Abstract:
A management device connected to the Internet, includes: a first transmitting unit configured to transmit setting information necessary for mediating communication from the Internet to at least one terminal device connected to a LAN, to a communication mediation device connected to the LAN; and a storage unit configured to store determining information for determining whether the communication mediation device has been connected to an appropriate LAN, with identifying information of a predetermined terminal in the at least one terminal device connected to the LAN, wherein the first transmitting unit transmits the setting information in a case where it has been determined that the communication mediation device has been connected to the appropriate LAN.

Description:
[0001]    The entire disclosure of Japanese Patent Application No. 2015-034247 filed on Feb. 24, 2015 including description, claims, drawings, and abstract are incorporated herein by reference in its entirety. 
       BACKGROUND OF THE INVENTION 
       [0002]    1. Field of the Invention 
         [0003]    The present invention relates to a communication mediation system, a communication mediation device, a communication mediation method, and a communication mediation program. More specifically, the invention relates to a technique that securely introduces the communication mediation device with less time and labor. 
         [0004]    2. Description of the Related Art 
         [0005]    Recently, an application service (hereinafter referred to as “App service”) in which, for example, a server of an application service provider (ASP) distributes news to devices such as personal computers connected to a local area network (LAN) via the Internet, has become widespread. 
         [0006]    However, in a case where a LAN is connected to the Internet, a firewall is typically used so as to eliminate an unauthorized access due to a reason of network security. In particular, access from the side of the Internet to the side of the LAN is strictly restricted. Therefore, access of a server that provides the App service (hereinafter referred to as “App server”) to devices on the side of the LAN is also restricted. 
         [0007]    In order to solve the above problem, for example, a technique illustrated in  FIG. 14  has been proposed (for example, refer to JP 2014-032597 A and JP 2014-215846 A). That is, a gateway  1450  connected to a LAN  1460  and a continuous connection server  1410  connected to the Internet  1430  are continuously connected to each other. 
         [0008]    When an App server  1420  requests the continuous connection server  1410  to connect the App server  1420  to a device that has been connected to the LAN  1460 , for example, a multi-function peripheral (MFP)  1470 , the continuous connection server  1410  requests the gateway  1450  to mediate communication between the App server  1420  and the MFP  1470 . 
         [0009]    The gateway  1450  that has received the request, establishes a tunneling route between the App server  1420  and the MFP  1470 . Then, the App server  1420  provides the MFP  1470  with the App service via the tunneling route. 
         [0010]    As described above, the App server  1420  avoids an access restriction due to the firewall  1440  so as to provide the device on the side of the LAN with the App service. 
         [0011]    In the related art, when the above gateway  1450  is connected to the LAN  1460 , a customer management server  1400  that has been connected to the Internet  1430 , is used so as to perform the following setup operation. 
         [0012]    First, an administrator of the customer management server  1400  registers a tenant ID for specifying a user of the gateway  1450 , in the customer management server  1400  and also notifies the user of the tenant ID. The user that has been notified transmits the tenant ID to the customer management server  1400  so as to acquire an activation key valid only one time. The activation key is information for proving that the tenant ID has been given based on a legal contract. 
         [0013]    Furthermore, when the user connects the gateway  1450  to the LAN  1460  and sets the tenant ID and the activation key, the gateway  1450  transmits the tenant ID and the activation key to the customer management server  1400 . When determining that the tenant ID is legal based on a combination of the tenant ID and the activation key, the customer management server  1400  returns authentication information (for example, ID and password) to the gateway  1450 . The authentication information is used so that the gateway  1450  is continuously connected to the continuous connection server  1410 . 
         [0014]    However, the tenant ID and the activation key are sent to the user by an electronic mail or a mail. Therefore, the tenant ID and the activation key may be leaked out to a third party. The tenant ID and the activation key may be used only between the gateway  1450  and the customer management server  1400 , and are not necessarily well known to the user. 
         [0015]    Upon a setup of an individual gateway  1450 , if there is no need for setting the tenant ID and the activation key, time and labor necessary for the setup can be omitted. 
       SUMMARY OF THE INVENTION 
       [0016]    The present invention has been made in consideration of the above problem, and an object thereof is to provide a communication mediation system, a communication mediation device, a communication mediation method, and a communication mediation program that protect security accompanied with a setup and reduce time and labor for the setup. 
