JP6536050B2 - Communication system, control device, communication method, and computer program - Google Patents

Description

  The present invention relates to the technology of communication between devices in a network and devices outside the network.

  Recently, an apparatus such as an image forming apparatus provided in a LAN (Local Area Network) and an apparatus such as a NAS (Network Attached Storage) (hereinafter referred to as an "internal apparatus") is an apparatus outside the LAN (hereinafter referred to as an "external A technology that is used remotely from the device) is proposed. In the LAN, an apparatus such as a router is provided as a gateway.

  As methods for improving communication between an external device and an internal device, methods as described in Patent Documents 1 and 2 have been proposed.

  The method described in Patent Document 1 is a method for efficiently performing communication between a private network and a public communication network, and is constructed with a private IP address system clarified not to be used on a public network. Between a private network and a public network, a NAPT router and an address / port management transfer device connected to the private network are provided, and a computer connected to the private network and a computer or public network connected to the public network In data communication using a public circuit between a computer connected to a connected private network, calling and data communication can be performed bidirectionally.

  The method described in Patent Document 2 is a correction for enabling transmission of a packet beyond the minimum guaranteed bandwidth when resources are available while securing the minimum guaranteed bandwidth, and is set in the IPNW. When the gateway apparatus that transmits and receives data via the priority tunnel and the non-priority tunnel receives a packet, the policing setting unit determines whether the packet should be subjected to priority processing (setting of bandwidth guarantee) or not. When it is determined that it should be performed, the upper limit bandwidth for each flow is set with reference to policing information. Then, the tunnel selection unit selects packets up to the set upper limit band to be transmitted using the priority tunnel, and selects packets exceeding the upper limit band to be transmitted using the non-priority tunnel. The packet transmission unit transfers the packet using the tunnel selected by the tunnel selection unit.

JP 2004-228736 A JP 2012-44344 A

  When the external device and the internal device communicate, they physically go through the gateway. When communication is performed via a tunnel, packet encapsulation at the gateway and decoding of the encapsulated packet are burdened. Thus, the greater the number of simultaneous communications, the greater the load on the gateway.

  SUMMARY OF THE INVENTION In view of such problems, the present invention aims to reduce the load on the gateway involved in the communication between an external device and an internal device as compared with the prior art.

A communication system according to an aspect of the present invention is a communication system including a first device provided in a specific network and a second device provided outside the network, When the number of second tunnels having at least one of the gateway and the second device other than the tunnel between the gateway of the network and the second device is greater than or equal to a predetermined number. Request means for giving the first device a request for establishing a connection between the first device and the second device via the tunnel, and before the connection is established. Transmitting part of data used for execution of a specific job to the first device through the tunnel, and after the connection is established, the connection To the first device via a command means for transmitting the remaining instructions and the data of the execution of the specific job, it is provided to the first device, establishing means for establishing the connection, but And means for disconnecting the tunnel after the second device is provided with the request.
A communication system according to another aspect of the present invention is a communication system including a first device provided in a specific network and a second device provided outside the network, The second device requests the establishment of a connection between the first device and the second device via the tunnel between the gateway of the network and the second device, the first device Request means for giving to the first device via the connection, and a command for execution of a specific job to the first device, and further, until the tunnel is disconnected, the connection and the tunnel via the connection. Data to be used for execution of the specific job is divided into the tunnel and the connection and transmitted to the first device, and after the tunnel is disconnected, Command means for transmitting the data to the first device via the connection, the first device being provided with establishment means for establishing the connection, and the second device being provided Furthermore, a disconnecting means is provided for disconnecting the tunnel after giving the request.
A communication system according to another aspect of the present invention is a communication configured by a first device provided in a specific network and a second device provided outside the network, which executes a specific job. The system, wherein, when there are a plurality of the specific jobs in the second device, one tunnel is established between the gateway of the network and the second device for each of the specific jobs. Request means for providing the first device with a request for establishing a connection between the first device and the second device, the first device being provided with the plurality of identification devices Establishing means for establishing the connection for the job from the lower priority job among the jobs in the first job, and after giving the second apparatus the request, Cutting means for cutting the tunnel, it is provided.

  According to the present invention, it is possible to reduce the load on the gateway associated with communication between a device in the network and a device outside the network.

It is a figure which shows the example of the whole structure of an information processing system. It is a figure which shows the example of the hardware constitutions of a gateway. FIG. 2 is a diagram illustrating an example of a hardware configuration of an image forming apparatus. It is a figure which shows the example of the hardware constitutions of a cloud server and a management server. FIG. 2 is a diagram showing an example of the functional configuration of each of the image forming apparatus and the gateway. It is a figure which shows the example of a functional structure of each of a cloud server and a management server. It is a figure which shows the example of device attribute data. FIG. 6 is a sequence diagram showing an example of the flow of processing of each of a cloud server, a management server, a gateway, and an image forming apparatus during a print job. FIG. 6 is a sequence diagram showing an example of the flow of processing of each of a cloud server, a management server, a gateway, and an image forming apparatus during a print job. FIG. 14 is a sequence diagram showing an example of the flow of processing of each of the cloud server, the management server, the gateway, and the file server in the case of a secure storage job. It is a flowchart explaining the example of the flow of the whole processing of a cloud server. FIG. 2 is a diagram showing an example of the functional configuration of each of a gateway and an image forming apparatus. It is a figure which shows the example of a functional structure of each of a cloud server and a management server. FIG. 6 is a sequence diagram showing an example of the flow of processing of each of a cloud server, a management server, a gateway, and an image forming apparatus during a print job. FIG. 6 is a sequence diagram showing an example of the flow of processing of each of a cloud server, a management server, a gateway, and an image forming apparatus during a print job. It is a flowchart explaining the example of the flow of the whole processing of a cloud server. It is a flowchart explaining the example of the flow of the whole processing of a cloud server. FIG. 14 is a sequence diagram showing a modified example of the flow of processing of each of the cloud server, the management server, the gateway, and the image forming apparatus at the time of a print job. FIG. 14 is a sequence diagram showing a modified example of the flow of processing of each of the cloud server, the management server, the gateway, and the image forming apparatus at the time of a print job.

First Embodiment
FIG. 1 is a diagram showing an example of the overall configuration of the information processing system 5. FIG. 2 is a diagram showing an example of the hardware configuration of the gateway 16. FIG. 3 is a diagram showing an example of the hardware configuration of the image forming apparatus 10. As shown in FIG. FIG. 4 is a diagram showing an example of the hardware configuration of the cloud server 21 and the management server 24. As shown in FIG.

