Information processing system and information processing method capable of setting configuration of image forming apparatus from server without changing configuration setting of firewall

The second connector of the image forming apparatus behind the firewall connects to the first connector of the management server to establish a session. The web browser of the personal computer sends an HTTP request to the first compressor on the basis of an instruction from a user, a destination of the HTTP request being the web server unit of the image forming apparatus. The first compressor of the management server compresses the HTTP request received from the web browser to generate first compressed data, and sends the generated first compressed data to the second decompressor of the image forming apparatus through a communication path established between the first connector and the second connector. The second decompressor of the image forming apparatus decompresses the first compressed data received from the first compressor to reproduce the original HTTP request, and sends the HTTP request to the web server unit.

CROSS REFERENCE TO RELATED APPLICATION

This application claims the benefit of Japanese Priority Patent Application JP 2016-183775 filed Sep. 21, 2016, the entire contents of which are incorporated herein by reference.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present disclosure relates to an information processing system and an information processing method executing communication over a firewall.

2. Description of Related Art

In recent years, a server is connected to an image forming apparatus (MFP, Multifunction Peripheral) via a network to extend functions of the image forming apparatus.

SUMMARY OF THE INVENTION

It is desirable to provide an information processing system and an information processing method, with which it is possible to set a configuration of an image forming apparatus at a customer site from an external management server without changing the configuration setting of a firewall.

According to an embodiment of the present disclosure, there is provided an information processing system, including:

a management server at a management site;

a personal computer at the management site, the personal computer being connected to the management server via a network; and

an image forming apparatus at a customer site protected by a firewall, the image forming apparatus being connectable to the management server via the network over the firewall, in which

the management server includesa first communication device capable of communicating via the network,a first memory that stores a first relay program, anda first processor that executes the first relay program,when the first processor executes the first relay program, the first processor operating as a first connector, a first compressor, and a first decompressor,

the image forming apparatus includesa second communication device capable of communicating via the network,a second memory that stores a second relay program, a web server program, and an extension application program, anda second processor that executes the second relay program, the web server program, and the extension application program,when the second processor executes the second relay program, the second processor operating as a second connector, a second decompressor, and a second compressor,when the second processor executes the web server program, the second processor operating as a web server unit,when the second processor executes the extension application program, the second processor operating as an extension application unit, and

the personal computer includesa third communication device capable of communicating via the network,a third memory that stores a web browser program, anda third processor that executes the web browser program,when the third processor executes the web browser program, the third processor operating as a web browser, and in which

where no communication path is established between the image forming apparatus and the management server, the second connector of the image forming apparatus behind the firewall connects to the first connector of the management server to establish a session,

the web browser of the personal computer sends an HTTP request to the first compressor on the basis of an instruction from a user, a destination of the HTTP request being the web server unit of the image forming apparatus,

the first compressor of the management server compresses the HTTP request received from the web browser to generate first compressed data, and sends the generated first compressed data to the second decompressor of the image forming apparatus through a communication path established between the first connector and the second connector,

the second decompressor of the image forming apparatus decompresses the first compressed data received from the first compressor to reproduce the original HTTP request, and sends the HTTP request to the web server unit,

the web server unit of the image forming apparatus receives the HTTP request sent from the first compressor, converts the HTTP request into a setting request, and sends the setting request to the extension application unit,

the extension application unit of the image forming apparatus receives the setting request from the web server unit, sets a configuration of the image forming apparatus on the basis of the received setting request, and replies a result of the setting to the web server unit,

the web server unit of the image forming apparatus converts the reply of the result of the setting received from the extension application unit into an HTTP reply, and sends the HTTP reply to the second compressor,

the second compressor of the image forming apparatus compresses the HTTP reply received from the web server unit to generate second compressed data, and sends the generated second compressed data to the first decompressor of the management server,

the first decompressor of the management server decompresses the second compressed data received from the second compressor, reproduces an original HTTP reply, and sends the HTTP reply to the web browser, and

the web browser of the personal computer presents the HTTP reply received from the first decompressor to the user.