         [0017]    To achieve the abovementioned object, according to an aspect, a management device connected to the Internet reflecting one aspect of the present invention comprises: a first transmitting unit configured to transmit setting information necessary for mediating communication from the Internet to at least one terminal device connected to a LAN, to a communication mediation device connected to the LAN; and a storage unit configured to store determining information for determining whether the communication mediation device has been connected to an appropriate LAN, with identifying information of a predetermined terminal in the at least one terminal device connected to the LAN, wherein the first transmitting unit transmits the setting information in a case where it has been determined that the communication mediation device has been connected to the appropriate LAN. 
         [0018]    To achieve the abovementioned object, according to an aspect, a non-transitory recording medium storing a computer readable program, reflecting one aspect of the present invention, causes a computer of a management device connected to the Internet and comprising a storage unit configured to store determining information for determining whether a communication mediation device connected to a LAN has been connected to an appropriate LAN with identifying information of a predetermined terminal device in at least one terminal device connected to the LAN, to execute: transmitting a setting information necessary for mediating communication from the Internet to the at least one terminal device, to the communication mediation device in a case where it has been determined that the communication mediation device has been connected to the appropriate LAN. 
         [0019]    To achieve the abovementioned object, according to an aspect, a communication mediation device connected to a LAN and configured to mediate communication from the Internet to at least one terminal device connected to the LAN, the communication mediation device reflecting one aspect of the present invention comprises: a first receiving unit configured to receive setting information necessary for mediating the communication from the Internet to the at least one terminal device, from a management device connected to the Internet; an acquisition unit configured to acquire identifying information of a predetermined terminal device in the at least one terminal device connected to the LAN; a second receiving unit configured to receive determining information for determining whether the communication mediation device has been connected to an appropriate LAN; a determining unit configured to determine whether the communication mediation device has been connected to the appropriate LAN, based on the identifying information and the determining information; and a notifying unit configured to notify the management device that it has been determined that the communication mediation device has been connected to the appropriate LAN. 
         [0020]    To achieve the abovementioned object, according to an aspect, a non-transitory recording medium storing a computer readable program, reflecting one aspect of the present invention, causes a computer of a communication mediation device connected to a LAN and configured to mediate communication from the Internet to at least one terminal device connected to the LAN, to execute: receiving setting information necessary for mediating the communication from the Internet to the at least one terminal device, from a management device connected to the Internet; acquiring identifying information of a predetermined terminal device in the at least one terminal device connected to the LAN; receiving determining information for determining whether the communication mediation device has been connected to an appropriate LAN; determining whether the communication mediation device has been connected to the appropriate LAN, based on the identifying information and the determining information; and notifying the management device that it has been determined that the communication mediation device has been connected to the appropriate LAN. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0021]    The above and other objects, advantages and features of the present invention will become more fully understood from the detailed description given hereinbelow and the appended drawings which are given by way of illustration only, and thus are not intended as a definition of the limits of the present invention, and wherein: 
           [0022]      FIG. 1  is an exemplary diagram of a configuration of a communication mediation system according to a first embodiment; 
           [0023]      FIG. 2  is an exemplary block diagram of a main hardware configuration of a gateway; 
           [0024]      FIG. 3  is an exemplary block diagram of a functional configuration of the gateway; 
           [0025]      FIG. 4  is an exemplary flow chart of setup operation of the gateway; 
           [0026]      FIG. 5  is an exemplary block diagram of a hardware configuration of a customer management server; 
           [0027]      FIG. 6  is an exemplary block diagram of a functional configuration of the customer management server; 
           [0028]      FIG. 7  is an exemplary flow chart of setup management operation of the customer management server; 
           [0029]      FIG. 8  is an exemplary sequence diagram of cooperative operation between the customer management server, a continuous connection server, the gateway, and an MFP, upon a setup of the gateway; 
           [0030]      FIG. 9  is an exemplary block diagram of functional operation of the gateway; 
           [0031]      FIG. 10  is an exemplary flow chart of setup operation of the gateway; 
           [0032]      FIG. 11  is an exemplary block diagram of functional configuration of the customer management server; 
           [0033]      FIG. 12  is an exemplary flow chart of setup management operation of the customer management server; 
           [0034]      FIG. 13  is an exemplary sequence diagram of cooperative operation between the customer management server, the continuous connection server, the gateway, and the MFP, upon a setup of the gateway; and 
           [0035]      FIG. 14  is a diagram for describing a technique in the related art. 