  As shown in FIG. 1, the information processing system 5 includes a local area network 1, a cloud server 21, a management server 24, a terminal device 3, a communication line 4 and the like.

  The local area network 1 is provided in a public office, a company, or a school. The local area network 1 includes an image forming apparatus 10, a terminal device 14, a file server 15, a gateway 16, a communication line 17, and the like.

  The gateway 16, the cloud server 21, the management server 24, and the terminal device 3 can communicate via the communication line 4. An Internet line is used as the communication line 4.

  The gateway 16 relays communication performed between each device of the local area network 1 and the cloud server 21, the management server 24, and the terminal device 3.

  However, the access from devices outside the local area network 1 (hereinafter referred to as “external devices”) to devices within the local area network 1 (hereinafter referred to as “internal devices”) is strictly limited. . In particular, although the internal device can access and establish a connection from the external device, the external device can not access and establish the connection from the internal device.

  The gateway 16 is, as shown in FIG. 2, a central processing unit (CPU) 16a, a random access memory (RAM) 16b, a read only memory (ROM) 16c, a flash memory 16d, a wide area network (WAN) port 16e, a LAN (LAN). It is configured by various circuits in addition to the Local Area Network port 16f. For example, a software as a service (SaaS) type gateway is used as the gateway 16. The “SaaS-type gateway” is a device having a SaaS gateway function, and is configured by a routing function, an HTTP tunnel function, an XMPP (eXtensible Messaging and Presence Protocol) client function, and software for control. It is a device.

  The WAN port 16e is connected to a line on the Internet side, ie, the communication line 4. The LAN port 16 f is connected to a line on the side of the local area network 1, that is, a communication line 17.

  A data relay program 16P is stored in the ROM 16c or the flash memory 16d. The data relay program 16P is loaded into the RAM 16b and executed by the CPU 16a.

  The communication line 17 is configured by a twisted pair cable, a hub, and the like. When the image forming apparatus 10, the terminal device 14, or the file server 15 has a wireless LAN function, the communication line 17 may be further provided with a wireless base station.

  The image forming apparatus 10 is an image processing apparatus provided with functions such as copying, scanning, faxing, and PC printing. It may also be called "MFP" or "MFP (Multi Function Peripherals)".

  As shown in FIG. 3, the image forming apparatus 10 includes a CPU 10a, a RAM 10b, a ROM 10c, an auxiliary storage device 10d, a touch panel display 10e, an operation key panel 10f, an NIC 10g, a modem 10h, a scan unit 10i, an image processing unit 10j, and a print unit 10k. Composed of

  The touch panel display 10e displays a screen showing a message for the user, a screen for the user to input a command or information, and a screen showing a result of processing executed by the CPU 10a or the like. Further, the touch panel display 10 e sends a signal indicating the touched position to the CPU 10 a.

  The operation key panel 10f is a so-called hardware keyboard, and includes keys such as a ten key, a start key, a stop key, a power key, and various function keys.

  The NIC 10 g is a device for communicating with devices inside and outside the local area network 1 (such as the terminal device 14 and the cloud server 21) via the communication line 17 or the like.

  The modem 10 h exchanges image data with the facsimile terminal according to a protocol such as G3.

  The scan unit 10i reads an image written on a sheet set on a platen glass to generate image data.

  The image processing unit 10j performs processing such as resolution conversion, tilt correction, and top-bottom correction on image data obtained by the NIC 10g, the modem 10h, or the scan unit 10i.

  The print unit 10k prints an image received from another apparatus, as well as the image read by the scan unit 10i, on a sheet of paper after the image processing unit 10j performs processing as necessary.

  The ROM 10c or the auxiliary storage device 10d stores a program for realizing the above-mentioned functions such as copying. Further, the cooperation program 10P is stored.

  These programs are loaded into the RAM 10b as needed, and executed by the CPU 10a. An HDD (Hard Disk Drive), an SSD (Solid State Drive), or the like is used as the auxiliary storage device 10d.

  The terminal device 14 is a client for using the service of the image forming apparatus 10. As the terminal device 14, a personal computer, a smartphone, a tablet computer, or the like is used.

  The file server 15 stores files and provides files based on requests from other devices. A NAS (Network Attached Storage) is used as the file server 15.

  The cloud server 21 is a server for providing a so-called cloud service. In particular, according to the cloud service of the cloud server 21, a print job can be given from the external apparatus to the image forming apparatus 10, and the image forming apparatus 10 can perform printing. Also, files can be saved from the external device to the file server 15. A so-called server machine is used as the cloud server 21.

  As shown in FIG. 4, the cloud server 21 includes a CPU 20a, a RAM 20b, a ROM 20c, an auxiliary storage device 20d, an NIC 20e, and the like.

  The ROM 20c or the auxiliary storage device 20d stores a server program 21P for providing the above-described cloud service. The server program 21P is loaded into the RAM 20b and executed by the CPU 20a.

  The management server 24 manages information on internal devices of the local area network 1 and supports external devices to allow access to the internal devices.

  The hardware configuration of the management server 24 is also the same as the hardware configuration of the cloud server 21, as shown in FIG. However, in place of the server program 21P, a management program 24P is stored in the ROM 20c or the auxiliary storage device 20d.

  The terminal device 3 is a client for using the image forming apparatus 10 from the outside of the local area network 1. As the terminal device 3, a personal computer, a smartphone, a tablet computer, or the like is used.

  In the terminal device 3, an application for using the service of the cloud server 21 is installed.

  FIG. 5 is a diagram showing an example of the functional configuration of each of the image forming apparatus 10 and the gateway 16. FIG. 6 is a diagram showing an example of the functional configuration of each of the cloud server 21 and the management server 24. As shown in FIG.

  According to the cooperation program 10P, the data relay program 16P, the server program 21P, and the management program 24P, the user operates the terminal device 3 to cause the image forming apparatus 10 to execute a print job or cause the file server 15 to save a file. can do. Furthermore, according to these programs, the load on the gateway 16 can be reduced as compared to the conventional case. Hereinafter, these mechanisms will be described with reference to FIGS.

  By executing the data relay program 16P, the tunnel establishment unit 161, the first outer / inner relay unit 162, the first inner / outer relay unit 163, the second outer / inner relay unit 164, the second inner / outer relay shown in FIG. The unit 165, the log data writing unit 166, the log data storage unit 167, the tunnel disconnection unit 168, and the like are realized in the gateway 16.

  Note that all or part of the tunnel establishing unit 161 to the tunnel disconnecting unit 168 may be realized as a hardware module by a circuit such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The same applies to respective units described later of the image forming apparatus 10, the cloud server 21, and the management server 24.

