WO2007094059A1

WO2007094059A1 - Data transmitting and receiving method

Info

Publication number: WO2007094059A1
Application number: PCT/JP2006/302666
Authority: WO
Inventors: Masanobu Shodoji; Hideyuki Nagai
Original assignee: R & W, Inc.
Priority date: 2006-02-15
Filing date: 2006-02-15
Publication date: 2007-08-23

Abstract

A data transmitting and receiving method is provided to ensure security, so that it can be hardly subjected to attacks by means of a wiretap, falsification, or the like, in communication paths between devices, and a copy, or the like, at a data storing server. A managing server (10) for managing to transmit and receive capsulated data and a terminal device (30) for receiving the same on a receiving side are connected with each other through a communication network. The managing server (10) and a terminal device (20) on a transmitting side set up a VPN tunnel (50) at a connection request from the terminal device (20) on a transmitting side. Similarly, the managing server (10) and the terminal device (30) on a receiving side set up a VPN tunnel (51) at a connection request from the terminal device (30) on a receiving side. In this way, when the VPN tunnel is set up from the terminal device (20) on the transmitting side to the terminal device (30) on the receiving side through the managing server (10), the transmission and reception of the capsulated data are carried out.

Description

Specification

How to send and receive data

Technical field

The present invention relates to a method, server, and system for transmitting / receiving capsule data between devices.

Background art

Conventionally, a system power for transmitting and receiving data such as e-mails and files between devices connected to the Internet has been widely spread and used. However, such systems are exposed to the risk of attacks by malicious third parties such as eavesdropping, falsification, and impersonation of documents because they use the Internet. Therefore, various techniques for ensuring security when data is transmitted via the Internet have been disclosed.

[0003] For example, technologies such as encryption using SSL (Secure Sockets Layer), authentication using IPsec (Security Architecture for Internet Protocol), authentication, and tunneling have been used. Patent Document 1 discloses a technique that makes it impossible to send and receive encrypted mails other than a predetermined communication path by using a mail guard device that performs data flow control in an encrypted mail system. Yes. For file transfer, communication protocols such as SFTP (Secure File Transfer Protocol) with improved FTP (File Transfer Protocol) security have been developed.

Patent Document 1: Japanese Translation of Special Publication 2001-345832

Disclosure of the invention

Problems to be solved by the invention

[0004] However, even with the encryption according to Patent Document 1 described above, not all data is encrypted, so there is a risk that the header information of the mail can be read. When receiving e-mail, the mail data is temporarily stored in the mailbox managed by the mail server. In normal operation, the mailbox is placed in an area called the DMZ (Demilitized Zone), so even if the security on the communication path is secured by the above-described technology such as tunneling, the mailbox is copied. There is a risk of being attacked.

[0005] Similarly, in the case of file transfer (FTP), since the server that stores the file is placed in the DMZ, there is a risk that the file will be copied from the sano. In addition, SS

Since it is necessary to open the H (Secure Shell) port, there is a risk of eavesdropping, tampering and copying.

Therefore, the present invention is less susceptible to attacks such as eavesdropping and tampering on the communication path between devices.

It is a first object of the present invention to provide a data transmission / reception method that ensures security.

[0007] Furthermore, a second object is to provide a data transmission / reception method that secures security that is resistant to attacks such as copying from Sano that stores data.

Means for solving the problem

[0008] Specifically, the following is provided.

[0009] (1) A method for transmitting and receiving capsule data between a transmission-side terminal and a reception-side terminal connected to a management server via a communication line,

The management server storing authentication data for authenticating users of the transmitting terminal and the receiving terminal; and

In response to the management server receiving connection request data to the management server from the transmission side terminal and the reception side terminal, respectively, based on the connection request data and the authentication data, the transmission side terminal and reception Authenticating the user of each side terminal,

The management server identifying the transmitting terminal and the receiving terminal used by the authenticated user; and

A step in which the management server establishes a tunneling connection for transmitting and receiving the capsule data between the specified transmitting terminal and the receiving terminal;

The transmitting-side terminal power, in response to receiving the capsule data by the tunneling connection, the management server transmits the encapsulated data to the receiving terminal by the tunneling connection;

Including methods. [0010] According to the invention of (1), the management server stores authentication data for authenticating each user of the transmission side terminal and the reception side terminal, from the transmission side terminal and the reception side terminal. In response to receiving the connection request data to the management server, the user of each of the transmitting terminal and the receiving terminal is authenticated based on the connection request data and the authentication data, and the authenticated user is authenticated. Identifying the transmitting terminal and the receiving terminal to be used, and establishing a tunneling connection for transmitting and receiving capsule data between the identifying transmitting terminal and the receiving terminal, In response to receiving the capsule data by the tunneling connection, the transmission side terminal power is connected to the receiving terminal by the tunneling connection. Send cellized data.

[0011] With this, the terminal can transmit encapsulated mail data or the like via a communication path in which security is ensured by, for example, VPN (Virtual Private Network). In addition, for example, in the case of mail transmission, since mail data is not stored in the mailbox on the management server, the receiving terminal can receive it directly, so there is a risk of eavesdropping and tampering attacks. There is a possibility of lowering.

(2) The management server is unable to obtain a connection by the tunneling with the receiving side terminal or until the transmission of the capsule data to the receiving side terminal is completed. If you lose

In order to establish a connection by tunneling with the receiving terminal, the management server waits for connection request data from the receiving terminal and notifies that there is a connection request from the transmitting terminal. The method according to (1), further comprising a step of transmitting data to the receiving terminal.

[0013] According to the invention of (2), the management server cannot obtain a connection by the tunneling with the receiving terminal, or the transmission of capsule data to the receiving terminal is completed. Connection request from the transmitting terminal while waiting for connection request data from the receiving terminal to establish a connection by tunneling with the receiving terminal when the connection is lost Data notifying that there has been is transmitted to the receiving terminal. [0014] With this, if the receiving terminal is in a state where it can communicate with the management server, the user of the receiving terminal displays with the data notifying that there is a connection request by tunneling of the transmitting terminal power And so on. Then, the transmitting terminal can transmit the mail data after waiting for establishment of a VPN connection or the like with the receiving terminal. Therefore, the user of the transmitting terminal can give an instruction to transmit capsule data such as mail transmission with secured security regardless of the current connection state of the receiving terminal.

(3) The management server is unable to obtain a connection by the tunneling with the transmission side terminal, or until the transmission of the capsule data to the reception side terminal is completed. If you lose

In response to receiving the connection request data of the receiving terminal, the management server waits for the connection request data from the transmitting terminal and notifies that there is a connection request from the receiving terminal. The method according to (1) or (2), further including a step of transmitting data to be transmitted to the transmitting terminal.

[0016] According to the invention of (3), the management server is not able to obtain a connection by the tunneling with the transmission side terminal, or transmission of capsule data to the reception side terminal is completed. If the connection is lost before the connection, the reception side terminal waits for the connection request data from the transmission side terminal in response to receiving the connection request data of the reception side terminal power. Data notifying that there has been a connection request from is sent to the transmitting terminal.

[0017] With this, if the transmitting terminal is in a state where it can communicate with the management server, the user of the transmitting terminal displays a display with data notifying that there has been a connection request by tunneling of the receiving terminal. And so on. Therefore, even if the tunneling connection is lost before the transmission of the encapsulated data is completed, the transmission side terminal can make the connection in a timely manner, so that the possibility of data transmission failure may be reduced. .

[0018] Further, for example, the transmission side terminal performs only notification for requesting reception preparation to the reception side terminal via the management server or directly to the reception side terminal, so that the reception side terminal performs the capsule data Wait for preparation for reception, and confirm the connection by the tunneling. Can stand. Therefore, the user of the transmitting terminal may be able to reduce the restraint time until transmission is completed.

(4) A method for transmitting and receiving capsule data between a transmission-side terminal and a reception-side terminal connected to a management server via a communication line,

The management server authenticating the user of the transmission side terminal based on the connection request data and the authentication data in response to receiving the connection request data to the management server from the transmission side terminal; ,

The management server identifying the transmitting terminal used by the authenticated user;

The management server establishing a tunneling connection for receiving the encapsulated data from the identified transmitting terminal; and

The management server receiving and storing the force Pselich data from the transmitting terminal through the tunneling connection;

The management server authenticating the user of the receiving terminal based on the connection request data and the authentication data in response to receiving the connection request data to the management server from the receiving terminal; ,

The management server identifying the receiving terminal used by the authenticated user;

The management server establishing a connection by tunneling for transmitting the encapsulated data to the specified receiving terminal;

The management server transmitting the stored encapsulated data to the receiving terminal through the tunneling connection;

Including methods.