According to an embodiment of the present disclosure, there is provided an information processing method of an information processing system including a management server at a management site, a personal computer at the management site, the personal computer being connected to the management server via a network, and an image forming apparatus at a customer site protected by a firewall, the image forming apparatus being connectable to the management server via the network over the firewall, the information processing method including:

where no communication path is established between the image forming apparatus and the management server, by a second connector of the image forming apparatus behind the firewall, connecting a first connector of the management server to establish a session;

by a web browser of the personal computer, sending an HTTP request to a first compressor on the basis of an instruction from a user, a destination of the HTTP request being a web server unit of the image forming apparatus;

by the first compressor of the management server, compressing the HTTP request received from the web browser to generate first compressed data, and sending the generated first compressed data to a second decompressor of the image forming apparatus through a communication path established between the first connector and the second connector;

by the second decompressor of the image forming apparatus, decompressing the first compressed data received from the first compressor to reproduce the original HTTP request, and sending the HTTP request to the web server unit;

by the web server unit of the image forming apparatus, receiving the HTTP request sent from the first compressor, converting the HTTP request into a setting request, and sending the setting request to an extension application unit;

by the extension application unit of the image forming apparatus, receiving the setting request from the web server unit, setting a configuration of the image forming apparatus on the basis of the received setting request, and replying a result of the setting to the web server unit;

by the web server unit of the image forming apparatus, converting the reply of the result of the setting received from the extension application unit into an HTTP reply, and sending the HTTP reply to a second compressor;

by the second compressor of the image forming apparatus, compressing the HTTP reply received from the web server unit to generate second compressed data, and sending the generated second compressed data to a first decompressor of the management server;

by the first decompressor of the management server, decompressing the second compressed data received from the second compressor, reproducing an original HTTP reply, and sending the HTTP reply to the web browser; and

by the web browser of the personal computer, presenting the HTTP reply received from the first decompressor to the user.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

Firstly, an entire configuration of the information processing system1according to an embodiment of the present disclosure will be described.FIG. 1shows a schematic diagram of an entire configuration of the information processing system1according to an embodiment of the present disclosure.

The information processing system1includes the management server10and the PC (Personal Computer)30at a management site, and the image forming apparatus20at a customer site.

The management server10manages the operation status (including various setting, running status, toner remaining amount, paper remaining amount, configuration of extension function, setting configuration of extension application, etc.) of the image forming apparatus20at the customer site.

The PC30is used to set a configuration of an extension application of the image forming apparatus20.

The extension application is a program for extending the function of the image forming apparatus20. The extension application, which is not pre-installed, is installed to be used. In order for the image forming apparatus20to execute the extension application appropriately, it is necessary to set a configuration of the image forming apparatus20. The configuration may be set via an operation device of the image forming apparatus20or from the PC30remotely.

The image forming apparatus20at the customer site communicates over the firewall100via the Internet.

In general, the firewall100permits communication from the site that the firewall100protects. However, the firewall100limits connection from the Internet strictly.

Permitted communication over the firewall100and refused communication over the firewall100are determined on the basis of a security policy of the customer site.

In general, the management server10is incapable of setting the configuration of the firewall100at the customer site in order to communicate with the image forming apparatus20since it requires to change the security policy.

In view of the above, the information processing system1does not need to change the setting of the firewall100.

In the information processing system1, the PC30sets a configuration of the extension application of the image forming apparatus20as described in the following procedure.

(1) Firstly, the image forming apparatus20at the site behind the firewall100connects to the management server10to establish a session between the image forming apparatus20and the management server10.

(2) Next, the PC30instructs the management server10to set the configuration of the extension application of the image forming apparatus20. The management server10sets the configuration of the extension application of the image forming apparatus20on the basis of the instruction from the PC30through the connection established between the image forming apparatus20and the management server10.

The entire configuration of the information processing system1according to an embodiment of the present disclosure has been described above.