  By executing the cooperation program 10P, the connection establishing unit 101, the job execution control unit 102, the job completion notification unit 103, the log notification unit 104, etc. shown in FIG. 5 are realized in the image forming apparatus 10.

  By executing the server program 21P, the job command reception unit 201, the tunnel request unit 202, the tunnel establishment unit 203, the function inquiry unit 204, the direct communication availability determination unit 205, the connection request unit 206, and the connection establishment unit illustrated in FIG. The cloud server 21 is realized with 207, a tunnel disconnection unit 208, a job assignment unit 209, a connection disconnection unit 210, and the like.

  By executing the management program 24P, the function storage unit 241, the request transfer unit 242, the function response unit 243, and the like illustrated in FIG.

[Preparation]
FIG. 7 is a diagram showing an example of the device attribute data 7A.

  The function storage unit 241 of the management server 24 stores, in advance, information related to functions of each internal device that can be used by an external device via the cloud service of the cloud server 21.

  Specifically, as shown in FIG. 7, device attribute data 7A of each of the internal devices such as the image forming device 10 and the file server 15 are stored. Hereinafter, the device attribute data 7A of the image forming apparatus 10 and the file server 15 may be described separately from “device attribute data 7A1” and “device attribute data 7A2”.

  In the device attribute data 7A, the "device code" field indicates an identifier of an internal device related to the device attribute data 7A. For example, an identifier of the image forming apparatus 10 is indicated in the device code of the device attribute data 7A1.

  The "connection establishment function presence / absence" field indicates whether or not the internal device related to the device attribute data 7A has a function of establishing a connection with an external device (hereinafter referred to as "connection establishment function"). "Yes" means having a connection establishment function, and "No" means not having a connection establishment function.

  The "spec" field indicates a function other than the connection establishment function that the internal device related to the device attribute data 7A has.

  The content of the device attribute data 7A is previously input by the administrator and registered in the function storage unit 241.

[Accept job order and establish tunnel]
The job command receiving unit 201 of the cloud server 21 receives a job command from the terminal device 3. Hereinafter, in particular, a case of receiving an instruction of a secure storage job that encrypts and stores a print job or a file that is a job for printing an image on paper will be described as an example.

  Further, at this time, the job command receiving unit 201 receives data to be used for the job from the terminal device 3. For example, in the case of a print job, the image data 7B of the image to be printed is received. In the case of a secure storage job, the file 7C to be stored is received. Furthermore, the specification of the internal device for executing the job is received. Hereinafter, the designated internal device will be referred to as "designated device".

  When a job command is received by the job command receiving unit 201, the tunnel request unit 202 requests the management server 24 to establish a tunnel between the cloud server 21 and the gateway 16. At this time, a tunnel establishment command 7D is sent to the management server 24. The tunnel establishment command 7D indicates an identifier of the cloud server 21 (for example, an IP (Internet Protocol) address).

  Then, in the management server 24, the request transfer unit 242 transfers the tunnel establishment command 7 D from the cloud server 21 to the gateway 16.

  In the gateway 16, when the tunnel establishment unit 161 receives the tunnel establishment command 7D from the management server 24, the tunnel establishment unit 161 accesses the cloud server 21 based on the tunnel establishment command 7D.

  Then, the tunnel establishing unit 161 and the tunnel establishing unit 203 of the cloud server 21 establish a tunnel between the gateway 16 and the cloud server 21. The establishment of the tunnel is done by known methods.

  The tunnel request unit 202 requests establishment of a tunnel each time a command of a job is given from the terminal device 3. Thus, a tunnel is established for each job.

[Tunnel reduction and job command]
As described above, when a tunnel is established between the external device and the gateway 16 each time there is a job command from the external device, the number of tunnels increases and the load on the gateway 16 increases. Then, communication between the internal device and the external device may be interrupted. In order to prevent this, the number of tunnels that can be present at the same time may be limited. In this case, the job that the external device causes the internal device to execute may be limited.

  Therefore, in order to reduce the load on the gateway 16, the process of tunnel reduction is performed as follows.

  In the cloud server 21, when the tunnel is established, the function inquiry unit 204 inquires the management server 24 whether or not the designated device (the internal device designated by the terminal device 3) has a connection establishing function. . At this time, inquiry data 7E indicating the device identifier of the designated device is transmitted to the management server 24.

  Then, in the management server 24, the function response unit 243 checks the presence or absence of the connection establishment function based on the device attribute data 7A (refer to FIG. 7) of the internal device shown in the inquiry data 7E. Data 7F is transmitted to the cloud server 21. For example, when the image forming apparatus 10 is designated, “Yes” is indicated in the connection establishment function field of the device attribute data 7A1, so the function reply unit 243 indicates data indicating that the connection establishment function is provided. It transmits to the cloud server 21 as answer data 7F.

  In the cloud server 21, when the response data 7F is obtained by the function inquiry unit 204, the direct communication possibility determination unit 205 can directly communicate with the designated device (without passing through a tunnel) based on this. Determine if you can. Specifically, if the response data 7F indicates that the connection establishment function is included, it is determined that communication can be performed directly. If it is indicated that the connection establishment function is not provided, it is determined that communication can not be performed directly.

  If it is determined by the direct communication availability determination unit 205 that the connection request unit 206 can directly communicate with the designated device, the cloud server 21 and the designated device are connected via the tunnel established by the tunnel establishment unit 203. Request the designated device to establish a connection between At this time, a connection establishment command 7G indicating an identifier (for example, an IP address) of the cloud server 21 is transmitted to the designated device.

  Hereinafter, the case where the image forming apparatus 10 has a connection establishing function and the designation device is the image forming apparatus 10 will be described as an example.

  In the image forming apparatus 10, when receiving the connection establishment command 7G, the connection establishment unit 101 accesses the cloud server 21 based on the connection establishment command 7G.

  Then, the connection establishing unit 101 and the connection establishing unit 207 of the cloud server 21 establish a connection between the image forming apparatus 10 and the cloud server 21. The connection is established by a known method.

  When the connection is established, the tunnel disconnection unit 208 disconnects (opens) the tunnel used to establish this connection.

  The job assignment unit 209 sends a job instruction to the designated device via the connection before or after or in parallel with the process of disconnecting the tunnel. At this time, data (such as image data 7B or file 7C) necessary for the job is transmitted to the designated device. For example, in the case of giving a print job instruction to the image forming apparatus 10, the image data 7B is transmitted.

  In the case of connection via a connection, job instructions and data are packetized in the cloud server 21 and delivered to the designated device via the gateway 16.