[0020] According to the invention of (4), the management server stores authentication data for authenticating each user of the transmission side terminal and the reception side terminal, and from the transmission side terminal to the management server In response to receiving the connection request data, the connection request data and the authentication To authenticate the user of the transmitting terminal based on the data, identify the transmitting terminal used by the authenticated user, and receive the encapsulated data from the identified transmitting terminal In response to establishment of a connection by tunneling, receiving and storing the capsule data from the transmitting terminal through the tunneling connection, and receiving connection request data to the management server from the receiving terminal. Then, based on the connection request data and the authentication data, the user of the receiving terminal is authenticated, the receiving terminal used by the authenticated user is specified, and the specified receiving terminal is A connection by tunneling for transmitting capsule data is established, and the memory stored in the receiving terminal is connected by the tunneling connection. To send Serui spoon data.

[0021] As a result, the management server is more secure than a server such as a mailbox placed in the DMZ! The capsule data such as e-mail data can be temporarily stored in the area (area where security that can be connected only by VPN etc. is secured). Therefore, the transmitting terminal that can wait for the connection with the receiving terminal to establish a connection can transmit capsule data such as a secure mail. Further, when the transmission side terminal completes transmission of the encapsulated data to the management server, the connection by the tunneling can be released without waiting for transmission of capsule data from the management server to the reception side terminal.

[0022] (5) The management server waits for connection request data from the receiving terminal to establish connection with the receiving terminal and establishes a connection request data from the transmitting terminal. (4) The method according to (4), further including a step of transmitting data notifying that there has been transmission to the receiving terminal.

[0023] According to the invention of (5), the management server waits for connection request data from the receiving side terminal and establishes a connection by tunneling with the receiving side terminal, while the transmitting side terminal Transmits data notifying that encapsulated data has been transmitted to the receiving terminal.

[0024] Thus, the user of the receiving terminal knows that capsule data such as mail has been transmitted in a state in which the receiving terminal can communicate with the management server. There is a possibility that the capsule data can be received while ensuring security in a timely manner. Therefore, since encapsulated data such as mail data is not stored on the management server for an unnecessarily long time, there is a possibility that the encapsulated data may be subjected to an attack such as copying.

[0025] (6) A method for transmitting and receiving capsule data via a receiving server between a transmitting terminal connected to a management server via a communication line and a receiving terminal, the management server comprising: A step in which the server stores authentication data for authenticating each of the transmitting user of the transmitting terminal and the receiving user associated with the receiving server in advance;

In response to the management server receiving connection request data to the management server from the transmission side terminal and reception side server, respectively, based on the connection request data and the authentication data, the transmission user and the reception user respectively. The step of authenticating

The management server identifying the transmitting terminal and the receiving server used by the authenticated user; and

A step in which the management server establishes a connection by tunneling for transmitting / receiving encapsulated data to / from the specified transmitting terminal and the receiving server;

The transmitting-side terminal power, in response to receiving the capsule data by the tunneling connection, the management server transmits the capsule data to the receiving server by the tunneling connection;

The receiving server power storing the encapsulated data addressed to the receiving user;

The receiving server transmitting the stored encapsulated data to the receiving terminal in response to a request from the receiving terminal;

Including methods.

[0026] According to the invention of (6), the management server authenticates each of the transmitting user of the transmitting terminal and the receiving user associated in advance with the receiving server. In response to receiving connection request data to the management server from the transmission side terminal and the reception side server, respectively, based on the connection request data and the authentication data, Authenticate each receiving user, identify the transmitting terminal and receiving server used by the authenticated user, and between the identifying transmitting terminal and the receiving server, A connection by tunneling for transmitting / receiving the encapsulated data is established, and in response to receiving the capsule data by the connection by the tunneling from the transmission side terminal, the reception side server performs the tunneling by the tunneling described above. The capsule data is transmitted by connection. The receiving server stores the encapsulated data addressed to the receiving user. The management server transmits the stored encapsulated data to the receiving terminal in response to a request from the receiving terminal.

[0027] By this means, the transmission side terminal can communicate with the reception side server via the management server by tunneling, so that the reception side server does not need to be placed in the DMZ. The receiving server placed in the secured area can receive the capsule data such as mails for a plurality of users associated in advance in a lump. Therefore, a user associated with the receiving server that does not need to make a VPN connection with each of a plurality of users can receive the capsule data in the LAN as needed. There is a possibility of improving the efficiency of sending and receiving capsule data such as mail.

[0028] (7) A method for transmitting and receiving encapsulated data between a transmission side terminal and a reception side terminal connected to the management server via a communication line via the transmission side server and the reception side server. And

The management server storing authentication data for authenticating each of a transmission user associated in advance with the transmission side server and a reception user associated in advance with the reception side server;

In response to the management server receiving connection request data to the management server from the transmitting server and the receiving server, respectively, based on the connection request data and the authentication data, the transmitting user and the receiving user Each authentication step, The management server identifying the transmitting server and the receiving server associated with the authenticated user; and

A step in which the management server establishes a tunneling connection for transmitting and receiving encapsulated data to and from the specified transmitting server and the receiving server;

The transmitting server receiving and storing the encapsulated data from the transmitting terminal;

In response to receiving the capsule data from the transmission side sano through the tunneling connection, the management server transmits the capsule data to the reception side server through the tunneling connection;

The receiving server storing the encapsulated data addressed to the receiving user;

Including methods.

According to the invention of (7), the management server stores authentication data for authenticating each of the transmitting user associated in advance with the transmitting server and the receiving user previously associated with the receiving server. Each of the transmitting user and the receiving user based on the connection request data and the authentication data in response to receiving the connection request data to the management server from the transmitting server and the receiving server, respectively. The sender server and receiver server associated with the authenticated user, and encapsulated data with the specified sender server and with the receiver server. Establish a tunneling connection to send and receive. Then, in response to the transmission server receiving and storing the encapsulated data from the transmission side terminal and receiving the capsule data from the transmission side sano through the tunneling connection, the management server The capsule data is transmitted by the tunneling connection to the receiving server. Subsequently, the receiving side server stores the encapsulated data addressed to the receiving user, from the receiving side terminal In response to the request, the stored capsule data is transmitted to the receiving terminal.

[0030] With this, the receiving server can communicate with the transmitting server via the management server by tunneling, so that the transmitting server does not need to be placed in the DMZ. Then, the sending server placed in the area where security is secured can collectively receive capsule data such as e-mails associated with multiple users. Therefore, a user associated with the transmitting server that does not need to make a VPN connection with each of a plurality of users can transmit the capsule data in a LAN in a timely manner. There is a possibility of improving the efficiency of data transmission / reception.

[0031] (8) The transmission side server specifies a destination management server that manages a destination on the reception side based on data indicating a transmission destination user of the encapsulated data; and A server sending data identifying the receiving server in response to a request from the sending server;

The method according to (7), further comprising:

[0032] According to the invention of (8), the transmission side server specifies a destination management server that manages a reception side destination based on data indicating a transmission destination user of the encapsulated data. The destination management server transmits data specifying the receiving server in response to the request from the transmitting server.

Thus, the transmission side server can acquire an IP address or the like specifying the reception side server, for example, by designating a transmission destination mail address. Therefore, a user who transmits encapsulated data such as e-mail data may be able to easily specify the other party associated with the connection request.

(9) the sender server storing sender authentication data for authenticating a user of the sender terminal;

Authenticating a user of the transmitting terminal based on the connection request data and the sender authentication data in response to the transmitting server receiving connection request data from the transmitting terminal;

The sender server identifying the sender terminal used by the authenticated user; A step of establishing a tunneling connection for transmitting and receiving the encapsulated data to and from the transmitting terminal that has been identified by the transmitting server;

Further including

(7) or (8), wherein the step of receiving the capsule data by the transmitting server receives the capsule data by the connection by the tunneling. the method of.

[0035] According to the invention of (9), the transmitting server stores sender authentication data for authenticating a user of the transmitting terminal, and receives connection request data from the transmitting terminal. Accordingly, based on the connection request data and the sender authentication data, the user of the transmission side terminal is authenticated, the transmission side terminal used by the authenticated user is specified, and the specified transmission side A connection by tunneling for transmitting and receiving the encapsulated data is established with the terminal, and the capsule data is received from the transmitting terminal by the tunneling connection.

[0036] From this fact, the transmission side terminal can be connected to the transmission side sano by tunneling that ensures security. Therefore, a user who transmits capsule data such as mail data can transmit the encapsulated data while ensuring security even if it is not in the same LAN as the transmitting server. Therefore, the sending server can be a server managed by a third party such as ISP (Internet Services Provider).

