JP4873743B2 - Communication management system, socket management server, and communication management method - Google Patents

Description

  The present invention relates to a communication system. Moreover, it is related with the technique relevant to implement | achieving the communication system.

  Conventionally, in order to network-connect applications such as servers / clients, application communication is realized between devices connected to the network using a technique called socket communication. A conceptual diagram of this socket communication is shown in FIG.

  In socket communication, a socket used by an application program is established based on information such as an L4 port number (TCP / UDP) and an IP address, and then socket communication is executed.

  FIG. 4 shows a conceptual diagram when socket communication is performed between the client 200 and the server 202. A socket 204 is established in the client 200, and sockets 206 are isolated in the server 202. These sockets 204 and 206 are connected by a network 208.

  In the client 200 of FIG. 4, an application program 210 on the client side performs application communication with the server 202 using 204 for the established socket.

  Also in the server 202, the server-side application program 212 performs application communication with the client 200 using 206 for the established socket.

  Conventionally, socket communication has been widely used as a method for easily performing communication between applications.

An example of a prior patent document, for example, in Patent Document 1 below, when a request attached with an authenticator issued by an authentication server is received from the first device and the second device, transmission and reception according to the authenticator It is described that the port is set in the tunnel server, and the reception and transmission ports of the first device and the second device are respectively connected.

  Also, for example, in Document 2 below, by interposing a switch connection control device in the communication path, the external network and the internal network are separated by the access request control signal according to the purpose, and the data is surely protected from illegal acts. Is described.

  Also, for example, in Reference 3 below, a connection between the user side PC and the support center is established, and a tunnel connection is established within the connection, so that the user side PC is maintained and managed by remote operation from an operator terminal of the support center. It describes the system to do.

  Japanese Patent Application Laid-Open No. 2004-228561 discloses a technique that enables communication simulation without creating a debugging process in socket communication in which inter-process communication is performed via a socket library.

  Patent Document 5 below discloses a technique that can prevent unauthorized access based on a specific port number. Specifically, a TCP port number is defined in the application as a TCP port number for performing socket communication, and socket communication is realized between the server and the client. Then, the TCP port number is changed every time a certain time elapses.

It is described that this can prevent unauthorized access.

JP 2006-203546 A JP 2003-152806 A JP 2005-026856 A Japanese Patent Laid-Open No. 05-53864 JP 2004-252877 A

  There has been a mechanism for flowing socket communication used conventionally through the Internet.

  However, in such a conventional technique, the server has to manage communication, and the processing load is large. For example, various management tasks such as load calculation, connection type, and authentication session management exist, and as a result, the load on the application server and the like cannot be ignored.

  The present invention has been made in view of such circumstances, and an object thereof is to realize socket communication between a server and a client on the Internet and communication with a small management burden. .

  (1) In order to solve the above problem, the present invention provides a first gateway connected to a first network, a second gateway connected to a second network, the first gateway, A socket management server connected to both of the second gateways, wherein the socket management server registers socket information of the server from a server connected to the second network. If there is a request to select a communication partner from the socket information registration means for registering socket information of the server and a client connected to the first network when there is a request, the communication partner of the client Communication partner presenting means for presenting the socket information of the valid device to the client, and when there is a request from the client to connect to the server, A client side pseudo socket for connecting to a client is constructed in the second gateway, a server side pseudo socket for connecting to the server is constructed in the first gateway, and the client side pseudo socket; A socket tunnel setting means for setting a communication path between the client and the server by connecting the server side pseudo socket with a predetermined communication path and setting a socket tunnel. is there.

  (2) Further, the present invention provides the communication management system according to (1), wherein the socket management server receives a request from the client to delete a communication path set with the server. A communication management system comprising socket tunnel deletion means for deleting the client side pseudo socket from the second gateway and deleting the server side pseudo socket from the first gateway.

  (3) Further, the present invention is the communication management system according to (1), wherein the socket management server is located on a third network different from both the first network and the second network. Communication management system.