  When the function inquiry unit 204 obtains the response data 7F indicating that the connection establishment function is not provided, the job assignment unit 209 issues a job instruction to the designated device via the tunnel. At this time, as in the case of connection, data necessary for the job is transmitted to the designated device.

  Also, the job assignment unit 209 appropriately performs processing such as encryption of job instructions and data according to the connection. For example, if the connection supports SSL (Secure Sockets Layer), it encrypts and transmits based on SSL. You may ask the destination internal device whether it supports SSL. Alternatively, the device attribute data 7A of the internal device of the transmission destination may be acquired from the management server 24, and the determination may be made based on this.

  In the case of passing through a tunnel, job instructions and data are packetized in the cloud server 21 and encapsulated according to the tunnel protocol. Then, it is delivered to the designated device via the gateway 16.

[Relaying of data in the gateway 16]
As described above, although the external device and the internal device exchange data via a tunnel or connection, the data physically always passes through the gateway 16. At the gateway 16, the data is processed as follows.

  When receiving the capsule of the protocol of the tunnel from the external device, the first external / internal relay unit 162 converts it back into a packet and transfers it to the destination internal device.

  The first internal / external relay unit 163 encapsulates a packet of data transmitted from the internal device to the cloud server 21 and transfers the packet to the cloud server 21.

  When receiving the packet transmitted from the external device, the second outer / inner relay unit 164 transfers the packet to the destination internal device.

  The second internal / external relay unit 165 transfers to the cloud server 21 a packet of data transmitted from the internal device to the cloud server 21.

  The relaying by the first outer / inner relay section 162 to the second inner / outer relay section 165 is performed by a known method. Similarly, a capsule or packet of data exchanged between an external device and an internal device, which will be described later, is similarly relayed by any of the first outer / inner relay portion 162 to the second inner / outer relay portion 165.

[Job execution and post processing]
In the image forming apparatus 10, the job execution control unit 102 executes a print job when receiving a job instruction and image data 7B from the cloud server 21. That is, based on the image data 7B, the print unit 10k and the like are controlled such that an image is printed on a sheet.

  When a job is assigned via a connection, when the print job is completed, the following processing is performed by the job completion notification unit 103 and the log notification unit 104.

  The job completion notification unit 103 transmits job completion data 7H indicating that the print job is completed to the cloud server 21 via the connection.

  The log notification unit 104 transmits, to the gateway 16, log data 7J indicating a log related to the connection (such as an outline of communication performed via the connection).

  In the cloud server 21, when receiving the job completion data 7H via the connection, the connection disconnection unit 210 disconnects (releases) the connection.

  In the gateway 16, when the log data writing unit 166 receives the log data 7J, the log data writing unit 166 causes the log data storage unit 167 to store the log data 7J.

  On the other hand, when a job is assigned via a tunnel, processing is performed as follows in each device. Hereinafter, the case where the designated device is the file server 15 will be described as an example.

  When the file server 15 receives the file 7C together with the job command, the file server 15 saves the file 7C.

  In the gateway 16, when the transmission of the file 7C to the file server 15 is completed, the tunnel disconnection unit 168 disconnects (opens) the tunnel used for relaying the file 7C.

  The log data writing unit 166 causes the log data storage unit 167 to store log data 7 K indicating a log related to a tunnel (such as an outline of communication performed via this tunnel).

  FIGS. 8 and 9 are sequence diagrams showing an example of the process flow of the cloud server 21, the management server 24, the gateway 16, and the image forming apparatus 10 at the time of a print job.

  Next, referring to the flowcharts of FIG. 8 to FIG. 9, the flow of processing of each device when causing the internal device having the connection establishing function to execute a job is an example where the internal device is the image forming device 10. While explaining.

  When the cloud server 21 receives an instruction to cause the image forming apparatus 10 to execute a print job and the image data 7B from the terminal device 3 (# 701 in FIG. 8), the cloud server 21 transmits a tunnel establishment command 7D to the management server 24 Request establishment (creation) of a tunnel (# 702).

  When the management server 24 receives the tunnel establishment command 7D (# 721), the management server 24 transfers the same to the gateway 16 to request establishment of a new tunnel (# 722).

  When the gateway 16 receives the tunnel establishment command 7D (# 731), the gateway 16 accesses the cloud server 21 (# 732). Then, the gateway 16 and the cloud server 21 establish a new tunnel (# 703, # 733).

  The cloud server 21 inquires whether or not the image forming apparatus 10 has a connection establishment function by transmitting the inquiry data 7E to the management server 24 before or after or in parallel with the process of establishing a tunnel (# 704).

  When the management server 24 receives the inquiry data 7E (# 723), it generates the response data 7F based on the device attribute data 7A of the image forming apparatus 10, that is, the device attribute data 7A1 and transmits it to the cloud server 21 (# 724). . This makes an answer to the query. In this example, the response data 7F indicates that it has a connection establishment function.

  When the cloud server 21 receives the response data 7F (# 705), based on the response data 7F, whether or not communication with the image forming apparatus 10 can be performed without passing through a tunnel (that is, directly). It discriminates (# 706). In this example, since the response data 7F indicates that the connection establishment function is provided, it is determined that communication can be performed without passing through a tunnel.

  Then, the cloud server 21 requests establishment of a new connection by transmitting a connection establishment command 7G to the gateway 16 through the tunnel established in step # 703 (# 707).

  When the connection establishment command 7G is received (# 734), the gateway 16 requests establishment of a new connection by transferring the connection establishment command 7G to the image forming apparatus 10 (# 735).

  When receiving the connection establishment command 7G (# 741), the image forming apparatus 10 accesses the cloud server 21 via this tunnel (# 742). Then, the image forming apparatus 10 and the cloud server 21 establish a new connection (# 743, # 708).

  When the connection is established, the cloud server 21 disconnects (opens) this tunnel (# 709 in FIG. 9).

  Before or after the tunnel disconnection process, the cloud server 21 transmits a print job command and image data 7B to the image forming apparatus 10 via this connection (# 710).

  When receiving the print job command and the image data 7B (# 744), the image forming apparatus 10 executes the print job based on these (# 745). Then, the job completion data 7H is transmitted to the cloud server 21 via this connection (# 746), and the log data 7J is transmitted to the gateway 16 (# 747).

  When receiving the job completion data 7H (# 711), the cloud server 21 disconnects this connection (# 712).

  When the gateway 16 receives the log data 7J (# 736), it stores the log data 7J (# 737).

  FIG. 10 is a sequence diagram showing an example of the process flow of each of the cloud server 21, the management server 24, the gateway 16, and the file server 15 in the case of a secure storage job.

  Next, the flow of processing of each device when causing the internal device not having the connection establishment function to execute a job will be described with reference to the flowchart of FIG. Do.