       
    
    
     DESCRIPTION OF THE PREFERRED EMBODIMENTS 
       [0036]    Hereinafter, a communication mediation system, a communication mediation device, a communication mediation method, and a communication mediation program according to embodiments of the present invention will be described with reference to the drawings. However, the scope of the invention is not limited to the illustrated examples. 
       [1] First Embodiment 
     (1) Configuration of Communication Mediation System 
       [0037]    First, a configuration of the communication mediation system will be described. 
         [0038]    As illustrated in  FIG. 1 , in the communication mediation system  1 , a customer management server  100 , a continuous connection server  110 , and an App server  120  have been connected to the Internet  130  in a network configuration in which a LAN  160  has been connected to the Internet  130  via a firewall  140 . A gateway  150 , an MFP  170 , and a personal computer (PC)  180  have been connected to the LAN  160 . Note that, the firewall  140  also serves as a router for performing communication between the Internet  130  and the LAN  160 . 
         [0039]    The customer management server  100  can access both a sales management database (hereinafter referred to as “sales management DB”)  101  and a connection management database (hereinafter referred to as “connection management DB”)  102 . The continuous connection server  110  can access only the connection management DB  102 . The gateway  150  establishes a tunneling route between the continuous connection server  110  and the MFP  170  so that communication from the continuous connection server  110  to the MFP  170  can be performed. 
       (2) Configurations and Operation of Gateway  150   
       [0040]    Next, configurations and operation of the gateway  150  will be described. 
       (2-1) Hardware Configuration 
       [0041]    First, a hardware configuration of the gateway  150  will be described. 
         [0042]    As illustrated in  FIG. 2 , the gateway  150  includes, for example, a central processing unit (CPU)  200 , a read only memory (ROM)  201 , and a random access memory (RAM)  202 . When power is supplied to the gateway  150 , the CPU  200  reads a boot program from the ROM  201  so as to boot. After that, the CPU  200  reads an operating system (OS) and a setup program from a hard disk drive (HDD)  203  so as to perform setup processing. 
         [0043]    In this case, the gateway  150  uses a network interface card (NIC)  204  so as to communicate with other devices via the LAN  160 . Note that, according to the present embodiment, setting information necessary for connecting the gateway  150  to the LAN  160  has been previously stored in the HDD  203 . The setting information may be set upon a setup of the gateway  150 . Upon the setup, automatically reading the setting information connects the gateway  150  to the LAN  160 . 
       (2-2) Functional Configuration 
       [0044]    Next, a functional configuration of the gateway  150  will be described by particularly focusing on the setup processing. 
         [0045]    As illustrated in  FIG. 3 , the gateway  150  includes functions, such as a self-identifying information storage unit  301  and an identifying information transmitter  302 . The self-identifying information storage unit  301  stores identifying information of the gateway  150  itself in the ROM  201  or the HDD  203 . According to the present embodiment, the identifying information includes a product number for identifying a model of the gateway  150  and a serial number for identifying each of products of the same model. 
         [0046]    An MFP searching unit  305  searches whether the MFP  170  has been connected to the LAN  160 . A range of the LAN  160  has been previously set in the MFP searching unit  305 , the range in which the MFP  170  is searched. For example, Ping is used so as to detect all devices connected to the LAN  160 . 
         [0047]    For example, a network address is designated so that the range to be searched of the LAN  160  is set. The range may be designated by a net mask or a default gateway. The range to be searched of the LAN  160  may be spread over a plurality of network segments having different network addresses. 
         [0048]    After detecting all of the devices connected to the LAN  160 , the MFP searching unit  305  uses a simple network management protocol (SNMP) and acquires manufacturer information from each of the devices. Thus, it can be confirmed whether each of the devices is applicable to an object with identifying information to be acquired. 
         [0049]    The MFP identifying information acquisition unit  306  acquires the identifying information from the MFP  170  detected by the MFP searching unit  305 . In this case, the SNMP may be used or a special procedure may be used between the gateway  150  and the MFP  170  so as to acquire the identifying information of the MFP  170 . 
         [0050]    The identifying information transmitter  302  transmits the identifying information of the gateway  150  itself and the identifying information of the MFP  170  to the customer management server  100 , the identifying information of the gateway  150  itself, having been stored in the self-identifying information storage unit  301 , and the identifying information of the MFP  170 , being acquired by the MFP identifying information acquisition unit  306 . 