[0037] (10) The receiver server stores receiver authentication data for authenticating a user of the receiver terminal;

Data for notifying that the receiving server stores the encapsulated data while waiting for connection request data from the receiving terminal in order to establish a connection by tunneling with the receiving terminal. To the receiving terminal, and in response to the receiving server receiving the receiving terminal power connection request data, based on the connection request data and the receiver authentication data, the receiving terminal Authenticating users of

The receiving server identifying the receiving terminal used by the authenticated user; and The receiving server establishing a tunneled connection for transmitting and receiving encapsulated data with the specified receiving terminal; and

Further including

(6) to (9), wherein the step in which the receiving server transmits the encapsulated data to the receiving terminal transmits the stored capsule data by the connection by the tunneling. ), The method described in any of the above.

[0038] According to the invention of (10), the receiving server stores receiver authentication data for authenticating a user of the receiving terminal, and establishes a connection by tunneling with the receiving terminal. Therefore, while waiting for the connection request data from the receiving terminal, the capsule data is stored, and data notifying is transmitted to the receiving terminal, and the receiving terminal power connection request is transmitted. In response to receiving the data, the user of the receiving terminal is authenticated based on the connection request data and the receiver authentication data, and the receiving terminal used by the authenticated user is specified. Then, the receiving server establishes a tunneling connection for transmitting and receiving the encapsulated data to and from the specified receiving terminal, and stores the memory by the tunneling connection. Transmitting the Kapuserui 匕De over data to the receiving terminal.

[0039] Thus, the receiving side terminal can be connected to the receiving side sano by tunneling that ensures security. Therefore, a user who receives capsule data such as mail data can receive the encapsulated data while ensuring security even if it is not in the same LAN as the receiving server. Therefore, the receiving server can be a server managed by a third party such as an ISP.

[0040] (11) A method for transmitting and receiving capsule data between a transmission-side terminal and a reception-side terminal connected to a management server via a communication line,

In response to the management server receiving connection request data to the management server from the transmission side terminal and the reception side terminal, respectively, based on the connection request data and the authentication data, the transmission side terminal and reception Authenticate the user of each side terminal And steps

The management server transmitting communication path data for establishing a connection by tunneling for transmitting / receiving the capsule data to / from the transmitting terminal and the receiving terminal that have been identified;

In response to receiving the communication path data, establishing a connection by the transmitting terminal and the receiving terminal force the tunneling;

The transmitting terminal transmitting the capsule data to the receiving terminal; and

Including methods.

[0041] According to the invention of (11), the management server stores authentication data for authenticating each user of the transmission side terminal and the reception side terminal, and the management server stores the authentication data from the transmission side terminal and the reception side terminal. In response to receiving the connection request data to the server, each of the transmitting terminal and the receiving terminal is authenticated based on the connection request data and the authentication data, and the authenticated user is authenticated. Communication for establishing a connection by tunneling for identifying the transmitting terminal and the receiving terminal used by the mobile station and for transmitting and receiving capsule data to each other to the identified transmitting terminal and receiving terminal Send route data. In response to receiving the communication path data, the transmission side terminal and the reception side terminal establish a connection by the tunneling, and the transmission side terminal transmits the encapsulated data to the reception side terminal. .

[0042] As a result, since the receiving side terminal and the transmitting side terminal directly send and receive capsule data such as mail data, it receives unauthorized access such as eavesdropping and tampering more than when the management server relays it. Potential points can be reduced.

(12) A method for transmitting / receiving capsule data between a file server connected to a management server via a communication line and a transmission / reception server,

The management server storing authentication data for authenticating each of the file server and the transmission / reception server; In response to the management server receiving connection request data to the management server from the file server and the transmission / reception server, respectively, based on the connection request data and the authentication data, each of the file server and the transmission / reception server. Authenticating, and

The management server identifying the authenticated file server and transmission / reception server;

The management server establishes a tunneling connection for transmitting / receiving the encapsulated data to / from the specified file server and the transmitting / receiving server;

The management server transmitting the reception request data to the file server in response to receiving reception request data indicating a request for reception of the encapsulated data from the transmission / reception server;

The management server transmitting the capsule data through the tunneling connection to the transmission / reception server in response to receiving the capsule data from the file sano through the tunneling connection;

Including methods.

According to the invention of (12), the management server stores authentication data for authenticating the file server and the transmission / reception server, and sends connection request data from the file server and the transmission / reception server to the management server. Based on the connection request data and the authentication data, the file server and the transmission / reception server are respectively authenticated based on the connection request data and the authentication data, the authenticated file server and the transmission / reception server are identified, and the identification is performed. Establish a tunneling connection to send / receive data that has been exchanged between the file server and the sending / receiving server, and receive reception request data indicating a request to receive the encapsulated data from the sending / receiving server In response, the reception request data is transmitted to the file server, and the file is sent. Wherein the Lusa over bar by connection by the tunneling Kapuserui spoon data depending on the reception, and transmits the Kapuserui spoon data by connection by the tunneling to the reception server. Thus, for example, a user who obtains a file by FTP or transmits it to a server can establish a connection with the file server that manages the file by tunneling that ensures security. Therefore, there is a possibility that the risk of being attacked by eavesdropping or tampering on the communication path can be reduced. Furthermore, since the file server can be placed in a safer area than DMZ, etc., there is a possibility that the risk of being attacked such as file copying can be reduced.

[0046] Further, by managing the connection by tunneling such as VPN by the management server, the connection can be disconnected according to the completion of data transmission. Therefore, the connection time can be minimized.

(13) The management server transmits the transmission request data to the file server in response to receiving transmission request data indicating a request for transmission of the encapsulated data from the transmission / reception server; ,

In response to receiving the capsule data from the transmission / reception server through the tunneling connection, the management server transmits the capsule data to the file server through the tunneling connection;

The method according to (12), further comprising:

[0048] According to the invention of (13), the transmission request data is sent to the file server in response to the management server receiving transmission request data indicating a request for transmission of the encapsulated data from the transmission / reception server. In response to receiving the capsule data from the transmission / reception server through the tunneling connection, the capsule server transmits the capsule data to the file server through the tunneling connection.

[0049] For this reason, for a user who sends a file to the server by FTP, for example,

The same effect as (12) can be expected.

[0050] (14) A method for transmitting / receiving capsule data between a file server connected to a management server via a communication line and a transmission / reception server,

The management server storing authentication data for authenticating each of the file server and the transmission / reception server;

The management server is connected to the management server from the file server and the transmission / reception server. Authenticating each of the file server and the transmission / reception server based on the connection request data and the authentication data in response to receiving connection request data to

The management server transmitting communication path data for establishing connection by tunneling for transmitting / receiving data encapsulated to the specified file server and transmission / reception server;

In response to receiving the communication path data, the file server and the transmission / reception server establish a connection by the tunneling;

The transmission / reception server transmitting reception request data indicating a request for reception of encapsulated data to the file server;

In response to receiving the reception request data, the file server transmitting the capsule data to the transmission / reception server through the tunneling connection;

Including methods.

According to the invention of (14), the management server stores authentication data for authenticating each of the file server and the transmission / reception server, and receives connection request data from the file server and the transmission / reception server to the management server. Based on the connection request data and the authentication data, the file server and the transmission / reception server are respectively authenticated based on the connection request data and the authentication data, the authenticated file server and the transmission / reception server are identified, and the identification is performed. Communication path data for establishing a connection by tunneling for transmitting / receiving data that is exchanged with each other is transmitted to the file server and the transmission / reception server. Then, in response to receiving the communication path data, the file server and the transmission / reception server establish a connection by the tunneling, and the transmission / reception server receives reception request data indicating a request for reception of encapsulated data. In response to receiving the reception request data transmitted to the file server, the file server connects to the transmission / reception server by the tunneling connection. Send data.

[0052] As a result, since the file server and the transmission / reception server directly transmit / receive encapsulated data such as mail data, there is a possibility that the file server and the transmission / reception server may receive unauthorized access such as eavesdropping and tampering more than when the management server relays Can be reduced.

[0053] (15) After the transmission / reception server transmits transmission request data indicating a request for transmission of encapsulated data to the file server, the step of transmitting the capsule data to the file server by connection through the tunneling. In addition, the method according to (14)

According to the invention of (15), after the transmission / reception server transmits transmission request data indicating a request for transmission of encapsulated data to the file server, the capsule server is connected to the file server by the tunneling connection. Send data.

[0055] This allows users who send files to the server, for example, via FTP,

The same effect as (14) can be expected.

[0056] (16) A server that manages transmission / reception of encapsulated data between a transmission-side terminal and a reception-side terminal connected via a communication line,

Means for storing authentication data for authenticating respective users of the transmitting terminal and the receiving terminal;

Based on the connection request data and the authentication data, the respective users of the transmitting terminal and the receiving terminal in response to receiving connection request data to the server from the transmitting terminal and the receiving terminal, respectively. A means of authenticating

Means for specifying the transmitting terminal and the receiving terminal used by the authenticated user;

Means for establishing a tunneling connection for transmitting / receiving the encapsulated data to / from the specified transmitting terminal and the receiving terminal;

Means for transmitting the encapsulated data by the tunneling connection to the receiving terminal in response to receiving the capsule data by the tunneling connection.