  The process of accepting a job from the terminal device 3, the process of establishing a tunnel, the process of inquiring the presence or absence of a connection establishment function, and the process of determining whether or not direct communication can be performed are steps # 701 to # 706 in FIG. It carries out similarly to # 721-724, and # 731- # 733 (# 751- # 756 of FIG. 10, # 761-764, and # 771- # 773).

  However, in the present example, the secure storage job and the file 7C are received from the terminal device 3. Further, the inquiry and the answer are made regarding the presence or absence of the connection establishment function of the file server 15, not about the presence or absence of the connection establishment function of the image forming apparatus 10.

  In step # 756, the cloud server 21 determines that the file server 15 does not have the connection establishment function based on the result of the inquiry. Then, the command for the secure storage job and the file 7C are sent to the file server 15 via the tunnel established at step # 753 to the gateway 16 (# 757).

  When the gateway 16 receives the secure storage job command and the file 7C (# 774), the gateway 16 transfers these to the file server 15 (# 775).

  When the file server 15 receives the command of the secure storage job and the file 7C (# 781), the file server 15 encrypts the file 7C and stores it (# 782).

  Then, the gateway 16 disconnects this tunnel (# 776), and stores the log data 7K (# 777). The cloud server 21 may disconnect the tunnel.

  FIG. 11 is a flowchart illustrating an example of the overall processing flow of the cloud server 21.

  The cloud server 21 executes the process according to the procedure shown in FIG. 11 based on the server program 21P.

  When the cloud server 21 receives an instruction of a job, data to be used for the job, and designation of an internal device to execute the job from the terminal device 3 (Yes in # 31 of FIG. 11), the management server 24 establishes the tunnel. Request to the gateway 16 (# 32). Further, the management server 24 is inquired of the presence / absence of the connection establishment function of the designated internal device (designated device) (# 33).

  If a tunnel is established between the cloud server 21 and the gateway 16 (Yes in # 34), if the designated device has a connection establishment function (Yes in # 35), the cloud server 21 establishes a connection. , Requests the designated device via this tunnel and the gateway 16 (# 36).

  Then, when a connection is established between the cloud server 21 and the image forming apparatus 10 (Yes in # 37), the cloud server 21 disconnects this tunnel (# 38), and issues a job instruction via this connection. And the data used for it is transmitted to the designated device (# 39).

  Thereafter, when the job completion data 7H is received from the image forming apparatus 10, this connection is disconnected (# 40).

  On the other hand, if the designated device does not have the connection establishment function (No in # 35), the cloud server 21 transmits the job instruction and the data to be used for the job to the designated device via this tunnel and the gateway 16 (# 41 ).

  According to the first embodiment, by switching the tunnel to the connection if possible, the load on the gateway 16 involved in the communication between the external device and the internal device can be reduced as compared to the prior art.

Second Embodiment
FIG. 12 is a diagram showing an example of the functional configuration of each of the gateway 16 and the image forming apparatus 10. As shown in FIG. FIG. 13 is a diagram showing an example of the functional configuration of each of the cloud server 21 and the management server 24. As shown in FIG. FIGS. 14 and 15 are sequence diagrams showing an example of the process flow of the cloud server 21, the management server 24, the gateway 16, and the image forming apparatus 10 at the time of a print job.

  In the first embodiment, if the internal device has a connection establishing function, a connection is established between the cloud server 21 and the internal device, and a job command is issued from the cloud server 21 via the connection. Was given to At this time, the presence or absence of another job was not considered.

  In the second embodiment, a tunnel is used, and a connection is used after the occurrence of another job, in particular, a job to be executed by an internal device having no connection establishment function.

  In the second embodiment, the overall configuration of the local area network 1 is the same as that of the first embodiment, as shown in FIG. The hardware configuration of each of the gateway 16 and the image forming apparatus 10 is the same as that of the first embodiment, as shown in FIGS. 2 and 3. The hardware configuration of the cloud server 21 and the management server 24 is also the same as that of the first embodiment, as shown in FIG.

  However, a cooperation program 10Q is stored in the ROM 10c or the auxiliary storage device 10d of the image forming apparatus 10 instead of the cooperation program 10P (see FIG. 5). According to the cooperation program 10 P, the connection establishing unit 171, the job execution control unit 172, the job completion notification unit 173, and the log notification unit 174 shown in FIG. 12 are realized in the image forming apparatus 10.

  In addition, a server program 21Q is stored in the ROM 20c or the auxiliary storage device 20d of the cloud server 21 instead of the server program 21P (see FIG. 6). According to the server program 21Q, the job command reception unit 271, the tunnel request unit 272, the tunnel establishment unit 273, the function inquiry unit 274, the direct communication availability determination unit 275, the connection request unit 276, the connection establishment unit 277 shown in FIG. A disconnection unit 278, a job assignment unit 279, a connection disconnection unit 280, a switching necessity determination unit 281, a job interruption instruction unit 282, and the like are realized in the cloud server 21.

  As in the first embodiment, the management server 24 performs processing based on the management program 24P, and the gateway 16 performs processing based on the data relay program 16P.

  Hereinafter, the processing of each part of each apparatus will be described with reference to the sequence diagrams of FIGS. 14 to 15 by taking the case where the image forming apparatus 10 executes a print job as an example. The description of the points overlapping with the first embodiment will be omitted.

  In the cloud server 21, the job command receiving unit 271 receives a print job command, image data 7B, and the like from the terminal device 3 as in the job command receiving unit 201 of the first embodiment (# 801 in FIG. 14).

  Similar to the tunnel request unit 202, the tunnel request unit 272 requests the gateway 16 via the management server 24 to establish a tunnel between the cloud server 21 and the gateway 16 (# 802). At this time, the management server 24 and the gateway 16 perform processing in the same manner as in the first embodiment (# 821 to # 822, # 831 to # 832).

  The tunnel establishing unit 273 establishes a tunnel when there is an access from the gateway 16 as in the first embodiment (# 803, # 833).

  According to the current number of tunnels between the cloud server 21 and the gateway 16, the switching necessity determining unit 281 determines whether it is necessary to switch the tunnel established in step # 803 to a connection (# 804). Specifically, if the current number of tunnels (hereinafter referred to as “the current number of tunnels”) is equal to or greater than a predetermined number, it is determined that switching is necessary, and the current number of tunnels is less than the predetermined number. For example, it is determined that there is no need to switch.