  (4) In the communication management system according to (1), the first network is a local IP network, and the second network is a local IP network different from the first network. It is a communication management system characterized by being.

  (5) Further, the present invention is the communication management system according to (3), wherein the third network is a global IP network.

  (6) Further, according to the present invention, in the socket management server used in the communication management system according to (1), there is a request for registering socket information of the server from a server connected to the second network. In this case, when there is a request for selecting a communication partner from the socket information registration means for registering the socket information of the server and the client connected to the first network, a device effective as the communication partner of the client Communication partner presentation means for presenting the socket information of the client to the second gateway, and a client-side pseudo socket for connecting to the client when the client requests to connect to the server. Build a server side pseudo socket to connect to the server and build it in the first gateway A socket tunnel setting means for setting a communication path between the client and the server by connecting the client-side pseudo socket and the server-side pseudo socket with a predetermined communication path and setting a socket tunnel. Is a socket management server characterized by

  (7) According to the present invention, in the method for managing communication in the communication management system according to (1), when there is a request for registering socket information of the server from a server connected to the second network. The socket information registration step for registering the socket information of the server, and when there is a request for selecting a communication partner from the client connected to the first network, A communication partner presentation step for presenting socket information to the client, and a client-side pseudo socket for connecting to the client when the client requests to connect to the server is constructed in the second gateway And a server-side pseudo socket for connecting to the server is constructed in the first gateway. A socket tunnel setting step of setting a communication path between the client and the server by connecting a client-side pseudo socket and the server-side pseudo socket by a predetermined communication path and setting a socket tunnel. Is a communication management method.

  (8) The present invention also includes a first gateway connected to a first network, a second gateway connected to a second network, the first gateway, and the second gateway. A socket management server connected to both, wherein the socket management server receives a request to register socket information of the server from a server connected to the second network. , When there is a request to select a communication partner from one of a plurality of clients connected to the first network and a socket information registration means for registering the socket information of the server. A communication partner presentation means for presenting socket information of a device effective as a communication partner to the client, and a connection from the client to the server. When there is a request, a client-side pseudo socket for connecting to the client is constructed in the second gateway, and a server-side pseudo socket for connecting to the server is constructed in the first gateway. A socket tunnel setting means for setting a communication path between the client and the server by connecting the client side pseudo socket and the server side pseudo socket with a predetermined communication path and setting a socket tunnel; It is a communication management system characterized by including.

  (9) Further, the present invention provides the communication management system according to (8), wherein the socket information registration unit is configured to connect a socket of the server from any one of a plurality of servers connected to the second network. When there is a request for registering information, the socket information of the server is registered, and the socket tunnel setting means, when there is a request to connect to any of the servers from any of the clients, The client side pseudo socket for connecting to a client is constructed in the second gateway, and the server side pseudo socket for connecting to any of the servers is constructed in the first gateway, and the client A side pseudo socket and the server side pseudo socket are connected by a predetermined communication path to set the socket tunnel. What is a communication management system and sets a communication path between the one of the client and the one of the servers.

  As described above, according to the present invention, it is possible to provide a system capable of performing socket communication in a pseudo manner regardless of the network environment.

  DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments of the invention will be described with reference to the drawings.

Communication management system The communication management system according to the present embodiment uses socket communication to construct a network between a client and a server, so that connection management is easier than before and a stable communication service is provided. The purpose is to do.

1. Form of Communication Path FIG. 1 is a conceptual diagram of a communication management system in the present embodiment. In order to perform socket communication between the client 10 and the server 20, the first gateway 12 and the second gateway 22 are interposed between the client 10 and the server 20. The client socket 14 in the client 20 is connected to the server side pseudo socket 16 in the first gateway 12. The server socket 24 in the server 20 is connected to a client side pseudo socket 26 in the second gateway 22.

  The server side pseudo socket 16 literally has a function as a pseudo socket and is the same as that connected to the server 20 when viewed from the client 10. Further, the client side pseudo socket 26 literally has a function as a pseudo socket. From the viewpoint of the server 20, the client side pseudo socket 26 is similar to the state in which the client 10 is connected.