A server comprising [0057] According to the invention of (16), the same effect as in (1) can be expected by operating the server.

[0058] (17) When the connection by the tunneling with the receiving terminal cannot be obtained or the connection is lost before the transmission of the capsule data to the receiving terminal is completed ,

In order to establish a connection by tunneling with the receiving terminal, the receiver receives data notifying that there is a connection request from the transmitting terminal while waiting for connection request data from the receiving terminal. The server according to (16), further comprising means for transmitting to the side terminal

[0059] According to the invention of (17), the same effect as in (2) can be expected by operating the server.

(18) When connection by the tunneling with the transmitting terminal is not obtained or when the connection is lost before the transmission of the capsule data to the receiving terminal is completed ,

In response to receiving the connection request data of the receiving terminal, the transmission transmits data notifying that there is a connection request of the receiving terminal, while waiting for the connection request data of the transmitting terminal. The server according to (16) or (17), further comprising means for transmitting to the side terminal.

According to the invention of (18), the same effect as in (3) can be expected by operating the server.

(19) A server that manages transmission / reception of encapsulated data between a transmission-side terminal and a reception-side terminal connected via a communication line,

Means for authenticating a user of the transmitting terminal based on the connection request data and the authentication data in response to receiving connection request data to the server from the transmitting terminal;

Means for identifying the transmitting terminal used by the authenticated user; A transmitting terminal terminal having identified the means for establishing a connection by tunneling for receiving the capsule data;

Means for receiving and storing the capsule data through the connection by the tunneling side terminal power;

Means for authenticating a user of the receiving terminal based on the connection request data and the authentication data in response to receiving connection request data to the server from the receiving terminal;

Means for identifying the receiving terminal used by the authenticated user; means for establishing a tunneling connection for transmitting the capsule data to the receiving terminal that has performed the identification;

Means for transmitting the memorized capsule data to the receiving terminal through the tunneling connection;

A server comprising

[0063] According to the invention of (19), the same effect as in (4) can be expected by operating the server.

[0064] (20) In order to establish a connection by tunneling with the receiving terminal, it waits for connection request data from the receiving terminal, and indicates that encapsulated data has been transmitted from the transmitting terminal. The server according to (19), further comprising means for transmitting data to be notified to the receiving terminal.

[0065] According to the invention of (20), the same effect as in (5) can be expected by operating the server.

[0066] (21) A system for transmitting and receiving capsule data via a receiving server between a transmitting terminal and a receiving terminal connected to the management server via a communication line, the management server Means for storing authentication data for authenticating each of the transmitting user of the transmitting terminal and the receiving user associated in advance with the receiving server;

In response to the management server receiving connection request data to the management server from the transmission side terminal and the reception side server, respectively, the connection request data and the Means for authenticating each of the sending user and the receiving user based on authentication data;

Means for the management server to identify the transmitting terminal and receiving server used by the authenticated user;

Means for establishing a connection by tunneling for transmitting and receiving encapsulated data between the management server and the specified transmission side terminal and between the reception side server and the transmission side terminal force connection by the tunneling Means for transmitting the encapsulated data through the tunneling connection to the receiving server in response to receiving the capsule data by

The receiving server power means for storing the encapsulated data addressed to the receiving user;

Means for the receiving server to send the stored encapsulated data to the receiving terminal in response to a request from the receiving terminal;

A system comprising:

According to the invention of (21), the same effect as that of (6) can be expected by operating the system.

(22) A system for transmitting and receiving encapsulated data between a transmission side terminal and a reception side terminal connected to a management server via a communication line via the transmission side server and the reception side server. ,

Means for storing authentication data for authenticating each of a transmitting user associated in advance with the transmitting server and a receiving user associated in advance with the receiving server;

In response to the management server receiving connection request data to the management server from the transmitting server and the receiving server, respectively, based on the connection request data and the authentication data, the transmitting user and the receiving user A means of authenticating each, and

The management server associates with the authenticated user and the sender server and receiver. Means for identifying the trusted server;

The management server establishes a tunneling connection for transmitting / receiving encapsulated data to / from the specified transmitting server and the receiving server;

Means for the sending server to receive and store the encapsulated data from the sending terminal;

Means for transmitting the encapsulated data by the tunneling connection to the receiving server in response to receiving the capsule data from the transmitting side sano by the tunneling connection;

Means for the receiving server to store the encapsulated data addressed to the receiving user;

A system comprising:

[0069] According to the invention of (22), the same effect as in (7) can be expected by operating the system.

(23) means for the destination server to identify a destination management server that manages a destination on the basis of data indicating a destination user of the encapsulated data; and Means for transmitting data identifying the receiving server in response to a request from the transmitting server;

The system according to (22), further comprising:

According to the invention of (23), the same effect as in (8) can be expected by operating the system.

(24) means for the sender server to store sender authentication data for authenticating a user of the sender terminal;

Means for authenticating a user of the transmitting terminal based on the connection request data and the sender authentication data in response to the transmitting server receiving connection request data from the transmitting terminal; Means for the sender server to identify the sender terminal used by the authenticated user;

Means for establishing a tunneling connection for transmitting and receiving the encapsulated data between the transmitting server and the specified transmitting terminal;

Further comprising

The system according to (22) or (23), wherein the transmitting server receives the capsule data from the transmitting terminal by means of the tunneling connection. .

[0073] According to the invention of (24), the same effect as in (9) can be expected by operating the system.

(25) means for storing receiver authentication data for the receiving server to authenticate a user of the receiving terminal;

Data for notifying that the receiving server stores the encapsulated data while waiting for connection request data from the receiving terminal in order to establish a connection by tunneling with the receiving terminal. Means for transmitting to the receiving terminal;

Means for authenticating a user of the receiving terminal based on the connection request data and the recipient authentication data in response to the receiving server receiving the receiving terminal power connection request data;

Means for the receiver server to identify the receiver terminal used by the authenticated user;

Means for establishing a tunneling connection for transmitting and receiving encapsulated data to and from the receiving terminal that has been identified by the receiving server;

Further comprising

The means for transmitting the encapsulated data to the receiving terminal by the receiving server transmits the stored capsule data by the tunneling connection (21) to (24) The system described above.

[0075] According to the invention of (25), the same effect as that of (10) can be expected by operating the system. (26) A system for transmitting and receiving capsule data between a transmission-side terminal and a reception-side terminal connected to a management server via a communication line,

Means for storing authentication data for the management server to authenticate each user of the transmission side terminal and the reception side terminal;

In response to the management server receiving connection request data to the management server from the transmission side terminal and the reception side terminal, respectively, based on the connection request data and the authentication data, the transmission side terminal and reception Means for authenticating the user of each side terminal,

Means for identifying the transmitting side terminal and the receiving side terminal used by the authenticated user by the authenticated server;

Means for transmitting communication path data for establishing a connection by tunneling for transmitting / receiving the capsule data to / from the transmitting terminal and the receiving terminal to which the management server has specified,

In response to receiving the communication path data, the transmission side terminal and the reception side terminal force means for establishing a connection by the tunneling;

A system in which the transmitting terminal transmits the capsule data to the receiving terminal;

[0077] According to the invention of (26), the same effect as in (11) can be expected by operating the system.

[0078] (27) A server for managing transmission / reception of capsulated data between a file server and a transmission / reception server connected via a communication line,

Means for storing authentication data for authenticating each of the file server and the transmission / reception server;

Means for authenticating each of the file server and the transmission / reception server based on the connection request data and the authentication data in response to reception of connection request data to the server from the file server and the transmission / reception server, respectively. When,

The means for identifying the authenticated file server and the transmission / reception server, and the encapsulation between the identified file server and the transmission / reception server. Means for establishing a connection by tunneling for transmitting and receiving the received data, and the reception request data indicating the reception request of the encapsulated data from the transmission / reception server in response to reception of the reception request data to the file server. Means for sending

Means for transmitting the force-pelled data by connection by tunneling to the transmission / reception server in response to receiving the capsule data from the file sano by connection by tunneling;

A server comprising

[0079] According to the invention of (27), the same effect as in (12) can be expected by operating the server.

(28) means for transmitting the transmission request data to the file server in response to receiving transmission request data indicating a request for transmission of the encapsulated data from the transmission / reception server;

Means for transmitting the encapsulated data to the file server via the tunneling connection in response to receiving the capsule data from the transmission / reception server via the tunneling connection;

The server according to (27), further comprising:

[0081] According to the invention of (28), the same effect as in (13) can be expected by operating the server.