  If it is determined that it is necessary to switch, the function inquiry unit 274 to the connection disconnection unit 280 of the cloud server 21, the function response unit 243 of the management server 24, and the first outer / inner relay unit 162 to the tunnel of the gateway 16 are hereinafter described. The disconnecting unit 168 and the connection establishing unit 171 to the log notifying unit 174 of the image forming apparatus 10 are the steps # 704 to # 712, # 723 to # 724, # 734 to # 737, and # 741 to # 74 in the first embodiment. The same process as 747 is performed (see FIGS. 8 and 9).

  On the other hand, if it is determined that switching is unnecessary, the job giving unit 279 starts transmitting a print job command and image data 7B to the image forming apparatus 10 via the tunnel and the gateway 16 (# 805, # 834 ~ # 835).

  Then, in the image forming apparatus 10, the job execution control unit 172 receives a print job instruction, and when it starts to receive the image data 7B (# 851), it starts spooling and printing (# 852).

  After that, when the cloud server 21 completes the transmission of the image data 7B to the image forming apparatus 10 without accepting another job, the gateway 16 performs steps similar to steps # 776 to # 777 of the first embodiment. The disconnection of the tunnel and the recording of the log data 7K are performed (see FIG. 10).

  However, when the cloud server 21 receives another job until the transmission of the image data 7B is completed (# 806), each unit of each device performs the following processing. Hereinafter, a case where a secure storage job for the file server 15 is accepted will be described as an example.

  The function inquiry unit 274 inquires of the management server 24 whether each of the image forming apparatus 10 and the file server 15 has a connection establishing function (# 807). When the management server 24 receives the inquiry (# 823), it responds based on the device attribute data 7A of each of the image forming apparatus 10 and the file server 15 (# 824). The method of inquiry and response is as described in the first embodiment.

  In the cloud server 21, when the function inquiry unit 274 receives an answer (# 808), the switching necessity determination unit 281 determines whether it is necessary to switch this tunnel to a connection as follows (# 809). ).

  If the response received in step # 808 indicates that the file server 15 does not have the connection establishment function, a tunnel must be established for the file server 15. Therefore, in this case, if the current tunnel number becomes equal to or more than a predetermined number by newly establishing a tunnel, the switching necessity determination unit 281 determines that it is necessary to switch.

  If it is determined by the switching necessity determining unit 281 that the direct communication availability determining unit 275 needs to switch, the image forming apparatus 10 directly (without passing through the tunnel) based on the answer received in step # 808. ) It is determined whether communication can be performed (# 810). The determination method is the same as that of the first embodiment. In this example, it is determined that communication can be performed directly.

  Then, the job interruption instruction unit 282 instructs the image forming apparatus 10 to execute the interruption command 7L indicating the interruption instruction of the print job via the tunnel and the gateway 16 established in step # 803 (# 811, # 836-FIG. 15 # 837).

  In the image forming apparatus 10, when receiving the interruption command 7L (# 853), the job execution control unit 172 interrupts the print job (# 854), and holds the data of the processing so far (# 855).

  In the cloud server 21, the connection request unit 276 requests the image forming apparatus 10 to establish a new connection via the tunnel and the gateway 16 as in the connection request unit 206 of the first embodiment (see FIG. # 813, # 838 to # 839).

  In the image forming apparatus 10, when the connection establishing unit 171 receives the request (# 856), the connection establishing unit 171 of the cloud server 21 and the image forming apparatus 10 are similar to the connection establishing unit 101 of the first embodiment. A connection is established with the cloud server 21 (# 857 to # 858, # 814).

  In the cloud server 21, after establishing the connection, the tunnel disconnection unit 278 disconnects this tunnel (# 815).

  The job assignment unit 279 resumes the transmission of the image data 7B via this connection (# 816). That is, the part (the remaining part) of the image data 7B which has not been transmitted is started to be transmitted.

  In the image forming apparatus 10, when the job execution control unit 172 starts to receive the remaining part of the image data 7B (# 859), the job execution control part 172 resumes the execution of the print job based on the remaining part and the stored data. (# 860).

  Then, when the print job is completed, the job completion notification unit 173 and the log notification unit 174 respectively transmit the job completion data 7H to the cloud server 21 similarly to the job completion notification unit 103 and the log notification unit 104 in the first embodiment. And the log data 7J to the gateway 16 (# 862).

  In the image forming apparatus 10, when receiving the job completion data 7H (# 817), the connection disconnecting section 280 disconnects this connection (# 818).

  Also, in the gateway 16, the log data 7J is stored (recorded) in the log data storage unit 167 (# 840, # 841).

  Note that after the tunnel between the image forming apparatus 10 and the cloud server 21 is disconnected in step # 815, the process for the secure storage job accepted in step # 806 is the procedure described in FIG. 10 in each apparatus. Is executed by

  16 and 17 are flowcharts for explaining an example of the overall processing flow of the cloud server 21.

  The cloud server 21 executes processing in the procedure shown in FIGS. 16 to 17 based on the server program 21Q.

  When the cloud server 21 receives an instruction of a job, data to be used for the job, designation of an internal device for executing the job, and the like from the terminal device 3 (# 51 in FIG. 16), it establishes a tunnel via the management server 24. It requests the gateway 16 to establish a tunnel (# 52).

  Furthermore, the cloud server 21 determines whether it is necessary to switch this tunnel to a connection based on the current number of tunnels (# 53).

  If it is not necessary to switch (No in # 54), the cloud server 21 starts to transmit job instructions and data to the designated device via the tunnel established in Step # 52 (# in FIG. 17). 55).

  Then, the cloud server 21 appropriately executes the following processing until the transmission of data is completed (No in # 56).

  When an instruction of another job is received from the terminal device 3 (Yes in # 57), the cloud server 21 describes the designated device of the other job and the job accepted in step # 51 (hereinafter referred to as “target job”) The management server 24 is inquired of the presence or absence of the connection establishment function of each of the designated devices (# 58). Then, in accordance with the result of the inquiry, it is determined whether or not the tunnel of the target job needs to be switched to the connection (# 59).

  If it is not necessary to switch (No in # 60), the cloud server 21 continues to transmit the data of the target job.

  On the other hand, when it is necessary to switch (Yes in # 60), if the designated device of the target job has a connection establishment function (Yes in # 61), the cloud server 21 determines the tunnel and the connection established in step # 52. While instructing the interruption of the job to the designated device via the gateway 16 (# 62), it requests the processing to establish a connection (# 63).

  When a connection is established (Yes in # 64), the cloud server 21 disconnects this tunnel (# 65), and transmits the remaining data of the target job to this designated device via this connection (# 66). Then, when the transmission is completed, this connection is disconnected (# 67).