Socket Tunnel and Related Apparatus As shown in FIG. 1, a socket tunnel 30 is constructed between the first gateway 12 and the second gateway 22.

  As long as the communication protocol in the socket tunnel 30 is basically a data communication protocol that can be used in the target network, any communication protocol may be selected and used.

  As shown in FIG. 1, the basic configuration of the socket tunnel 30 includes a switch server 40 and an HTTPS communication technology (Port 443), which are characteristic configurations of the present embodiment. The switch server 40 and HTTPS communication technology (Port 443) will be described in detail later.

  First, tunnel connection edge clients 18 and 28 are provided on the first gateway 12 and the second gateway 22 side, respectively (see FIG. 1). Then, communication between the edge client 18 and the switch server 40 is performed using the HTTPS communication technology (Port 443) described above. Similarly, communication between the edge client 28 and the switch server 40 is performed using HTTPS communication technology (Port 443). When the HTTPS communication technology (Port 443) is used, the switch server 40 is an HTTPS server. Similarly, when the HTTPS communication technique (Port 443) is used, the edge clients 18 and 28 are HTTPS clients.

  The switch server 40 in FIG. 1 establishes a communication path using socket communication between the server side pseudo socket 16 and the client side pseudo socket 26. One of the characteristic matters in the present invention is that the communication path between the client 10 and the server 20 is managed by the switch server 40. With such a configuration, since the switch server 40 performs the contents of the socket tunnel that each application had to manage in the past, the application need not consider the contents of the socket tunnel and concentrate on the original work. Is possible.

  In such a socket tunnel 30, first, edge clients 18 and 28 for tunnel connection existing on the first gateway 12 and second gateway 22 side are connected to the switch server 40 inside the tunnel from both ends (see FIG. 1). Confirmation is performed, and if there is transmission data on the edge client 18 or 28 side, the transmission data is added to the connection confirmation packet and transmitted to the switch server 40. After determining the destination edge client of the data using a switch table (described later), the switch server 40 adds the transmission data to the connection confirmation response to the destination edge client and transmits the data to the destination edge client. Is adopted.

  As a communication example of the socket tunnel 30, as described above, it is possible to use the HTTPS communication technology (Port 443) which is a Web communication technology as a preferable example.

  By connecting the pseudo socket between the first gateway 12 and the second gateway 22 to the HTTPS server (that is, the switch server 40) existing in the socket tunnel 30 from both, a communication path can be constructed.

  The HTTPS clients (that is, the edge clients 18 and 28) of the first gateway 12 and the second gateway 22 periodically transmit connection notifications to the HTTPS server (that is, the switch server 40), so that the HTTPS server side To see if there is data from other gateways addressed to you. At this time, when the message data from another gateway is received, the HTTPS server can transmit a data message to the destination gateway on the connection notification session. The HTTPS client notifies the application for pseudo socket of this data message received from the HTTPS server, whereby communication between the client and the server is executed.

  Although the socket tunnel 30 has been described above, various communication techniques can be used to configure the socket tunnel 30. However, it is preferable to use so-called secure connection (simply referred to as secure connection) regardless of the number of communication technologies used.

  That is, the socket tunnel 30 includes a secure connection between the first gateway 12 and the switch server 40, and a secure connection between the switch server 40 and the second gateway 22 and the switch server 40. Is preferred).

  In the example described above, as a secure connection, a connection using an HTTPS communication technique in which an SSL encryption function using the port 443 is added to the HTTP protocol used for transmitting and receiving data between the Web server and the client. An example of use is shown. Of course, other secure connections are possible.

  The switch server 40 in FIG. 1 is a server to which a plurality of different gateways are connected. In FIG. 1, the switch server 40 is connected to the first gateway 12 and the second gateway 22, but it is preferable to connect to more gateways in practice.

  In the present embodiment, the switch server 40 stores the socket information of the client 10 and the socket information of the server 20 and has a function of establishing a tunnel connection between the client 10 and the server 20.