(29) A system for transmitting / receiving capsule data between a file server connected to a management server via a communication line and a transmission / reception server,

Means for storing authentication data for authenticating each of the file server and the transmission / reception server by the management server;

In response to the management server receiving connection request data to the management server from the file server and the transmission / reception server, respectively, based on the connection request data and the authentication data, each of the file server and the transmission / reception server. A means to authenticate,

The management server specifies the authenticated file server and transmission / reception server. Means to

Means for transmitting communication path data for establishing a connection by tunneling for transmitting and receiving mutually encapsulated data to the specified file server and transmission / reception server;

Means for the transmission / reception server to transmit reception request data indicating a request for reception of encapsulated data to the file server;

A system in which the file server transmits the capsule data to the transmission / reception server through the tunneling connection in response to receiving the reception request data.

According to the invention of (29), the same effect as that of (14) can be expected by operating the system.

(30) Means for transmitting the capsule data through the tunneling connection after the transmission / reception server transmits transmission request data indicating a request for transmission of encapsulated data to the file server. The system according to (29), further provided.

According to the invention of (30), the same effect as that of (15) can be expected by operating the system.

The invention's effect

[0086] According to the present invention, a user who transmits and receives data such as e-mail is not susceptible to attacks such as eavesdropping and tampering on the communication path, and further stores such data such as a mailbox and copies from Sano There is a possibility that data can be sent and received with a high level of security.

Brief Description of Drawings

FIG. 1 is an overall conceptual diagram of a computer system 1 according to an example of a preferred embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of a computer according to an example of a preferred embodiment of the present invention. is there.

FIG. 3 is a flowchart showing mail transmission / reception processing according to an example of the preferred embodiment of the present invention.

FIG. 4 is a diagram showing an authentication data table 60 according to an example of a preferred embodiment of the present invention.

[5] FIG. 5 is a flowchart showing mail transmission / reception processing according to another example of the preferred embodiment of the present invention.

[6] FIG. 6 is a flowchart showing mail transmission / reception processing according to another example of the preferred embodiment of the present invention.

FIG. 7 is an overall conceptual diagram of a computer system 2 according to another example of the preferred embodiment of the present invention.

[8] FIG. 8 is a flowchart showing mail transmission / reception processing according to another example of the preferred embodiment of the present invention.

FIG. 9 is an overall conceptual diagram of a computer system 3 according to another example of the preferred embodiment of the present invention.

[10] FIG. 10 is a flowchart showing mail transmission / reception processing according to another example of the preferred embodiment of the present invention.

FIG. 11 is an overall conceptual diagram of a computer system 4 according to another example of the preferred embodiment of the present invention.

FIG. 12 is an overall conceptual diagram of a computer system 5 according to another example of the preferred embodiment of the present invention.

Explanation of symbols

1, 2, 3, 4, 5 computer system

10 Management server

20, 20a, 20b Sending terminal

25 Sender server

30, 30a, 30b Receiver terminal

35 Receiver server 40 Communication network

50, 51, 52, 53, 54, 55, 56 VPN tunnel

60 certified data tape

70 File server

80 Send / Receive server

110 Control unit

120

130 Input section

140 Display

150 Communication control unit

160 Nos

BEST MODE FOR CARRYING OUT THE INVENTION

[0089] Examples of preferred embodiments according to the present invention will be described below with reference to the drawings.

[0090] [Overall configuration of computer system 1]

FIG. 1 is an overall conceptual diagram of a computer system 1 according to an example of a preferred embodiment of the present invention. Here, as an example of capsule data, explanation is limited to transmission / reception of mail data.

A management server 10 that manages transmission / reception of mail, a transmission-side terminal 20 that transmits the mail, and a reception-side terminal 30 that receives the mail are connected via a communication network 40. The management server 10 and the transmission side terminal 20 establish a VPN tunnel 50 in response to a connection request from the transmission side terminal 20. Similarly, the management server 10 and the receiving terminal 30 establish a VPN tunnel 51 in response to a connection request from the receiving terminal 30.

Here, in the present invention, various existing VPN connection methods can be employed. For example, the power of Internet VPN based on protocols such as IPsec, PPTP, L2TP, etc. Specifically, similar technologies that can be developed in the future may be adopted in the present invention.

[0093] In this way, with the VPN tunnel established from the transmission side terminal 20 to the reception side terminal 30 via the management server 10, the communication between the terminal devices (transmission side terminal 20, reception side terminal 30) is established. To send and receive messages.

[0094] Here, in order to prompt establishment of the VPN tunnels 50 and 51, in response to a request from the transmitting side or the receiving side, the management server 10 notifies the connection request to each other terminal. Data can also be sent.

[0095] [Computer Configuration]

FIG. 2 is a block diagram showing the configuration of each computer (management server 10, transmission side terminal 20, and reception side terminal 30) constituting the computer system 1 according to an example of the preferred embodiment of the present invention.

Control unit 110, storage unit 120, input unit 130, display unit 140, and communication control unit 150 are connected via bus 160.

The control unit 110 is an information processing unit (CPU) that performs information processing and processing, and controls the computer as a whole. The control unit 110 reads and executes various programs stored in the storage unit 120 as appropriate, thereby realizing various functions according to the present invention in cooperation with the hardware described above.

The storage unit 120 includes a local memory used for program execution in combination with the control unit 110, a large capacity memory memory, and a cache memory used for efficiently searching the memory memory. Good. The computer-readable medium that implements the storage unit 120 may include an electrical, magnetic, optical, or electromagnetic implementation. More specifically, semiconductor storage devices, magnetic tapes, floppy disks, random “access” memory (RAM), read-only memory (ROM), CD—ROM and CD—RZW and DV D And an optical disc including

The input unit 130 accepts input by the user, and may include a keyboard, a pointing device, and the like. The input unit 130 can be connected to the computer directly or via an intervening IZO controller.

[0100] The display unit 140 displays a screen for accepting data input to the user, or displays a screen of a calculation processing result by the computer, and includes a cathode ray tube display (CRT), a liquid crystal display ( LCD).

[0101] The communication control unit 150 connects the computer to a dedicated network or public network. It is a network adapter that enables connection to another arithmetic processing system or storage device via the network. Communication controller 150 may include a modem, cable modem, and Ethernet ™ adapter.

[0102] [Email send / receive processing flow A]

FIG. 3 is a flowchart showing mail transmission / reception processing according to an example of the preferred embodiment of the present invention. This process can be performed in the computer system 1 shown in FIG.

[0103] In step S105, the transmission side terminal 20 accepts an instruction from the user to make a connection by tunneling such as VPN (hereinafter, only limited to VPN connection). Specifically, for example, an input of a user ID, a password, and the like used in sender authentication (step S115) described later is accepted along with the input of a destination mail address.

[0104] In step S110, the transmission side terminal 20 transmits connection request data indicating a VPN connection request to the management server 10. The connection request data includes the destination mail address, user ID, password, etc. acquired in step S105.

In step S115, the management server 10 authenticates the sender based on the connection request data received from the transmission side terminal 20 and the authentication data stored in advance in the storage unit 120. Specifically, for example, as the authentication data, as shown in the authentication data table 60 of FIG. 4, the sender address is associated with the ID and password for identifying the sender, and collated with the connection request data. Thus, it is determined whether or not the user is a valid user. The authentication method is not limited to this, and can be realized by other existing technologies.

[0106] Subsequently, when the management server 10 determines that the sender of the connection request data is a valid user, the management server 10 identifies the transmission-side terminal 20 that is the transmission source, and the transmission-side terminal 20 Determine the communication path leading to 10.

[0107] In step S120, the management server 10 establishes a VPN connection with the transmission side terminal 20 that has authenticated and identified the user in step S115. As a result, a VPN tunnel 50 is established between the two, enabling communication with security.

[0108] In step S125, the management server 10 determines whether or not the VPN connection is established with the receiving terminal 30 that is the mail transmission destination. Notification data indicating that there is a connection request is transmitted to the receiving terminal 30. More specifically For example, the management server 10 generates a mail urging the VPN connection with the management server 10 and sends it to the receiving terminal 30. Note that the security for the purpose of the present invention is not necessarily required for the email that prompts the VPN connection.

[0109] Here, when the VPN connection is already established, since the VPN tunnel 51 has been established, the connection from the transmission side terminal 20 to the reception side terminal 30 via the management server 10 is established. As a result, security-enhanced communication is possible.

In step S 130, the receiving side terminal 30 receives an instruction input for establishing a VPN connection with the management server 10, as in the case of the transmitting side terminal 20 in step S 105.

In step S 135, the receiving side terminal 30 transmits connection request data indicating a VPN connection request to the management server 10 as in the case of the transmitting side terminal 20 in step S 110.