         [0051]    The connection information receiver  303  receives connection information necessary for continuously connecting with the continuous connection server  110 , from the customer management server  100 . According to the present embodiment, the connection information receiver  303  receives, as the connection information, the tenant ID for identifying the gateway  150 , a universal resource locater (URL) for connecting with the App server  120 , and an identifier (ID) and a password for logging in the continuous connection server  110 . 
         [0052]    A connection processing unit  304  uses the connection information that has been received by the connection information receiver  303  from the customer management server  100 , and logs in the continuous connection server  110  so as to perform the continuous connection. When receiving a request for starting communication with the App server  120  from the continuous connection server  110 , the connection processing unit  304  uses the URL that has been received as the connection information, so as to establish a tunneling route between the App server  120  and the MFP  170 . 
         [0053]    Note that, for example, an extensible messaging and presence protocol (XMPP) can be used in the continuous connection between the gateway  150  and the continuous connection server  110 . A tunneling connection between the App server  120  and the MFP  170  may be, for example, a hypertext transfer protocol (HTTP) or a secure shell (SSH). 
       (2-3) Setup Processing 
       [0054]    Next, setup processing of the gateway  150  will be described. The above setup program is executed so that the setup processing is performed. 
         [0055]    As illustrated in  FIG. 4 , upon the setup, the gateway  150  first reads the identifying information of the gateway  150  itself from the self-identifying information storage unit  301  (S 401 ). Next, the MFP searching unit  305  searches the MFP  170  that has been connected to the LAN  160  (S 402 ). The MFP identifying information acquisition unit  306  requests the identifying information from the MFP  170  that has been detected (S 403 ). 
         [0056]    After the MFP identifying information acquisition unit  306  acquires the identifying information from the MFP  170  (S 404 : YES), the identifying information transmitter  302  transmits the identifying information of the gateway  150  itself and the identifying information of the MFP  170  to the customer management server  100  (S 405 ). After that, after the connection information receiver  303  receives the connection information from the customer management server  100  (S 406 : YES), the connection processing unit  304  establishes the continuous connection with the continuous connection server  110  (S 407 ). 
       (3) Configurations and Operation of Customer Management Server  100   
       [0057]    Next, configurations of the customer management server  100  will be described. 
       (3-1) Hardware Configuration 
       [0058]    First, a hardware configuration of the customer management server  100  will be described. 
         [0059]    As illustrated in  FIG. 5 , the customer management server  100  includes, for example, a central processing unit (CPU)  500 , a read only memory (ROM)  501 , and a random access memory (RAM)  502 . When power is supplied to the customer management server  100 , the CPU  500  reads a boot program from the ROM  501  so as to boot. 
         [0060]    After that, the CPU  500  reads and executes an operating system (OS) and a management program from a hard disk drive (HDD)  503  so as to manage setup processing of the gateway  150 . 
         [0061]    In this case, the customer management server  100  uses a network interface card (NIC)  504  so as to communicate with other devices via the Internet  130 . 
       (3-2) Functional Configuration 
       [0062]    Next, a functional configuration of the customer management server  100  will be described by particularly focusing on management of the setup processing of the gateway  150 . 
         [0063]    As illustrated in  FIG. 6 , the customer management server  100  includes functions, for example, an identifying information receiver  601  and an identifying information confirming unit  602 . The identifying information receiver  601  receives, from the gateway  150 , the identifying information of the gateway  150  itself and the identifying information of the MFP  170 , having been acquired by the gateway  150 . 
         [0064]    When the identifying information receiver  601  receives the identifying information of the gateway  150  itself and the identifying information of the MFP  170  from the gateway  150 , the identifying information confirming unit  602  reads confirming information from the sales management DB  101  using the identifying information of the gateway  150  as a key. In a case where the gateway  150  has been connected to the LAN  160  to be connected to the gateway  150 , the confirming information is the identifying information of the MFP  170 , the identifying information to be acquired by the gateway  150 . 
         [0065]    The identifying information confirming unit  602  verifies and confirms whether the confirming information and the identifying information of the MFP  170  correspond to each other, the identifying information having been received from the gateway  150 . Accordingly, it is determined whether the gateway  150  has been connected to the LAN  160  as contracted. That is, correctness of an installation location of the gateway  150  is automatically determined. 