Next, a more detailed processing flow of the information processing system1will be described.FIG. 2shows a schematic flow of a process of the information processing system1.

Note that, in the following, the management server10includes the first relay unit11a. The PC30includes the web browser31a. The image forming apparatus20includes the second relay unit21a, the web server unit21b, and the extension application unit21c. They exchange information.

(1) Firstly, the second relay unit21aof the image forming apparatus20behind the firewall100connects to the first relay unit11aof the management server10to establish a session.

(2) Next, the web browser31aof the PC30sends an HTTP request to the first relay unit11a, a destination of the HTTP request being the web server unit21bof the management server the image forming apparatus20.

(3) Next, the first relay unit11acompresses the received HTTP request to generate compressed data (first compressed data).

(4) Next, the first relay unit11asends the generated compressed data through the communication path established between the first relay unit11aand the second relay unit21a.

(5) Next, the second relay unit21adecompresses the received compressed data to reproduce the original HTTP request.

(6) Next, the second relay unit21asends the reproduced HTTP request to the web server unit21b.

(7) Next, the web server unit21bsends a setting request to the extension application unit21con the basis of the received HTTP request.

(8) Next, the extension application unit21csets the configuration of the image forming apparatus20on the basis of the received setting request.

(9) Next, the extension application unit21creturns a reply of a result of the setting configuration to the web server unit21b.

(10) Next, the web server unit21bconverts the setting reply into an HTTP reply, and sends the HTTP reply to the second relay unit21a.

(11) Next, the second relay unit21acompresses the received HTTP reply to generate compressed data (second compressed data).

(12) Next, the second relay unit21asends the compressed data to the first relay unit11a.

(13) Next, the first relay unit11adecompresses the received compressed data to reproduce an original HTTP reply.

(14) Next, the first relay unit11asends the reproduced HTTP reply to the web browser31a.

A more detailed processing flow of the information processing system1has been described above.

Next, a configuration of the management server10will be described. The management server10may include dedicated hardware and software, or may be a general-purpose computer.FIG. 3shows a schematic diagram of a configuration of the management server10.

As shown inFIG. 3, the management server10includes the CPU (Central Processing Unit)11, the ROM (Read Only Memory)12, the RAM (Random Access Memory)13, the operation input devices14, the communication device15(first communication device), the display device16, and the memory device17, which are connected to each other via the bus18.

The ROM12stores a plurality of programs such as firmware and data used to execute various kinds of process. The RAM13is used as a work area for the CPU11, and temporarily stores the OS (Operating System), various applications being executed, and various data being processed.

The memory device17is, for example, an HDD (Hard Disk Drive), a flash memory, or another nonvolatile memory. The memory device17stores the OS, various applications, and various data.

The the communication device15is connected to the network in order to send and receive information to and from the image forming apparatus20and the PC30.

In response to a command supplied from the operation input devices14, the CPU11(first processor) loads a corresponding program in the RAM13out of a plurality of programs stored in the ROM12and the memory device17(first memory), and executes the loaded program to appropriately control the display device16and the memory device17.

The operation input devices14include, for example, a pointing device such as a mouse, a keyboard, a touch panel, and other operation devices.

The display device16is, for example, a liquid crystal display, an EL (Electro-Luminescence) display, a plasma display, or the like.

The CPU11executes the management server program to thereby realize a functional block, which will be described next.

The CPU11of the management server10realizes a functional block, i.e., the first relay unit11a. Note that the first relay unit11aincludes the first connector11b, the first compressor11c, and the first decompressor11d.

Specifically, the management server10includes the communication device15(first communication device capable of communicating via the network), the ROM12or the memory device17(first memory) that stores a first relay program, and the CPU11(first processor) that executes the first relay program, when the first processor executes the first relay program, the first processor operating as the first connector11b, the first compressor11c, and the first decompressor11d.

Where no communication path is established between the image forming apparatus20and the management server10, the first connector11bresponds to connection from the second relay unit21aover the firewall100to establish a session.