[0112] In step S140, the management server 10 authenticates the user of the receiving terminal 30 in the same manner as the transmitting terminal 20 in step S115. Further, when it is determined that the user is a valid user, the receiving side terminal 30 that is the transmission source of the connection request data is specified, and a communication path from the receiving side terminal 30 to the management server 10 is determined.

[0113] In step S145, the management server 10 establishes a VPN connection with the sender terminal 20 identified and identified in step S140, as in the case of the sender terminal 20 in step S120. As a result, a VPN tunnel 51 is established between the two, and communication with secured security becomes possible.

[0114] Here, the processing related to the transmitting terminal 20 from step S105 to step S120 and the processing related to the receiving terminal 30 from step S130 to step S145 are not limited to each other in processing order. Absent. That is, when the processing related to the receiving terminal 30 is performed before the processing related to the transmitting terminal 20, the VPN connection between the management server 10 and the receiving terminal 30 is established. The connection request notification in step S 125 is not required.

In step S150, the management server 10 receives mail data from the transmission side terminal 20. The mail data is encapsulated with the header information added by the sending terminal, which allows VPN communication. Note that the mail data may be encrypted using IPsec or the like, which further suppresses eavesdropping and tampering of the packet and enhances security. it can.

In step S 155, the management server 10 transmits the mail data to the receiving side terminal 30.

[0117] Here, if the VPN connection between the management server 10 and the receiving terminal 30 is cut off before the mail data transmission in step S155 is completed, When the management server 10 receives the connection request data from the receiving terminal 30 again, the VPN connection is established again. In this way, since the management server 10 performs mail transmission while confirming that the VPN connection is maintained, the reliability of mail transmission / reception can be increased.

[0118] [Mail transmission / reception processing flow B]

FIG. 5 is a flowchart showing mail transmission / reception processing according to another example of the preferred embodiment of the present invention. The processing can be performed in the computer system 1 shown in FIG.

[0119] Step S205 to step S245 are the same as in the mail transmission / reception processing flow A (Fig. 4), and the management server 10 performs VPN connection with the transmission side terminal 20 and the reception side terminal 30.

[0120] Here, when the VPN connection between the management server 10 and the transmission side terminal 20 is disconnected when the VPN connection between the management server 10 and the reception side terminal 30 is established (for example, in step S250) Since the management server 10 establishes the VPN connection again, in step S255, the VPN connection with the receiving terminal 30 is established for the sending terminal 20 and the mail is ready to be received. Notification to that effect.

[0121] In response to accepting the VPN connection instruction data from the sending terminal 20 in step S260, the management server 10 receives the connection request data (step S265) and authenticates the sender (step S270). Then, a VPN connection is established with the sender terminal 20 (step S275). The processing from step S260 to step S275 is the same as the processing from step S205 to step S220.

Through the processing up to this point, a VPN connection from the transmission side terminal 20 to the reception side terminal 30 via the management server 10 is established.

[0123] In FIG. 5, the established connection with the transmitting terminal 20 is disconnected in step S250. However, the connection may not be performed, and the process may wait until the receiving terminal 30 is ready (a VPN connection is established in step S245). In this case, the VPN connection between the management server 10 and the transmission side terminal 20 is not performed in step S215 and step S220.

In steps S280 and S285, the management server 10 transmits the mail data received from the transmission side terminal 20 to the reception side terminal 30 as in the case of the mail transmission / reception processing flow A in FIG.

[0125] [Mail Send / Receive Processing Flow C]

FIG. 6 is a flowchart showing mail transmission / reception processing according to another example of the preferred embodiment of the present invention. The processing can be performed in the computer system 1 shown in FIG.

[0126] Steps S305 to S325 are the same as in the mail transmission / reception processing flow A (Fig. 4), and the management server 10 establishes a VPN connection with the transmission side terminal 20 to the reception side terminal 30. Send connection request notification.

Through the processing so far, the VPN connection between the management server 10 and the transmission side terminal 20 is established, and therefore the management server 10 receives the mail data from the transmission side terminal 20 in step S330.

[0128] In step S335, the management server 10 temporarily stores the mail data received in step S330 in the mailbox. It should be noted that the mailbox can be placed in the DMZ in a normal mail system. According to this embodiment, the management server 10 communicates with the VPN through a VPN connection, so it can be placed in a secure LAN. This can reduce the possibility of attacks such as copying of mail data by a malicious third party.

In step S340 and step S355, the management server 10 establishes a VPN connection with the receiving side terminal 30 (similar to the mail transmission / reception processing flows A (FIG. 4) and B (FIG. 5)). As a result, the receiving terminal 30 is ready to receive mail data.

In step S360, management server 10 transmits the mail data stored in step S335 to receiving side terminal 30. The mail data that has been sent It is also possible to erase the force of the task. As a result, the time for which the mail data is stored in the management server 10 can be minimized, so that the possibility of receiving an attack such as copying of the mail data can be reduced.

[0131] [Overall configuration of computer system 2]

In the computer system 1 (FIG. 1), the transmission side terminal 20 and the reception side terminal 30 are VPN-connected via the management server 10 by establishing the VPN tunnels 50 and 51. On the other hand, in the computer system 2 shown in FIG. 7, by establishing the VPN tunnel 52, the transmission side terminal 20 and the reception side terminal 30 are directly connected to each other via the management server 10.

Here, in order to establish the VPN tunnel 52, the management server 10 transmits data related to the route from the transmission side terminal 20 to the reception side terminal 30. As a result, the transmission side terminal 20 and the reception side terminal 30 mutually identify each other and establish a VPN connection.

[0134] [Mail send / receive processing flow D]

FIG. 8 is a flowchart showing mail transmission / reception processing according to another example of the preferred embodiment of the present invention. This processing can be performed in the computer system 2 shown in FIG.

[0135] In step S405 and step S415, the management server 10 receives the connection request data from the transmission side terminal 20, and performs authentication of the sender, identification of the transmission side terminal 20, and determination of the communication path (mail). Transmission / reception process flow A (same as steps S105 to S115 in Fig. 3). Here, the management server 10 does not make a VPN connection with the transmission side terminal 20, but only sends a connection request notification to the reception side terminal 30 (step S420).

[0136] In step S425 and step S435, the management server 10 receives the connection request data from the receiving terminal 30, identifies the receiver, specifies the receiving terminal 30, and determines the communication path (mail). Transmission / reception processing flow A (same as steps S130 to S140 in Fig. 3). Here, the management server 10 does not make a VPN connection with the receiving terminal 30.

[0137] In steps S440 and S445, the management server 10 uses the route data in the communication to identify each other with respect to the transmission side terminal 20 and the reception side terminal 30, respectively. Send.

[0138] In step S450, the transmission side terminal 20 and the reception side terminal 30 perform VPN connection based on the route data received in step S440 and step S445.

[0139] In step S455, the transmission side terminal 20 transmits mail data to the reception side terminal 30 through the VPN connection established in step S450.

[0140] Through the above processing, the ability to complete the transmission / reception of mail data In the case of computer system 1 (Fig. 1) (email transmission / reception processing flow A, B, C), the transmission side terminal 20 changes to the reception side terminal 30. Since it does not require a mail box to store mail data, it is possible to send and receive secure mail.

[0141] [Overall configuration of computer system 3]

[0142] In computer system 1 (Fig. 1) and 2 (Fig. 7), the ability to receive mail data at the receiving terminal 30 used by the mail receiving user In computer system 3, mail data is received from the receiving server 35. Receive and store. The receiving side terminals 30a and 30b used by the mail receiving user appropriately acquire the mail data stored in the receiving side server 35 within the LAN.

[0143] VPN tunnels 50 and 51 are established on the route from the sending terminal 20 to the receiving server, as in the case of the computer system 1 (Fig. 1).

[0144] [Email send / receive processing flow E]

FIG. 10 is a flowchart showing mail transmission / reception processing according to another example of the preferred embodiment of the present invention. This processing can be performed in the computer system 3 shown in FIG.

In step S505, step S520 is the same as the mail transmission / reception processing flow A (FIG. 4), and the management server 10 establishes a VPN connection with the transmission side terminal 20.

In step S525, step S535, the receiving server 35 establishes a VPN connection with the management server 10. Specifically, for example, the receiving server 35 periodically inquires the management server 10 and, when there is a connection request from the transmitting terminal 20, the VPN connection is made. The connection request data is transmitted to the management server 10 to be performed (step S525).

[0147] In response to receiving the connection request data from the receiving server 35, the management server 10 is a user associated with the receiving server 35 (for example, one ID associated with the mail addresses of multiple users). And the receiving server 35 is specified (step S530).

[0148] In step S535, the management server 10 establishes a VPN connection with the receiving server 35 identified in step S530. Thereby, the security of the path from the transmission side terminal 20 to the reception side server 35 is ensured.