  Alternatively, if it is determined in step # 53 that the tunnel established in step # 52 needs to be switched to a connection (Yes in # 54), the cloud server 21 makes an inquiry to the management server 24 (# 68). ). As a result, when it is determined that this tunnel can be switched to a connection (Yes in # 69), a connection is newly established as in Steps # 36 to # 40 of the first embodiment, and the connection is established via this connection. A process of transmitting job instructions and data to the designated device is performed (# 70 to # 74).

  On the other hand, if it is determined that switching can not be performed (No in # 69), the job instruction and data are transmitted to the designated device via this tunnel as in the first embodiment and step # 41 (# 75).

  According to the second embodiment, the load on the gateway 16 involved in the communication between the external device and the internal device can be reduced as compared to the prior art. Further, by switching to the connection according to the number of tunnels, unnecessary switching can be reduced and resources can be used efficiently.

  The cloud server 21 may select a job to switch the tunnel to the connection as follows. Priorities (priorities) are set in advance for each type of job. The priority may be determined by the level of importance or by the level of urgency. For example, a print job to be performed by the image forming apparatus 10 from outside will have a lower priority than a job for transmitting a file stored in the file server 15 to an external apparatus.

  When the current number of tunnels becomes equal to or more than a predetermined number, the cloud server 21 extracts a job to be executed by an internal device having a connection establishing function from jobs currently using the tunnel. Then, among the extracted jobs, the job with the lowest priority is selected as the job to switch the tunnel to the connection.

  In the second embodiment, switching to the connection is performed when the current number of tunnels is equal to or more than a predetermined number, but is performed when the speed of the communication line 4 in the gateway 16 becomes equal to or less than a predetermined speed. It is also good. Alternatively, it may be performed when the usage rate of the CPU 16a becomes equal to or more than a predetermined value.

  In the second embodiment, according to the number of tunnels between the loud server 21 and the gateway 16, the cloud server 21 determines whether to switch the tunnel to the connection. However, according to the number of tunnels between the cloud server 21 and any gateway, that is, according to the number of tunnels in which one end is the cloud server 21 and the other end is an arbitrary gateway, It is also good.

  Alternatively, the gateway 16 may determine whether to switch the tunnel to the connection. In this case, the determination may be made according to the number of tunnels between the gateway 16 and any external device.

  In the first embodiment and the second embodiment, the print job and the secure save job are mentioned as examples of jobs, but other jobs can be executed by the internal device. For example, it is possible to execute a job of transmitting a file stored in the image forming apparatus 10 to an external device. When this job is given, the image forming apparatus 10 transmits the file to the external device through the connection.

  In the first embodiment and the second embodiment, although the connection is established between the cloud server 21 and the internal device, the connection is established between the terminal device 3 and the internal device, and thereafter the cloud server 21 is The data of the job may be exchanged via this connection without intervention.

  When the number of tunnels is small, the cloud server 21 may make the tunnel and the connection coexist, divide the data into two, and transmit each to the internal device via the tunnel and the connection. Even when the connection does not have a security function such as encryption, communication may be performed similarly.

  In the first embodiment and the second embodiment, although the tunnel is disconnected after the connection is established, the connection is established after a request for establishing the connection is issued from the cloud server 21 to the external device. You may cut it before.

  In the first embodiment and the second embodiment, the cloud server 21 and the management server 24 are realized by separate devices, but may be realized by one device.

  In the first embodiment and the second embodiment, although the function of routing and the function of HTTP tunnel and the function of XMPP client and one device are realized by using the SaaS type gateway as the gateway 16, they are separate devices. It may be realized by Alternatively, the routing function may be realized by a router, and the HTTP tunnel function and the XMPP client function may be provided in the image forming apparatus 10.

  FIGS. 18 and 19 are sequence diagrams showing modified examples of processing flows of the cloud server 21, the management server 24, the gateway 16, and the image forming apparatus 10 at the time of a print job.

  In the first embodiment and the second embodiment, after establishing the connection, the cloud server 21 transmits the image data 7B to the image forming apparatus 10 regardless of the presence or absence of the request from the image forming apparatus 10. That is, the image data 7B is transmitted in a so-called push type. However, it may be transmitted after the image forming apparatus 10 has made a request. That is, it may be transmitted in a so-called pull type.

  For example, each device may perform processing in the procedure illustrated in FIG. The procedure shown in FIG. 18 is basically the same as that of the first embodiment. Hereinafter, differences from the case where the image forming apparatus 10 is caused to execute a print job will be described as an example.

  The process from receiving a print job instruction from the terminal device 3 to establishing a connection between the cloud server 21 and the image forming apparatus 10 is basically the same as that in the first embodiment, as shown in FIG. Steps # 701 to # 708, # 721 to # 735, # 731 to # 735, and # 741 to # 743 in FIG.

  However, the cloud server 21 further includes information related to the print job via the tunnel and the gateway 16 (for example, the occurrence of the print job to be performed by the image forming apparatus 10, the identifier of the print job, or the content of the print job ) Is notified to the image forming apparatus 10 (# 607, # 634 to # 635, # 641 in FIG. 18).

  The processing after establishment of the connection is also basically the same as in the case of the first embodiment, and has been described in Steps # 709 to # 712, # 736 to # 737, and # 744 to # 747 in FIGS. It is street.

  However, after the connection is established, the image forming apparatus 10 requests the cloud server 21 for print job data (image data 7B) via the connection based on the notification received in step # 641 (# 645). ).

  In response to the request from the image forming apparatus 10, the cloud server 21 transmits the image data 7B to the image forming apparatus 10 via the connection (# 611, # 612).

  Then, the image forming apparatus 10 receives the image data 7B (# 646), and executes a print job based on this (# 647).

  In addition, the configuration of the information processing system 5, the local area network 1, the image forming apparatus 10, the file server 15, the gateway 16, the cloud server 21, the whole or each part of the management server 24, processing contents, processing order, data construction, etc. It can change suitably along the meaning of the present invention.