  Therefore, hereinafter, the switch server 40 is referred to as a socket management server 140. The socket management server 140 has a function of managing the number of socket connections and the registration and withdrawal of socket information.

  Note that the socket management server and NSP in various drawings and explanations to be described later have similar configurations and functions.

  Since these functions are functions that have been conventionally executed by application programs, it is easy for those skilled in the art to provide the socket management server 140 with these functions.

  By the way, in the present embodiment, the use of the port 443 is described as an example for realizing secure connection. However, the communication protocol used in the socket tunnel 30 is not particularly defined, and is basically As long as it is a data communication protocol that can be used in the target network, the socket tunnel 30 can be constructed using any communication protocol.

In this embodiment, for example, the edge client 12 in FIG. 1 is connected to the client application program 45 through the server side pseudo socket 16 and the client socket 14 in the client 10.

  A server side pseudo socket 16 in FIG. 1 is a socket having a function of a server socket in a pseudo manner. Therefore, connecting the client 10 to the server-side pseudo socket 16 is the same as connecting to the server 20 from the viewpoint of the client 10.

  The communication management system, which is a characteristic system in the present embodiment, includes a first gateway 12, a second gateway 22, and a socket tunnel 30 (FIG. 1). With such a communication management system, the client 10 can operate as if it is directly connected to the server socket, and the burden on the client 10 is reduced. Further, the server 20 can operate as if it is directly connected to the client socket, and the load on the server 20 is reduced.

Use of socket tunnel communication
Actual application This socket tunnel communication can be used for various applications. The present invention is basically a VPN (Virtual Private Network) for enabling various application servers existing in a local IP domain to be accessed from clients existing in the local IP domain (local site). ) And can be used for various purposes as described above. This VPN is a secure VPN (Virtual Private Network) using SSL encryption communication.

  The most common advantage of the construction of the socket tunnel communication system according to the present embodiment is that the server / client / can communicate with each other without being aware of the local / global IP network environment.

  In addition, since management operations such as gateway registration / deletion of pseudo sockets and client communication session management are executed by the HTTPS server (socket management server 140) in the socket tunnel 30, the management burden on the client 10 and the server 20 is reduced. At the same time, it is possible to provide a safer connection-type communication service.

  Furthermore, IP multicast communication that has been difficult to transmit / receive using the Internet line can be transmitted / received by using the socket tunnel communication technology of the present embodiment. Therefore, for example, the transmission form that is difficult with the existing technology such as PPTP / L2TP / IP-VPN / SSL-VPN can be easily realized by the socket tunnel communication technique of the present embodiment. .

Operational Example FIG. 2 shows an explanatory diagram (time chart) when communication is performed between the client 10 and the server 20 by a socket tunnel. As shown in FIG. 2, the client 10 is connected to a first gateway 12 on the client side. The first gateway 12 on the client side is connected to the socket management server 140 via the client side NAT router 110. The server 20 is connected to a second gateway 22 on the server side. The server-side second gateway 22 is connected to the socket management server 140 via the server-side NAT router 120.

  In FIG. 2, the first gateway 12 is represented as a device independent of the client 10, but it is also preferable that the first gateway 12 is configured by application software that operates on the client 10.

  As shown in FIG. 2, the client 10 is located in the local IP network 50, and the server 20 is located in the local IP network 60.

  The socket tunnel 30 for connecting these two local IP networks 50 and 60 is provided in the global IP network 70. That is, the socket management server 140 and the like constituting the socket tunnel 30 are provided on the global IP network 70.

  In this embodiment, the server 20 on the local IP network 60 and the client 10 on the local IP network 50 can be connected using the socket tunnel 30 provided on the global IP network 70 in this way.

Specific operation A specific operation example will be described below.

Connection Setting A connection is established between the client 10 and the server 20 in FIG. 2 according to the following procedure.

(Step 1.)
First, the server 20 that intends to provide a service to the client 10 registers (requests) the server application socket information and the usage client information with the socket management server 140. This request (S1) is represented as message S1 in FIG.