         [0066]    Upon the determination of the correctness, there is no need for, upon the setup, input work of a tenant ID by a user (customer) of the gateway  150  or a service man dispatched from a vendor of the gateway  150 . Note that, for example, when the gateway  150  is shipped, the identifying information of the gateway  150  and the identifying information of the MFP  170  have been registered in the sales management DB  101  prior to the setup of the gateway  150 . 
         [0067]    In a case where the identifying information confirming unit  602  confirms the correctness of the installation location of the gateway  150 , a connection information acquisition unit  603  reads, from the connection management DB  102 , the connection information of the gateway  150  with the identifying information of the gateway  150  as a key. In a case where the gateway  150  is an object to be provided with the App service, the connection information can be read. In a case where the gateway  150  is not an object to be provided with the App service, since the connection information has not been registered, the connection information cannot be read. Accordingly, it is confirmed whether the user of the gateway  150  meets a user of the App service. 
         [0068]    Therefore, unlike the technique in the related art, time and labor necessary for the user of the gateway  150  to acquire the activation key and set the activation key in the gateway  150 , can be omitted. 
         [0069]    Note that, in a case where the connection management DB  102  confirms that the confirming information and the identifying information of the MFP  170 , having been received from the gateway  150 , correspond to each other, the connection management DB  102  may generate an ID and a password for logging in the continuous connection server  110  by using any one or both of the tenant ID corresponding to the gateway  150  and the identifying information of the gateway  150 . Prior to the setup of the gateway  150 , for example, the ID and the password may be generated when the gateway  150  is shipped. 
         [0070]    Prior to the setup of the gateway  150 , the tenant ID and a connection destination URL included in the connection information are registered in the connection management DB  102 . The connection management DB  102  may store an activation state of the gateway  150 , namely, whether the setup of the gateway  150  has been completed. Before the setup is completed, the activation state is stored as “not-yet”. 
         [0071]    A connection information transmitter  604  transmits the connection information acquired by the connection information acquisition unit  603 , to the gateway  150 . 
       (3-3) Management Operation 
       [0072]    Next, setup management operation of the customer management server  100  will be described. 
         [0073]    As illustrated in  FIG. 7 , in the customer management server  100 , when the identifying information receiver  601  receives the identifying information from the gateway  150  (S 701 : YES), the identifying information confirming unit  602  reads and verifies the confirming information from the sales management DB  101  with the identifying information of the gateway  150  as a key (S 702 ). 
         [0074]    As a result, when the identifying information and the confirming information correspond to each other (S 703 : YES), the connection information acquisition unit  603  uses the identifying information of the gateway  150  as the key so as to acquire the connection information from the connection management DB  102 . When the acquisition of the connection information succeeds (S 704 : YES), the connection information transmitter  604  transmits the connection information to the gateway  150  (S 705 ). After that, the setup management operation is completed. 
         [0075]    Note that when the identifying information and the confirming information do not correspond to each other (S 703 : NO) or the acquisition of the connection information fails (S 704 : NO), the gateway  150  may be notified of the result. 
         [0076]      FIG. 8  is a sequence diagram of cooperative operation between the customer management server  100 , the continuous connection server  110 , the gateway  150 , and the MFP  170 , upon the setup of the gateway  150 . As illustrated in  FIG. 8 , when starting setup processing, the gateway  150  first requests the identifying information from the MFP  170 . After receiving a response of the identifying information from the MFP  170 , the gateway  150  transmits the identifying information of the gateway  150  itself and the identifying information of the MFP  170  to the customer management server  100 . 
         [0077]    When receiving the identifying information of the gateway  150  itself and the identifying information of the MFP  170 , the customer management server  100  reads the confirming information from the sales management DB  101  so as to confirm correctness of an installation location of the gateway  150 . When it is determined that the installation location is correct, the customer management server  100  reads the connection information from the connection management DB and transmits the connection information to the gateway  150 . The gateway  150  that has received the connection information uses the connection information so as to connect to the continuous connection server  110 . 
         [0078]    Accordingly, upon the setup of the gateway  150 , there is no need for notifying the user of the gateway  150  of information, such as the tenant ID and an activation key. A possibility that the information accompanied with the notification leaks out to a third party, can be avoided. When the gateway  150  is installed, setup operation by manpower is omitted. Therefore, installation costs can be reduced in terms of omission of work by the user or the service man. 
