received from the communication adapter 21 by the same processing as in FIG. 15, the CPU 101 of the copier 23 updates the security information held in the RAM 103 to the received security information in step S72.
Here, the processing regarding updating of security information by the center system 1, the communication adapter 21, and the copying machine 23 when the selection of security information is instructed by the center system 1 will be described in more detail.
FIG. 19 is a diagram for explaining a specific example of processing related to update of security information by the center system 1, the communication adapter 21, and the copying machine 23.

  The CPU 31 of the server 3a of the center system 1 selects an arbitrary security information from the list of security information and selects the copying machine 23 of the IP address "192.168.30.70" as the destination of the security information according to an instruction from the user interface. Thereafter, the selected security information is transmitted to the communication adapter 21 together with the selected device information of the copying machine 23 by HTTPS communication.

Upon receiving the security information from the center system 1, the CPU 44 of the communication adapter 21 transmits the security information to the copying machine 23 having the IP address “192.168.30.70” indicated by the device information.
When receiving the security information from the communication adapter 21, the CPU 101 of the copying machine 23 having the IP address “192.168.30.70” updates the security information stored in the RAM 103 to the received security information.

  As described above, according to the fifth embodiment, the following operation and effect can be obtained in addition to the same operation and effect as the third embodiment. In other words, the center system selects one of the security information held by itself, selects a destination to change the security information from among the electronic devices, and then selects the selected security information of the selected electronic device. The communication adapter that has transmitted the security information and device information to the communication adapter together with the device information transmits the security information to the electronic device indicated by the device information, and the electronic device that received the security information retains itself. By updating the received security information to the received security information, the center system can centrally update the security information of each electronic device via the communication adapter. It becomes possible to secure. Further, since the security information of each electronic device is changed by remote control by the center system, the work load on the user side is further reduced. Thus, the operation efficiency of the electronic device can be further improved.

As is apparent from the above description, according to the present invention, even in an environment in which a communication device communicates with a plurality of electronic devices in different communication modes, the burden of management work by a network administrator increases, and network security increases. Since the reduction can be avoided, the operation efficiency of the electronic device can be improved. Therefore, it is possible to provide an electronic device management system, a communication device, and a communication method with high operation efficiency.

1: Center system (central management device) 2, 11, 300: Routers 3a, 3b: Servers 4, 15, 25, 310: Network 5: Internet 6: Public communication line network 7: Access points 12, 21: Communication adapter 13 , 23, 231, 301: Copiers 14, 24, 241, 302: Printer 22: Facsimile machine 26: Dedicated I / F 31, 44, 101: CPU 32: Real time clock circuit 35: External memory control unit 36, 43, 110: Network I / F unit 37: Hard disk device 41: Line switching circuit 42: Modem 47: Battery 48: Switch 49: Display unit 111: Operation unit

JP 2004-221696 A

Claims (7)

In an electronic device management system including a communication device that communicates with one or more electronic devices and a management device that manages the electronic device via the communication device,
In the communication device,
For each of the one or more electronic devices, sequentially executes communication in a plurality of different communication methods until there is a response, device information obtaining means for obtaining device information from the electronic device that responded,
When communicating with the electronic device whose device information is obtained by the device information obtaining unit, a communication unit that performs communication in a communication method when the device information is obtained,
Transmitting means for transmitting to the management device information that associates the device information obtained by the device information obtaining means and the communication method at the time of the obtained,
In the management device,
An electronic device management system, further comprising a receiving unit that receives the information transmitted from the communication device. The electronic device management system according to claim 1,
An electronic device management system, wherein the communication device includes a setting unit that sets an execution order of communication in each of the plurality of different communication methods used by the device information obtaining unit. The electronic device management system according to claim 2,
The electronic device management system according to claim 1, wherein the setting unit of the communication device includes a unit that sets whether communication is performed in each of the communication methods used by the device information obtaining unit. The electronic device management system according to any one of claims 1 to 3,
In the communication device,
A communication status check unit that checks a communication status with the one or more electronic devices, and, as a result of the check by the communication status check unit, when communication with any one of the one or more electronic devices is disabled, The device information obtaining means sequentially executes communication in a plurality of different communication modes with respect to the one or more electronic devices, and when a response is received, the device is transmitted from the electronic device by the communication method in which the response was received. Means for starting a process of acquiring information. A the communication apparatus constituting the electronic equipment management system including a communication device that communicates with the one or more electronics, a management device and which manages the electronic device via the communication device,
For each of the one or more electronic devices, sequentially executes communication in a plurality of different communication methods until there is a response, device information obtaining means for obtaining device information from the electronic device that responded,
When communicating with the electronic device whose device information is obtained by the device information obtaining unit, a communication unit that performs communication in a communication method when the device information is obtained,
Transmitting means for transmitting to the management device information that associates the device information obtained by the device information obtaining means with the communication method at the time of the obtaining,
A communication device comprising: A communication method by the communication device for an electronic apparatus management system including a communication device that communicates with the one or more electronics, a management device and which manages the electronic device via the communication device,
For each of the one or more electronic devices, sequentially execute communication in a plurality of different communication methods until there is a response, device information acquisition procedure to obtain device information from the electronic device that responded,
When performing communication with the electronic device from which the device information is obtained by the device information obtaining procedure, a communication procedure for performing communication in a communication method when the device information is obtained,
A transmission procedure of transmitting to the management device information that associates the device information acquired by the device information acquisition procedure and the communication method at the time of the acquisition,
A communication method comprising: A computer that controls the communication device configuring an electronic device management system including a communication device that communicates with one or more electronic devices, and a management device that manages the electronic device via the communication device,
For each of the one or more electronic devices, sequentially executes communication in a plurality of different communication methods until there is a response, device information obtaining means for obtaining device information from the electronic device that responded,
When communicating with the electronic device whose device information is obtained by the device information obtaining unit, a communication unit that performs communication in a communication method when the device information is obtained ,
Program for operating as a transmitting means for transmitting information associating the communication system when the acquired and the acquired device information by the device information acquiring unit to the management device.

Images