  In response to this request, the socket management server 140 registers application socket information therein. This registration is performed by a predetermined program writing the predetermined information in a recording means such as a hard disk. This program (and the computer (socket management server 140) that executes the program) corresponds to a preferred example of the registration means in the claims.

  Here, if the other party providing the service is a general client application, since the client side already has the application, the client 10 information may be only the client socket information.

(Step 2.)
On the other hand, the client 10 accesses the socket management server 140 with a Web browser and acquires a list of connectable servers. That is, the socket management server 140 has a function as a Web server, and provides the client 10 with information on the server application socket recorded in step 1 above.

  A program for realizing such a function as a Web server (and a computer that executes the program) corresponds to a preferred example of a communication partner presentation unit in the claims.

  The client 10 displays the list of servers obtained in this manner on the display, and the user selects a server to be used from this screen (service participation). As a result of the selection operation in the display / selection operation, a selection message S2 is transmitted to the socket management server 140 (see FIG. 3).

  If the client 10 does not have predetermined client software, it is preferable to download the client software from the socket management server 140 and install it on the client 106.

(Step 3.)
Next, in step 2 above, after the server to be used is selected, the socket management server 140 sets the socket information of the client 10 for the second gateway 22 on the server side (in FIG. 2, At the same time, the socket information of the server 20 is set for the first gateway 12 on the client side (indicated by S3a in FIG. 2).

  If the execution of these processes in step 3 is successful, the client 10 or the like can check the result of the server socket information or the like with a Web browser or the like.

  The setting of the socket information is performed by a predetermined program, and the program and the computer (socket management server 140) executing the program correspond to a preferable example of the socket tunnel setting unit in the claims.

(Step 4.)
When the execution of the setting process (step 3) is successful, a report that the setting of the socket tunnel communication has been completed is transmitted from the first gateway 12 on the client side to the socket management server 140 (FIG. 2, S4a).

  Similarly, when the execution of the process is successful, and the server side gateway 122 sends a report that the setting of the socket tunnel communication is completed to the socket management server 140. This transmission is represented as message S4 in FIG. 3 (S4b in FIG. 2).

(Step 5)
Thereafter, the socket management server 140 transmits a report that the setting of the socket tunnel communication is completed to the client 10. This transmission is represented as message S5 in FIG.

  In this way, a connection using socket tunnel communication is established between the client 10 and the server 20 in FIG.

  These series of operations are performed by a predetermined program, and this program and the computer (socket management server 140) executing this program correspond to a preferred example of the socket tunnel setting means in the claims.

Deletion of Connection Next, the operation for deleting the established connection for a predetermined reason will be described.

(Step 1.)
When deleting the connection, the socket management server 140 transmits an instruction to delete the setting of the socket tunnel communication to the first gateway 12 on the client side. This deletion instruction is represented as message S6a in FIG.

  Similarly, the socket management server 140 transmits an instruction to delete the setting of socket tunnel communication to the second gateway 22 on the server side. This deletion instruction is represented as message S6b in FIG.

  Such a deletion instruction is transmitted by a program in the socket management server 140, and this program (and a computer that issues a deletion instruction based on the program (socket management server 140)) is suitable as a deletion means in claims. It corresponds to an example.

(Step 2.)
Next, the first gateway 12 on the client side deletes the setting related to the socket tunnel 30 based on the above instruction, and then reports to the socket management server 140 that the deletion of the socket tunnel setting is completed. This report message is represented as message S7a in FIG.

  Similarly, the second gateway 22 on the server side, after deleting the settings related to the socket tunnel 30, reports to the socket management server 140 that the deletion of the socket tunnel settings has been completed. This report message is represented as message S7b in FIG.

  In this way, the connection established between the client 10 and the server 20 in FIG. 2 is deleted.

Service Model A conceptual diagram of a service model to which socket tunnel communication in the present embodiment is applied is shown in FIG.