       [2] Second Embodiment 
       [0079]    Next, a second embodiment of the present invention will be described. A communication mediation system according the second embodiment performs operation similar to that of the communication mediation system according to the above first embodiment. Meanwhile, there is a difference in a point in which a gateway confirms propriety of a serial number. The descriptions will be given below by mainly focusing on the difference. 
         [0080]    Note that the same members between the embodiment and a modification are denoted with the same reference signs. 
       (1) Configuration and Operation of Gateway  150   
       [0081]    First, a configuration and operation of a gateway  150  according to the present embodiment will be described. 
         [0082]    The gateway  150  according to the present embodiment includes a hardware configuration similar to that of the gateway  150  according to the above first embodiment. Thus, the description of the hardware configuration will be omitted. 
       (1-1) Functional Configuration 
       [0083]    A functional configuration of the gateway  150 , in particular, a function of setup processing will be described. 
         [0084]    As illustrated in  FIG. 9 , the gateway  150  includes functions, such as a self-identifying information storage unit  301  and a self-identifying information transmitter  901 . Note that the descriptions of the self-identifying information storage unit  301 , a connection information receiver  303 , a connection processing unit  304 , an MFP searching unit  305 , and an MFP identifying information acquisition unit  306  are similar to those according to the above first embodiment. Thus, the descriptions will be omitted. 
         [0085]    A self-identifying information transmitter  901  transmits identifying information of the gateway  150  itself to a customer management server  100 , the identifying information having been stored in the self-identifying information storage unit  301 . 
         [0086]    A confirming information receiver  902  receives, from a customer management server  100 , confirming information for confirming identifying information of an MFP  170 , the identifying information being acquired by the MFP identifying information acquisition unit  306 . 
         [0087]    An identifying information confirming unit  903  verifies the confirming information received by the confirming information receiver  902  from the customer management server  100 , and the identifying information of the MFP  170  so as to confirm whether the confirming information and the identifying information of the MFP  170  correspond to each other. According to the above first embodiment, this is the processing performed by the identifying information confirming unit  602  of the customer management server  100 . 
         [0088]    After the identifying information confirming unit  903  confirms that the identifying information of the MFP  170  and the confirming information correspond to each other, a connection information requesting unit  904  notifies the customer management server  100  of the result of the correspondence, and requests connection information necessary for connecting the gateway  150  to a continuous connection server  110 . 
       (1-2) Setup Operation 
       [0089]    Next, setup operation of the gateway  150  will be described. 
         [0090]    As illustrated in  FIG. 10 , upon a setup, the gateway  150  reads the identifying information of the gateway  150  itself from the self-identifying information storage unit  301  (S 401 ). The self-identifying information transmitter  901  transmits the identifying information of the gateway  150  itself to the customer management server  100  (S 1001 ). After the confirming information receiver  902  receives the confirming information from the customer management server  100  (S 1002 : YES), the MFP searching unit  305  searches the MFP  170  that has been connected to a LAN  160  (S 402 ). 
         [0091]    When the MFP  170  is detected, the MFP identifying information acquisition unit  306  requests the identifying information (S 403 ). When the MFP identifying information acquisition unit  306  receives the identifying information from the MFP  170  (S 404 : YES), the identifying information confirming unit  903  verifies the confirming information received from the customer management server  100  and the identifying information received from the MFP  170  so as to confirm whether the confirming information and the identifying information correspond to each other (S 1003 ). When the confirming information and the identifying information correspond to each other (S 1004 : YES), the connection information requesting unit  904  requests the connection information from the customer management server  100  (S 1005 ). 
         [0092]    After that, the connection information receiver  303  receives the connection information from the customer management server  100  (S 406 : YES), the connection processing unit  304  connects the MFP  170  to the continuous connection server  110  (S 407 ). 
       (2) Configuration and Operation of Customer Management Server  100   
       [0093]    Next, a configuration and operation of the customer management server  100  will be described. 
         [0094]    The customer management server  100  according to the present embodiment includes a hardware configuration similar to that of the customer management server  100  according to the above first embodiment. Thus, the description of the hardware configuration will be omitted. 
       (2-1) Functional Configuration 
       [0095]    First, a functional configuration of the customer management server  100  regarding management of the setup processing of the gateway  150 , will be described. 
         [0096]    As illustrated in  FIG. 11 , the customer management server  100  includes functions, for example, an identifying information receiver  1101  and a confirming information transmitter  1102  The identifying information receiver  1101  receives the identifying information of the gateway  150  itself from the gateway  150 . 