In steps S540 and S545, the management server 10 transmits the mail data to the receiving server 35 in response to receiving the mail data from the transmitting terminal 20.

[0150] In step S550, the receiving server 35 stores the mail data received in step S545. In a normal mail system, the mail bot that stores mail data is placed in the DMZ. In the case of this embodiment, it can be accessed via a VPN connection, so the security to which the receiving terminals 30a and 30b belong is ensured. Can be placed in a LAN. This makes it less susceptible to attacks such as copying mail data from a mailbox.

[0151] Note that the user who receives the mail can then receive the mail data addressed to himself / herself from the receiving server 35 within the secure LAN in a timely manner.

Here, the receiving server 35 may periodically attempt to connect to the management server 10 as described above, but the procedure to reach the VPN connection is not limited to this. For example, the management server 10 that has made a VPN connection with the transmission-side terminal 20 may transmit connection request data to the reception-side server 35. In this case, the receiving server 35 authenticates the management server 10, and the receiving server 35 stores authentication data for authenticating the management server 10.

[0153] Further, the same configuration as that of the reception side server 35 shown in Fig. 9 is also introduced to the transmission side, and mail data once received from a plurality of transmission side terminals 20 in the LAN is transmitted at a predetermined timing. A server may be operated. In this case, the actual VPN connection is made between the servers installed in the LAN on the sending and receiving sides. As a result, the overhead for establishing a VPN connection can be improved by tuning the timing of communication. May be able to balance the efficiency of sending and receiving e-mail with safety and immediacy.

[0154] [Overall configuration of computer system 4]

[0155] The transmitting server 25 receives and stores mail data from the transmitting terminals 20a and 20b.

The management server 10 establishes a VPN tunnel 50 with the transmission server 25 and a VPN tunnel 51 with the reception server 35 in the same manner as the computer system 3 (FIG. 9). The receiving server 35 stores the mail data transmitted by the VPN tunnels 50 and 51.

[0156] In the computer system 3 (Fig. 9), the receiving terminals 30a and 30b used by the mail receiving user acquire the mail data stored in the receiving server 35 within the LAN. Since the receiving server 35 and the receiving terminals 30a and 30b are connected by the VPN tunnel 54, mail data can be obtained from outside the LAN. The receiving server can also be a server managed by a third party such as an ISP.

Here, in establishing the VPN tunnel 54, the receiving server 35 plays the role of the management server 10 in the VPN tunnel 51. That is, the receiving server 35 authenticates the users of the receiving terminals 30a and 30b in response to receiving the connection request data of the receiving terminals 30a and 30b, identifies the receiving terminals 30a and 30b, and identifies the VPN tunnel. Establish 54.

[0158] Then, receiving side server 35 collectively stores the mails of a plurality of users while ensuring security, and receives the mails to the users of receiving side terminals 30a and 30b as necessary. Notify As a result, the users of the receiving side terminals 30a and 30b can receive the mail data by establishing the timely receiving side server 35 and the secure VPN tunnel 54. Note that mail data received by the receiving terminals 30a and 30b can be deleted from the receiving server 35.

Similarly, the transmission side server 25 and the transmission side terminals 20a and 20b are connected by the VPN tunnel 53. As a result, the user who sends the mail can also send the mail data to the sending server 25 even by an external LAN force. The sending server 25 is the same as the receiving server 35. It can also be a server managed by a third party such as P.

[0160] Here, the transmitting server 25 authenticates the user of the transmitting terminals 20a and 20b in response to receiving the connection request data from the transmitting terminals 20a and 20b, and sets the transmitting terminals 20a and 20b. Specifically, a VPN tunnel 53 is established. Then, the transmission server 25 collectively stores the mail data of a plurality of users while ensuring security.

Note that mail data that has been sent to the receiving server 35 may be deleted from the sending server 25. In addition, for mail data that has been transmitted, data for notifying that transmission has been completed may be transmitted to the transmitting side terminals 20a and 20b. This allows the user to confirm that the email has been sent safely.

[0162] Further, in the computer system 4, a VPN tunnel that connects the sending server 25 and the receiving server 35 in the same manner as the computer system 2 (Fig. 7) that can send and receive mail data by using the VPN tunnels 50 and 51. 52 may be established.

[0163] According to the above embodiment, the sender and receiver of the mail establish the tunneling of VPN or the like in the communication path, and send and receive the mail data that secures security that is not easily attacked by eavesdropping or tampering. Can do. Further, according to the encryption of the mail data, security can be further improved.

[0164] Furthermore, mail data can be copied from the mail box by not placing a mailbox for storing mail data, or by placing a temporary storage mailbox in an area such as a LAN that is safer than the DMZ. It can send and receive mail data with security that is difficult to attack.

[0165] [Overall configuration of computer system 5]

[0166] In the computer system 5, for example, in file transfer by FTP, security is ensured by transmitting / receiving data encapsulated by VPN or the like.

[0167] The file server 70 stores various files used by the transmission / reception server 80. For example, for normal FTP, the sending / receiving server 80 is a file placed in the DMZ. When a file is received (GET) from the server 70! /, A file is sent to the file server 70 (PUT).

In the present embodiment, the above-described file transmission / reception is performed via the VPN tunnels 55 and 56. First, the management server 10 authenticates the file server 70 and the transmission / reception server 80 by receiving connection request data from the file server 70 and the transmission / reception server 80. Then, the file server 70 and the transmission / reception server 80 are specified, and a VPN connection is established with each of them. Since the VPN tunnels 55 and 56 are thus established, the file server 70 and the transmission / reception server 80 are connected through the management server 10 through a secure connection.

Here, the file server 70 can synchronize with the connection request data from the transmission / reception server 80 by periodically transmitting connection request data to the management server 10, for example.

[0170] The transmission / reception server 80 transmits transmission / reception request data indicating a file transmission or reception request to the file server 70. Here, the transmission / reception request data may be transmitted via the management servo 10.

[0171] Subsequently, when the transmission / reception request data indicates a transmission request, the transmission / reception server transmits the target file to the management server 10, and the management server 10 responds to the file server 70 in response to the reception of the file. Send the file.

[0172] When the transmission / reception request data indicates a reception request, the file server 70 transmits the target file to the management server 10, and the management server 10 sends the file to the transmission / reception server 80 in response to the reception of the file. Send.

As a result, file transfer can be performed between the file server 70 and the transmission / reception server 80 while ensuring security by tunneling. Here, the connection path may be configured such that the file server 70 and the transmission / reception server 80 are directly connected to the VPN in accordance with the computer system 2 (FIG. 7).

[0174] Furthermore, since the file server 70 is VPN-connected, the file server 70 that is usually placed in the DMZ can be placed in an area where there is less risk of file copying or the like (such as a corporate LAN). [0175] Note that the management server 10 disconnects the VPN tunnels 55 and 56 in response to the completion of the file transmission / reception, thereby completing the file transfer with the minimum required connection time. be able to.

In addition, the management server 10 can automatically resume transmission / reception of a file interrupted due to a line failure or the like according to line restoration by monitoring the connection state between the file server 70 and the transmission / reception server 80. There is sex. As a result, for example, file transmission / reception is automatically performed by a night notch or the like, and for the user, there is a possibility that the certainty of file transmission / reception can be improved while ensuring security.

Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments. In addition, the effects described in the embodiments of the present invention only list the most preferable effects generated by the present invention, and the effects of the present invention are limited to those described in the examples of the present invention. It is not something.

Claims

The scope of the claims

[1] A method for transmitting and receiving force Pserich data between a transmission-side terminal and a reception-side terminal connected to a management server via a communication line,

Including methods.

[2] When the management server is unable to obtain a connection with the receiving terminal through the tunneling or loses the connection before the transmission of capsule data to the receiving terminal is completed. ,

For the management server to establish a tunneling connection with the receiving terminal

2. The method according to claim 1, further comprising a step of transmitting data notifying that there is a connection request from the transmission side terminal to the reception side terminal while waiting for connection request data from the reception side terminal. the method of.

[3] When the management server is unable to obtain a connection by the tunneling with the transmission side terminal or loses the connection before the transmission of the capsule data to the reception side terminal is completed. , In response to receiving the connection request data of the receiving terminal, the management server waits for the connection request data from the transmitting terminal and notifies that there is a connection request from the receiving terminal. The method according to claim 1, further comprising: transmitting data to be transmitted to the transmitting terminal.

[4] A method for transmitting and receiving force Pserich data between a transmitting terminal connected to a management server via a communication line and a receiving terminal,

Including methods.

[5] For the management server to establish a tunneling connection with the receiving terminal. 5. The method further comprises a step of transmitting data notifying that the encapsulated data has been transmitted from the transmitting terminal to the receiving terminal while waiting for connection request data from the receiving terminal. The method described in 1.