The first compressor11ccompresses an HTTP request received from the web browser31aof the PC30to generate compressed data, and sends the generated compressed data to the second relay unit21athrough the communication path established between the first connector11band the second relay unit21a.

The first decompressor11ddecompresses compressed data received from the second relay unit21ato reproduce an original HTTP reply, and sends the HTTP reply to the web browser31a.

The configuration of the management server10has been described above.

Next, the configuration of the image forming apparatus20will be described.FIG. 4shows a schematic diagram of a configuration of the image forming apparatus20.

The image forming apparatus20includes the controller unit21. The controller unit21includes a CPU, a RAM, a ROM, a dedicated hardware circuit, and the like, and controls overall operations of the image forming apparatus20.

The controller unit21is connected to the image scanner22, the image processor23, the image memory24, the image forming device25, the operation devices26, the display device26a, the facsimile communication device27, the communication device28(second communication device), the memory device29, and the like. The controller unit21controls the connected devices to operate, and sends and receives signals or data to and from the devices.

In response to job execution instructions input by a user via the operation device26, a PC connected to the network, or the like, the controller unit21controls driving and processing of the mechanisms necessary to execute operational control of the respective functions such as a scanner function, a print function, a copy function, and a facsimile sending and receiving function.

Further, the controller unit21includes the second relay unit21a, the web server unit21b, and the extension application unit21c. The CPU (second processor) loads the programs (second relay program, web server program, and extension application program) stored in the ROM (second memory) in the RAM and executes the programs to thereby realize the functional blocks including the second relay unit21a, the web server unit21b, and the extension application unit21c. Note that the second relay unit21aincludes the second connector21d, the second decompressor21e, and the second compressor21f.

Specifically, the image forming apparatus20includes the communication device28(second communication device capable of communicating via the network), the ROM (second memory) that stores a second relay program, a web server program, and an extension application program, and a second processor that executes the second relay program, the web server program, and the extension application program, when the second processor executes the second relay program, the second processor operating as the second connector21d, the second decompressor21e, and the second compressor21f, when the second processor executes the web server program, the second processor operating as the web server unit21b, when the second processor executes the extension application program, the second processor operating as the extension application unit21c.

Where no communication path is established between the image forming apparatus20and the management server10, the second connector21dbehind the firewall100connects to the first connector11bto establish a session.

The second decompressor21edecompresses compressed data received from the first compressor11cto reproduce an original HTTP request, and sends the HTTP request to the web server unit21b.

The second compressor21fcompresses an HTTP reply received from the web server unit21bto generate compressed data, and sends the generated compressed data to the first decompressor11dof the management server10.

The web server unit21breceives an HTTP request sent from the web browser31a, converts the HTTP request into a setting request, and sends the setting request to the extension application unit21c. The web server unit21bconverts a reply of a result of the setting received from the extension application unit21cinto an HTTP reply, and sends the HTTP reply to the second compressor21f.

The extension application unit21creceives a setting request from the web server unit21b, sets a configuration of the image forming apparatus20on the basis of the received setting request, and replies a result of the setting to the web server unit21b.

The image scanner22captures an image from a document.

The image processor23as necessary processes an image of image data of the image captured by the image scanner22. For example, the image processor23corrects shading of an image captured by the image scanner22to improve the quality of the formed image.

The image memory24has an area for temporarily storing document image data captured by the image scanner22, and an area for temporarily storing data to be printed by the image forming device25.

The image forming device25forms an image of image data captured by the image scanner22, for example.

The operation devices26include a touch panel unit and an operation key unit that receive, from a user, instructions of various operations and process that the image forming apparatus20can execute. The touch panel unit includes the display device26asuch as an LCD (Liquid Crystal Display) with a touch panel.

The facsimile communication device27includes an encoder/decoder, a modulator/demodulator, and an NCU (Network Control Unit) (not shown), and sends facsimile via a public telephone network.