         [0097]    When the identifying information receiver  1101  receives the identifying information of the gateway  150 , the confirming information transmitter  1102  reads the confirming information from a sales management DB  101 , with the identifying information of the gateway  150  as a key, so as to transmit the confirming information to the gateway  150 . 
         [0098]    A connection information requesting receiver  1103  receives, from the gateway  150 , a request for the connection information. A connection information acquisition unit  603  and a connection information transmitter  604  are similar to those according to the above first embodiment. 
       (2-2) Management Operation 
       [0099]    Next, setup management operation of the customer management server  100  will be described. 
         [0100]    As illustrated in  FIG. 12 , in the customer management server  100 , when the identifying information receiver  1101  receives the identifying information of the gateway  150  (S 1201 : Yes), the confirming information transmitter  1102  reads the confirming information from the sales management DB  101  with the identifying information of the gateway  150  as a key so as to transmit the confirming information to the gateway  150  (S 1202 ). 
         [0101]    After that, after the connection information requesting receiver  1103  receives, from the gateway  150 , a request for the connection information, accompanied with notification of the result that the identifying information of the MFP  170  and the confirming information correspond to each other (S 1203 : YES), the connection information acquisition unit  603  acquires the connection information from the connection management DB  102 . 
         [0102]    In this case, the identifying information receiver  1101  may store the identifying information received from the gateway  150 . With the identifying information as a key, the connection information acquisition unit  603  may read the connection information from the connection management DB  102 . Upon a request for the connection information by the gateway  150 , the customer management server  100  may be also notified of the identifying information of the gateway  150 . 
         [0103]    When the acquisition of the connection information succeeds (S 704 : YES), the connection information transmitter  604  transmits the connection information to the gateway  150  (S 705 ). After that, the setup management operation is completed. When the acquisition of the connection information fails (S 704 : NO), the gateway  150  may be notified of the result. 
         [0104]      FIG. 13  is a sequence diagram of cooperative operation between the customer management server  100 , the continuous connection server  110 , the gateway  150 , and the MFP  170 , upon the setup of the gateway  150 . As illustrated in  FIG. 13 , when starting setup processing, the gateway  150  first notifies the customer management server  100  of the identifying information of the gateway  150  itself. In response to this, when the customer management server  100  transmits the confirming information to the gateway  150 , the gateway  150  requests the identifying information from the MFP  170 . 
         [0105]    The MFP  170  returns the identifying information to the gateway  150 . The gateway  150  verifies the identifying information received from the MFP  170  and the confirming information received from the customer management server  100 . When confirming correspondence between the identifying information and the confirming information, the gateway  150  requests the connection information from the customer management server  100 . When the customer management server  100  transmits the connection information to the gateway  150 , the gateway  150  uses the connection information that has been received so as to perform continuous connection with the continuous connection server  110 . 
         [0106]    As described above, an effect similar to that according to the first embodiment can be also acquired. 
       [3] Modification 
       [0107]    The embodiments of the present invention have been described above. The present invention is not limited to the above embodiments. The following modification can be performed. 
         [0000]    (1) The above embodiments have been described with an example in which the gateway  150  acquires the identifying information of the MFP  170 . Needless to say, the present invention is not limited to this. Instead of this, the customer management server  100  may acquire the identifying information of the MFP  170  without depending on the gateway  150 . As described above, correctness of an installation location of the gateway  150  can be confirmed with high precision. 
         [0108]    In this case, a range of the MFP  170  can be designated by a subnet mask or a default gateway, the range from which the customer management server  100  acquires the identifying information. 
         [0109]    Note that, the customer management server  100  may verify confirming information and the identifying information of the MFP  170  acquired by the customer management server  100  without depending on the gateway  150 . The customer management server  100  may transmit the identifying information and the confirming information to the gateway  150  so that the gateway  150  may verify the identifying information and the confirming information. 
         [0110]    The customer management server  100  may verify the identifying information of the MFP  170  acquired without depending on the gateway  150  and the identifying information of the MFP  170  acquired by the gateway  150 . Only in a case where the identifying information of the MFP  170  acquired without depending on the gateway  150  and the identifying information of the MFP  170  acquired by the gateway  150 , correspond to each other, the customer management server  100  may verify the identifying information and the confirming information. As described above, the correctness of the installation location of the gateway  150  can be further securely confirmed. 