[6] A method for transmitting and receiving capsule data via a receiver server between a transmitter terminal and a receiver terminal connected to a management server via a communication line,

A step in which the management server stores authentication data for authenticating each of the transmitting user of the transmitting terminal and the receiving user associated with the receiving server in advance;

Including methods.

[7] A method for transmitting and receiving encapsulated data between a sending terminal and a receiving terminal connected to a management server via a communication line via a sending server and a receiving server. The management server storing authentication data for authenticating each of a transmission user associated in advance with the transmission side server and a reception user associated in advance with the reception side server;

In response to the management server receiving connection request data to the management server from the transmitting server and the receiving server, respectively, based on the connection request data and the authentication data, the transmitting user and the receiving user Each authentication step,

The management server identifying the transmitting server and the receiving server associated with the authenticated user; and

Including methods.

[8] The step of the destination server identifying a destination management server that manages a destination on the basis of data indicating a transmission destination user of the encapsulated data;

The destination management server transmitting data identifying the receiving server in response to a request from the transmitting server;

The method of claim 7 further comprising:

[9] A sender authentication data for the sender server to authenticate a user of the sender terminal. Storing the data,

The sender server identifying the sender terminal used by the authenticated user;

A step of establishing a tunneling connection for transmitting and receiving the encapsulated data to and from the transmitting terminal that has been identified by the transmitting server;

Further including

9. The step according to claim 7 or 8, wherein the step of receiving the capsule data by the transmitting server receives the capsule data by the tunneling connection. the method of.

The receiving server storing receiver authentication data for authenticating a user of the receiving terminal;

The receiving server identifying the receiving terminal used by the authenticated user; and

The receiving server establishing a tunneled connection for transmitting and receiving encapsulated data with the specified receiving terminal; and

Further including

The step of transmitting the encapsulated data to the receiving terminal from the receiving server is to transmit the stored capsule data by the connection by the tunneling. 10. The method according to any one of 9. [11] A method for transmitting / receiving force pseudo data between a transmitting side terminal and a receiving side terminal connected to a management server via a communication line,

Including methods.

[12] A method for transmitting / receiving capsule data between a file server connected to a management server via a communication line and a transmission / reception server,

In response to the management server receiving connection request data to the management server from the file server and the transmission / reception server, respectively, based on the connection request data and the authentication data, each of the file server and the transmission / reception server. Authenticating, and

The management server identifying the authenticated file server and transmission / reception server; The management server establishes a tunneling connection for transmitting / receiving the encapsulated data to / from the specified file server and the transmitting / receiving server;

Including methods.

[13] In response to receiving transmission request data indicating a request for transmission of the capsule data from the transmission / reception server, the management server transmits the transmission request data to the file server;

The method of claim 12 further comprising:

[14] A method for transmitting / receiving capsule data between a file server connected to a management server via a communication line and a transmission / reception server,

The management server, for the specified file server and transmission / reception server, Transmitting communication path data for establishing a connection by tunneling for transmitting and receiving data encapsulated with each other;

Including methods.

[15] The transmission / reception server further includes a step of transmitting the capsule request data to the file server through the tunneling connection after transmitting the transmission request data indicating a request for transmitting the encapsulated data to the file server. The method of paragraph 14

[16] A server that manages transmission / reception of encapsulated data between a transmitting-side terminal and a receiving-side terminal connected via a communication line,

Means for transmitting the encapsulated data by the tunneling connection to the receiving terminal in response to receiving the capsule data by the tunneling connection. A server comprising

[17] When the connection by the tunneling with the receiving terminal cannot be obtained, or when the connection is lost before the transmission of the encapsulated data to the receiving terminal is completed,

In order to establish a connection by tunneling with the receiving terminal, the receiver receives data notifying that there is a connection request from the transmitting terminal while waiting for connection request data from the receiving terminal. 17. The server according to claim 16, further comprising means for transmitting to the side terminal.

[18] If the connection by the tunneling with the transmission side terminal cannot be obtained or the connection is lost before the transmission of the encapsulated data to the reception side terminal is completed,

In response to receiving the connection request data of the receiving terminal, the transmission transmits data notifying that there is a connection request of the receiving terminal, while waiting for the connection request data of the transmitting terminal. The server according to claim 16 or claim 17, further comprising means for transmitting to the terminal on the side.

[19] A server for managing transmission / reception of encapsulated data between a transmitting terminal and a receiving terminal connected via a communication line,

Means for identifying the transmitting terminal used by the authenticated user; means for establishing a connection by tunneling for receiving the capsule data;

In response to receiving connection request data to the server from the receiving terminal, Means for authenticating the user of the receiving terminal based on the connection request data and the authentication data;

A server comprising

[20] In order to establish a connection by tunneling with the receiving side terminal, while waiting for connection request data from the receiving side terminal, it notifies that the encapsulated data has been transmitted from the transmitting side terminal The server according to claim 19, further comprising means for transmitting data to the receiving terminal.

[21] A system for transmitting and receiving capsule data via a receiver server between a transmitter terminal and a receiver terminal connected to a management server via a communication line,

The management server stores authentication data for authenticating each of the transmitting user of the transmitting terminal and the receiving user associated with the receiving server in advance;

In response to the management server receiving connection request data to the management server from the transmission side terminal and reception side server, respectively, based on the connection request data and the authentication data, the transmission user and the reception user respectively. A means of authenticating

Means for establishing a connection by tunneling for transmitting and receiving encapsulated data between the management server and the specified transmission side terminal and between the reception side server and the transmission side terminal force connection by the tunneling In response to receiving the capsule data by the management server, the management server performs the tunneling to the receiving server. Means for transmitting the encapsulated data by connection;

A system comprising:

A system for transmitting and receiving encapsulated data between a transmission side terminal and a reception side terminal connected to a management server via a communication line via a transmission side server and a reception side server,

Means for the management server to identify the transmitting server and the receiving server associated with the authenticated user;

Means for transmitting the encapsulated data by the tunneling connection to the receiving server in response to receiving the capsule data by the tunneling connection from the transmitting side sano;

Means for the receiving server to store the encapsulated data addressed to the receiving user; Means for the receiving server to send the stored encapsulated data to the receiving terminal in response to a request from the receiving terminal;

A system comprising:

[23] means for specifying a destination management server for managing a destination on the reception side based on data indicating a transmission destination user of the encapsulated data, the transmission side server;

Means for transmitting data for identifying the receiving server in response to a request from the transmitting server;

24. The system of claim 22, further comprising:

[24] means for the sender server to store sender authentication data for authenticating a user of the sender terminal;

Means for authenticating a user of the transmitting terminal based on the connection request data and the sender authentication data in response to the transmitting server receiving connection request data from the transmitting terminal;

Means for the sender server to identify the sender terminal used by the authenticated user;

Further comprising

24. The system according to claim 22 or 23, wherein said transmitting server receives means for receiving the encapsulated data from the transmitting terminal. The system according to claim 22 or 23, wherein the encapsulating data is received by connection through the tunneling. .

[25] means for storing receiver authentication data for the receiving server to authenticate a user of the receiving terminal;

Based on the connection request data and the receiver authentication data, the receiving server receives the receiving terminal power connection request data. A means of authenticating the user;

Further comprising

25. The means for transmitting the encapsulated data from the receiving server to the receiving terminal transmits the stored capsule data by the tunneling connection. A system according to any of the above.

[26] A system for transmitting and receiving force pseudo data between a transmitting terminal connected to a management server via a communication line and a receiving terminal,

[27] A server for managing transmission / reception of capsule data between a file server and a transmission / reception server connected via a communication line, Means for storing authentication data for authenticating each of the file server and the transmission / reception server;

Means for identifying the authenticated file server and transmission / reception server, and means for establishing a connection by tunneling for transmitting / receiving the encapsulated data between the identified file server and the transmission / reception server. When,

A means for transmitting the reception request data to the file server in response to reception of reception request data indicating a request for reception of the encapsulated data from the transmission / reception server;

A server comprising

[28] means for transmitting the transmission request data to the file server in response to receiving transmission request data indicating a request for transmission of the capsule data from the transmission / reception server;

28. The server of claim 27, further comprising:

[29] A system for transmitting / receiving capsule data between a file server connected to a management server via a communication line and a transmission / reception server,

In response to the management server receiving connection request data to the management server from the file server and the transmission / reception server, respectively, Means for authenticating each of the file server and the transmission / reception server based on the authentication data;

Means for the management server to identify the authenticated file server and transmission / reception server;

30. The transmission / reception server capability, further comprising: means for transmitting the capsule data to the file server by connection through the tunneling after transmitting transmission request data indicating a request for transmitting encapsulated data to the file server. System „