The communication device28includes a communication module such as a LAN board. The communication device28sends and receives various data to and from apparatuses (PCs, etc.) such as the management server10via the LAN and the like connected to the communication device28.

The memory device29stores document images captured by the image scanner22and other data. The memory device29is a large volume memory device such as an HDD.

The configuration of the image forming apparatus20has been described above.

Next, a configuration of the PC30will be described. The PC30may include dedicated hardware and software, or may be a general-purpose computer.FIG. 5shows a schematic diagram of a configuration of the PC30.

As shown inFIG. 5, the PC30includes the CPU31, the ROM32, the RAM33, the operation input devices34, the communication device35(third communication device), the display device36, and the memory device37, which are connected to each other via the bus38.

The ROM32stores a plurality of programs such as firmware and data used to execute various kinds of process. The RAM33is used as a work area for the CPU31, and temporarily stores the OS, various applications being executed, and various data being processed.

The memory device37is, for example, an HDD, a flash memory, or another nonvolatile memory. The memory device37stores the OS, various applications, and various data.

The communication device35is connected to the network in order to send and receive information to and from the image forming apparatus20and the management server10.

In response to a command supplied from the operation input devices34, the CPU31(third processor) loads a corresponding program in the RAM33out of a plurality of programs stored in the ROM32and the memory device37(third memory), and executes the loaded program to appropriately control the display device36and the memory device37.

The operation input devices34include, for example, a pointing device such as a mouse, a keyboard, a touch panel, and other operation devices.

The display device36is, for example, a liquid crystal display, an EL display, a plasma display, or the like.

The CPU31executes a program to thereby realize a functional block, which will be described next.

The CPU31of the PC30realizes a functional block, i.e., the web browser31a.

Specifically, the PC30includes the communication device35(third communication device capable of communicating via the network), the ROM32or the memory device37(third memory) that stores a web browser program, and the CPU31(third processor) that executes the web browser program, when the third processor executes the web browser program, the third processor operating as the web browser31a.

In response to an instruction from a user, the web browser31asends an HTTP request to the first compressor11c, a destination of the HTTP request being the web server unit21b. The web browser31apresents an HTTP reply received from the first decompressor11dto the user.

The configuration of the PC30has been described above.

Next, a more detailed flow of the processing of the information processing system1will be described.FIG. 6shows a flow chart of the process of the information processing system1.

Where no communication path is established between the image forming apparatus20and the management server10, firstly, the second connector21dbehind the firewall100connects to the first connector11bto establish a session (Step S1).

Next, the web browser31asends an HTTP request to the first compressor11con the basis of an instruction from a user, a destination of the HTTP request being the web server unit21b(Step S2).

Next, the first compressor11ccompresses the received HTTP request to generate compressed data (Step S3).

Next, the first compressor11csends the generated compressed data to the second decompressor21ethrough the established communication path (Step S4).

Next, the second decompressor21edecompresses the received compressed data to reproduce an original HTTP request (Step S5).

Next, the second decompressor21esends the reproduced HTTP request to the web server unit21b(Step S6).

Next, the web server unit21bconverts the received HTTP request into a setting request, and sends the setting request obtained by conversion to the extension application unit21c(Step S7).

Next, the extension application unit21csets a configuration of the image forming apparatus20on the basis of the received setting request (Step S8).

Next, the extension application unit21creplies a result of the setting to the web server unit21b(Step S9).

Next, the web server unit21bconverts the received reply of the result of the setting into an HTTP reply, and sends the HTTP reply obtained by conversion to the second compressor21f(Step S10).

Next, the second compressor21fcompresses the received HTTP reply to generate compressed data (Step S11).

Next, the second compressor21fsends the generated compressed data to the first decompressor11d(Step S12).

Next, the first decompressor11ddecompresses the received compressed data to reproduce an original HTTP reply (Step S13).

Next, the first decompressor11dsends the reproduced HTTP reply to the web browser31a(Step S14).

Next, the web browser31apresents the received HTTP reply to a user (Step S15).