5 Information processing system (communication system)
1 Local area network (specific network)
10 Image forming apparatus (first apparatus)
101, 181 Connection establishment unit (establishment means)
21 Cloud server (second device, control device)
206, 276 Connection request unit (request means)
208, 278 Tunnel cutting part (cutting means)
209, 279 Job assignment unit (command means)
7B image data connection establishment command 7G

Claims (14)

A communication system comprising: a first device provided in a specific network; and a second device provided outside the network,
In the second device,
In the case where the number of second tunnels having at least one of the gateway and the second device other than the tunnel between the gateway of the network and the second device exceeds a predetermined number, a requesting unit through the tunnel, providing a request for establishing a connection between said first device and said second device with respect to the first device,
Before the connection is established, a part of data used for execution of a specific job is transmitted to the first device via the tunnel, and after the connection is established, the connection is established. Command means for transmitting an instruction to execute the specific job and the rest of the data to the first device;
Is provided,
In the first device,
Establishing means for establishing the connection;
Is provided,
Furthermore, in the second device,
Disconnecting means for disconnecting the tunnel after giving the request;
Is provided,
A communication system characterized by The command means divides and transmits the data to the tunnel and the connection until the tunnel is disconnected.
The communication system according to claim 1 . A communication system comprising: a first device provided in a specific network; and a second device provided outside the network,
In the second device,
A request to request the first device to establish a connection between the first device and the second device through a tunnel between a gateway of the network and the second device and means,
An instruction to execute a specific job is transmitted to the first device via the connection, and further, until the tunnel is disconnected, the identification is made to the first device via the connection and the tunnel. Command means for dividing data to be used for execution of the job into the tunnel and the connection and transmitting the data, and transmitting the data to the first device through the connection after the tunnel is disconnected When,
Is provided,
In the first device,
Establishing means for establishing the connection;
Is provided,
Furthermore, in the second device,
Disconnecting means for disconnecting the tunnel after giving the request;
Is provided,
A communication system characterized by If there are multiple jobs, one tunnel is established for each job,
The establishing means establishes the connection for the job with priority given to the job with low priority among the jobs.
The communication system according to any one of claims 1 to 3 . A communication system comprising a first device provided in a specific network and a second device provided outside the network , which executes a specific job ,
In the second device,
The through one by one established tunnel for each said specific job between a particular job is the network gateway and the second device when there are a plurality, the first device and the second Request means for providing the first device with a request for establishing a connection with the device,
Is provided,
In the first device,
Establishing means for establishing the connection for the job with priority given to a low priority job among the plurality of specific jobs ;
Is provided,
Furthermore, in the second device,
Disconnecting means for disconnecting the tunnel after giving the request;
Is provided,
A communication system characterized by In the second device,
Command means for transmitting a command for execution of the specific job to the first device via the connection;
Is provided,
The communication system according to claim 5 . The command means further transmits data used for execution of the specific job to the first device via the connection.
The communication system according to claim 6 . A control device for causing a processing device provided in a specific network to execute processing from the outside of the network,
When the number of second tunnels having at least one of the gateway and the control device other than the tunnel between the gateway of the network and the control device exceeds a predetermined number , Request means for providing the processing device with a request for establishing a connection between the processing device and the control device;
Before the connection is established, part of data used for execution of a specific job is transmitted to the processing device through the tunnel, and after the connection is established, the connection is used to transmit the part. Instruction means for transmitting to the processing device an instruction to execute the specific job and the rest of the data;
Disconnecting means for disconnecting the tunnel after giving the request;
A control device characterized by having. A control device for causing a processing device provided in a specific network to execute processing from the outside of the network,
Request means for providing the processing device with a request for establishing a connection between the processing device and the control device via a tunnel between the gateway of the network and the control device;
An instruction to execute a specific job is transmitted to the processing device via the connection, and the specific job is executed to the processing device via the connection and the tunnel until the tunnel is disconnected. Command means for dividing data to be used for transmission into the tunnel and the connection and transmitting the data, and transmitting the data to the processing apparatus through the connection after the tunnel is disconnected;
Disconnecting means for disconnecting the tunnel after giving the request;
A control device characterized by having. A communication method in a first device provided in a specific network and a second device provided outside the network,
Other than the tunnel between the gateway and the second device of the network, if the number of the second tunnel to the end of at least one of the gateway and the second device is equal to or greater than a predetermined number, the Causing the second device to execute a process of requesting the first device to establish a connection between the first device and the second device via a tunnel ;
Before the connection is established, the second device causes the second device to execute a process of transmitting a portion of data used for execution of a specific job to the first device via the tunnel;
Causing the first device to execute the process of establishing the connection;
After the connection is established, the second device is caused to execute a process of transmitting a command to execute the specific job and the rest of the data to the first device via the connection;
After the requesting process, cause the second device to execute the process of disconnecting the tunnel;
A communication method characterized by A communication method in a first device provided in a specific network and a second device provided outside the network,
Through the tunnel between the gateway and the second device of the network, the process of requesting the establishment of a connection between the first device and the second device with respect to the first device Make the second device execute it,
Allowing the second device to execute a process of transmitting a command for execution of a specific job to the first device via the connection;
Until the tunnel is disconnected, the process of dividing data to be used for the execution of the specific job into the tunnel and the connection and transmitting the data to the first device via the connection and the tunnel is the process Let the second device execute
Causing the first device to execute the process of establishing the connection;
After the requesting process, the second apparatus is caused to execute the process of disconnecting the tunnel ;
After the tunnel is disconnected, cause the second device to execute the process of transmitting the data to the first device via the connection.
A communication method characterized by A first apparatus provided in a specific network , which executes a specific job , and a communication method in a second apparatus provided outside the network,
The through one by one established tunnel for each said specific job between a particular job is a gateway and the second device of the network when there are a plurality of said first device and said second Allowing the second device to execute a process of requesting the first device to establish a connection with the device;
The first apparatus is caused to execute the process of establishing the connection for the job from the lower priority job among the plurality of specific jobs ,
After the requesting process, cause the second device to execute the process of disconnecting the tunnel;
A communication method characterized by A computer program for use in a computer for causing a processing device provided in a specific network to execute processing from the outside of the network,
On the computer
When the number of second tunnels having at least one of the gateway and the computer other than the tunnel between the gateway of the network and the computer is equal to or more than a predetermined number, the tunnel is used to Execute processing for requesting the processing device to establish a connection between the processing device and the computer;
Before the connection is established, a process of transmitting a portion of data used for execution of a specific job to the processing device through the tunnel is performed.
After the connection is established, a process of transmitting a command to execute the specific job and the rest of the data to the processing device via the connection is executed.
After the requested process, execute a process of disconnecting the tunnel,
A computer program characterized by A computer program for use in a computer for causing a processing device provided in a specific network to execute processing from the outside of the network,
On the computer
Processing of requesting the processing apparatus to establish a connection between the processing apparatus and the computer via a tunnel between a gateway of the network and the computer;
Execute a process of transmitting a command of execution of a specific job to the processing device via the connection;
Until the tunnel is disconnected, the processing device is caused to execute processing to divide data to be used for execution of the specific job into the tunnel and the connection via the connection and the tunnel.
After the requested process, execute a process of disconnecting the tunnel ,
After the tunnel is disconnected, execute processing of transmitting the data to the processing device through the connection.
A computer program characterized by

Images