         [0000]    (2) The above embodiments have been described with an example in which the gateway  150  determines whether each of the devices is applicable to the object with the identifying information to be acquired based on the manufacturer information of each of the devices, the manufacturer information being acquired by using the SNMP. The present invention is not limited to this. Instead of this, the following may be performed. 
         [0111]    That is, prior to a search for the MFP  170 , the gateway  150  may transmit the identifying information of the gateway  150  itself to the customer management server  100 . The gateway  150  may acquire a type of the MFP  170  from the customer management server  100  and then acquire the identifying information from only the MFP  170  applicable to the type. For example, the SNMP acquires the type of the MFP  170  so that it can be confirmed whether the MFP  170  is applicable to the type. 
         [0112]    As described above, in a case where a large number of MFPs  170  have been connected to the LAN  160  to which the gateway  150  has been connected, the number of MFPs  170  from which the identifying information is collected can be narrowed down. Therefore, time necessary for setting up the gateway  150  can be shortened. 
         [0113]    Note that, the type of the MFP  170  includes a kind of option that has been added to the MFP  170  in addition to a model of the MFP  170  body. 
         [0000]    (3) The above embodiments have been described with an example in which the gateway  150  acquires the identifying information of the MFP  170  connected to the LAN  160 . Needless to say, the present invention is not limited to this. The identifying information may be acquired from other devices together with the MFP  170  or instead of the MFP  170 . Information on which device the identifying information is acquired from, may be previously set in the gateway  150 . The gateway  150  may inquire of the customer management server  100  about the information. 
         [0114]    The devices other than the MFP  170  may be, for example, a printer, a copying machine having a scanner, and a facsimile machine having a communication function. The devices may be a device, such as a personal computer  180  other than an image forming apparatus. 
         [0000]    (4) According to the above embodiments, not particularly limited, in addition to a case where the gateway  150  is connected to the LAN  160  for the first time after the shipment, the gateway  150  may also perform the setup processing in a case where the gateway  150  is connected to a new LAN  160  by, for example, replacement for failure.
 
(5) The above embodiments has been described with an example in which the product number for identifying each of the gateway  150  and the MFP  170 , and the serial number for identifying each of the products of the same model are used as the identifying information. Needless to say, the present invention is not limited to this. Instead of this, the following may be performed.
 
         [0115]    For example, only the serial number may be used as the identifying information. Information that can individually specify devices applicable to an object with the identifying information to be acquired may be used as the identifying information other than the serial number. 
         [0000]    (6) The above embodiments have been described with an example in which the confirming information is the identifying information of the MFP  170 , the identifying information to be acquired by the gateway  150 , in a case where the gateway  150  has been connected to the LAN  160  to be connected to the gateway  150 . Needless to say, the present invention is not limited to this. Instead of the identifying information of the MFP  170 , the identifying information to be acquired by the gateway  150 , a calculation value uniquely calculated from the identifying information, such as a hash value calculated from the identifying information, may be used. 
         [0116]    In this case, a calculation value calculated from the identifying information acquired by the gateway  150  is an object to be verified. 
         [0000]    (7) The embodiments have been described with an example in which the customer management server  100  is a single server device. Needless to say, the present invention is not limited to this. The customer management server  100  may be a cloud system including a plurality of computers. Each of the continuous connection server  110  and the App server  120  may be also a single server device or a cloud system.
 
(8) The above embodiments have been described with an example in which the gateway  150  is used as an example of the communication mediation device. Needless to say, the present invention can be understood that communication mediation processing to be performed by the gateway  150  is a communication mediation program to be executed by a CPU  200  that controls the gateway  150 .
 
         [0117]    A communication mediation system, a communication mediation device, a communication mediation method, and a communication mediation program according to the present invention, are useful as a technique that securely introduces the communication mediation device with less time and labor. 
         [0118]    According to an embodiment of the present invention, setting information is automatically sent to the communication mediation device without requiring manpower. Therefore, a possibility that the tenant ID and the activation key leak out can be avoided. The security accompanied with the setup can be protected, and time and labor necessary for the setup can be also reduced. 
         [0119]    Although the present invention has been described and illustrated in detail, it is clearly understood that the same is by way of illustrated and example only and is not to be taken by way of limitation, the scope of the present invention being interpreted by terms of the appended claims.