A more detailed processing flow of the information processing system1has been described above.

In recent years, a server may be connected to an image forming apparatus (MFP, Multifunction Peripheral) via a network to extend functions of the image forming apparatus.

For example, the following technique is conceivable. An image forming apparatus displays an operation window, which is obtained from a web server outside the image forming apparatus, on a display device.

According to such a technique, process is performed by means of communication via a network. However, it is necessary to execute communication over a firewall via the Internet. When a management server at one site tries to set a configuration of an image forming apparatus at another site protected by the firewall, communicating is blocked under a default configuration, which is a problem.

However, in general, the firewall permits communication from the site that the firewall protects. However, the firewall limits connection from the Internet strictly. Permitted communication over the firewall and refused communication over the firewall are determined on the basis of a security policy of the customer site. In general, the management server is incapable of setting the configuration of the firewall at the customer site in order to communicate with the image forming apparatus since it requires to change the security policy.

In view of the above, according to an embodiment, there is provided an information processing system1, including: a management server10at a management site; a personal computer30at the management site, the personal computer30being connected to the management server10via a network; and an image forming apparatus20at a customer site protected by a firewall100, the image forming apparatus20being connectable to the management server10via the network over the firewall100, in which the management server10includes a first communication device28capable of communicating via the network, a first memory12,17that stores a first relay program, and a first processor11that executes the first relay program, when the first processor11executes the first relay program, the first processor11operating as a first connector11b, a first compressor11c, and a first decompressor11d, the image forming apparatus20includes a second communication device28capable of communicating via the network, a second memory that stores a second relay program, a web server program, and an extension application program, and a second processor that executes the second relay program, the web server program, and the extension application program, when the second processor executes the second relay program, the second processor operating as a second connector21d, a second decompressor21e, and a second compressor21f, when the second processor executes the web server program, the second processor operating as a web server unit21b, when the second processor executes the extension application program, the second processor operating as an extension application unit21c, and the personal computer30includes a third communication device35capable of communicating via the network, a third memory32,37that stores a web browser program, and a third processor31that executes the web browser program, when the third processor31executes the web browser program, the third processor31operating as a web browser31a, in which where no communication path is established between the image forming apparatus20and the management server10, the second connector21dof the image forming apparatus20behind the firewall100connects to the first connector11bof the management server10to establish a session, the web browser31aof the personal computer30sends an HTTP request to the first compressor11con the basis of an instruction from a user, a destination of the HTTP request being the web server unit21bof the image forming apparatus20, the first compressor11cof the management server10compresses the HTTP request received from the web browser31ato generate first compressed data, and sends the generated first compressed data to the second decompressor21eof the image forming apparatus20through a communication path established between the first connector11band the second connector21d, the second decompressor21eof the image forming apparatus20decompresses the first compressed data received from the first compressor11cto reproduce the original HTTP request, and sends the HTTP request to the web server unit21b, the web server unit21bof the image forming apparatus20receives the HTTP request sent from the first compressor11c, converts the HTTP request into a setting request, and sends the setting request to the extension application unit21c, the extension application unit21cof the image forming apparatus20receives the setting request from the web server unit21b, sets a configuration of the image forming apparatus20on the basis of the received setting request, and replies a result of the setting to the web server unit21b, the web server unit21bof the image forming apparatus20converts the reply of the result of the setting received from the extension application unit21cinto an HTTP reply, and sends the HTTP reply to the second compressor21f, the second compressor21fof the image forming apparatus20compresses the HTTP reply received from the web server unit21bto generate second compressed data, and sends the generated second compressed data to the first decompressor11dof the management server10, the first decompressor11dof the management server10decompresses the second compressed data received from the second compressor21f, reproduces an original HTTP reply, and sends the HTTP reply to the web browser31a, and the web browser31aof the personal computer30presents the HTTP reply received from the first decompressor11dto the user.

Therefore it is possible to set a configuration of the image forming apparatus20at a customer site from the external management server10without changing the configuration setting of the firewall100.