  First, the socket tunnel communication service model is composed of the following business elements.

1. ASP (Application Service Provider): A business element that provides an application and operates the application.
2. NSP (Network Service Provider): A business element whose core is to construct socket tunnel communication, manage socket tunnel communication, and operate socket tunnel communication.
3. USER: ASP business element.
The manner in which these elements are connected to each other is shown in FIG.

  A plurality of ASPs (for example, the first ASP 310a and the second ASP 310b in FIG. 3) are registered in the NSP 300.

The USER 312a, the USER 312b, 312c, and 312d access the NSP 300 and select a service to be connected from the Web screen. Since the NSP 300 provides the USER 312 with a Web page presenting the contents of the ASP 310 registered in the NSP 300, the USER 312 can know available services by referring to this Web screen.
USER has the same meaning as the user.

  The NSP 300 is a provider of the socket tunnel 30 described so far, and is a business entity that provides socket management and socket switch services using the socket management server 140 (same as the switch server 40). The NSP 300 exists in the IP network 314.

  With such a configuration, the USER 312 and the ASP 310 can perform bidirectional communication connection (socket connection) between the ASP 310 and the USER 312 without depending on each other's IP network environment.

  The ASP 310 and the USER 312 are always connected via a socket tunnel switch (denoted as a socket switch 300a in FIG. 3) of the NSP 300. Accordingly, it is possible to easily provide a push-type real-time data distribution service, which is difficult for the ASP 310 using the conventional Web technology, such as performing real-time data distribution using multicast.

  Accordingly, services such as Internet broadcasting and real-time video distribution can be provided to the USER 312 (ad) connected to the socket.

  In FIG. 3, the first ASP 310a constructs three socket tunnels 30 and provides services to the USER 312a and the USER 312b. Of these, the USER 312b uses two sockets and uses the services of the two USER application first ASPs 30b.

  In FIG. 3, the second ASP 310b constructs two socket tunnels 30 and provides services to the USER 312c and the USER 312d. The USER 312c uses one socket, and the USER 312d also uses one socket and uses the service of the second ASP 30b.

  Further, the business model shown in FIG. 3 can be applied to, for example, a real-time video distribution service using a home camera or a medical activity using a network.

Summary In this embodiment, socket tunnel communication is established from various application servers in the local IP network to clients in a local IP network different from the local IP network, and communication by socket connection is performed. Can be provided easily.

  What is characteristic in the present embodiment is that a socket management server 140 that performs construction of socket tunnels, management of socket tunnels, and the like is provided. Thereby, the user and the server can use the constructed socket communication without managing the socket tunnel.

  In particular, since the socket information of each gateway, server, and client can be centrally managed for registration, deletion, session management, and the like, a connection-type communication service that is safer than before may be provided. Further, since the burden on the client and server is reduced, a more stable network operation may be possible.

  Further, if SSL encryption communication or the like is used, a VPN (Virtual Private Network) can be constructed more securely.

  Furthermore, in this embodiment, since it is not necessary to store personal information of the user on the global network, it may be expected that the security is improved as compared with the conventional case.

It is explanatory drawing which shows the outline | summary of the socket communication system of this Embodiment. It is a time chart about construction and deletion of socket tunnel communication. It is a conceptual diagram which shows an example of a service model. It is a conceptual diagram of socket communication.

Explanation of symbols

10 client 12 first gateway 14 client socket 16 server side pseudo socket 18 edge client 20 server 22 second gateway 24 server socket 26 client side pseudo socket 28 edge client 30 socket tunnel 40 switch server 50 local IP network (client side)
60 Local IP network (server side)
70 Global IP network 110 Gateway 120 Gateway 140 Socket management server 200 Client 202 Server 204 Socket 206 Socket 208 Network 210 Application program 212 Application program 300 NSP
310 ASP
312 USER
314 IP network S1, S2, S3, S4, S5, S6, S7 message

Claims (9)

A first gateway connected to a first network;
A second gateway connected to a second network;
A socket management server connected to both the first gateway and the second gateway;
A communication management system including:
The socket management server is
Socket information registration means for registering socket information of the server when there is a request to register socket information of the server from a server connected to the second network;
A communication partner presenting means for presenting socket information of a device effective as a communication partner of the client to the client when there is a request to select a communication partner from a client connected to the first network;
When there is a request to connect to the server from the client, a client side pseudo socket for connecting to the client is constructed in the second gateway, and a server side pseudo socket for connecting to the server is provided. The communication path between the client and the server is established by constructing the first gateway, connecting the client side pseudo socket and the server side pseudo socket with a predetermined communication path, and setting a socket tunnel. Socket tunnel setting means,
A communication management system comprising: The communication management system according to claim 1,
The socket management server is
When there is a request from the client to delete a communication path set with the server, the client side pseudo socket is deleted from the second gateway, and the server side pseudo socket is deleted from the first gateway. Socket tunnel deletion means to delete the socket,
A communication management system comprising: The communication management system according to claim 1,
The communication management system, wherein the socket management server is located on a third network different from both the first network and the second network. The communication management system according to claim 1,
The communication management system, wherein the first network is a local IP network, and the second network is a local IP network different from the first network. The communication management system according to claim 3, wherein
The communication management system according to claim 3, wherein the third network is a global IP network. In the socket management server used in the communication management system according to claim 1,
Socket information registration means for registering socket information of the server when there is a request to register socket information of the server from a server connected to the second network;
A communication partner presenting means for presenting socket information of a device effective as a communication partner of the client to the client when there is a request to select a communication partner from a client connected to the first network;
When there is a request to connect to the server from the client, a client side pseudo socket for connecting to the client is constructed in the second gateway, and a server side pseudo socket for connecting to the server is provided. The communication path between the client and the server is established by constructing the first gateway, connecting the client side pseudo socket and the server side pseudo socket with a predetermined communication path, and setting a socket tunnel. Socket tunnel setting means,
A socket management server comprising: In the communication management system of Claim 1, In the method of managing communication,
A socket information registration step of registering socket information of the server when there is a request to register socket information of the server from a server connected to the second network;
A communication partner presenting step of presenting socket information of a device effective as a communication partner of the client to the client when there is a request to select a communication partner from a client connected to the first network;
When there is a request to connect to the server from the client, a client side pseudo socket for connecting to the client is constructed in the second gateway, and a server side pseudo socket for connecting to the server is provided. The communication path between the client and the server is established by constructing the first gateway, connecting the client side pseudo socket and the server side pseudo socket with a predetermined communication path, and setting a socket tunnel. Socket tunnel setting step;
A communication management method comprising: A first gateway connected to a first network;
A second gateway connected to a second network;
A socket management server connected to both the first gateway and the second gateway;
A communication management system including:
The socket management server is
Socket information registration means for registering socket information of the server when there is a request to register socket information of the server from a server connected to the second network;
When one of a plurality of clients connected to the first network receives a request to select a communication partner, the socket information of a device effective as the communication partner of the client is presented to the client. A communication partner presentation means;
When there is a request to connect to the server from any one of the clients, a client side pseudo socket for connecting to the client is constructed in the second gateway, and the server side for connecting to the server By constructing a pseudo socket in the first gateway, connecting the client side pseudo socket and the server side pseudo socket with a predetermined communication path, and setting a socket tunnel, the client and the server are connected. Socket tunnel setting means for setting the communication path of
A communication management system comprising: The communication management system according to claim 8, wherein
The socket information registration means registers the socket information of the server when there is a request to register the socket information of the server from any of the plurality of servers connected to the second network. ,
The socket tunnel setting means establishes the client side pseudo socket in the second gateway for connecting to any one of the clients when there is a request to connect to any of the servers. And constructing the server side pseudo socket for connecting to any one of the servers in the first gateway, connecting the client side pseudo socket and the server side pseudo socket through a predetermined communication path, A communication management system, wherein a communication path between any one of the clients and any one of the servers is set by setting a socket tunnel.