JP2012186624A - Communication relay authorization system, communication relay device, communication relay authorization method, terminal device, and control program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize relaying of communication between terminal devices by simple operation.SOLUTION: A communication relay device generates authorization-use information that includes credential information and destination information of the communication relay device and is used for authorizing relaying communication between terminal devices, and transmits the generated authorization-use information to a first terminal device. A second terminal device obtains, from the first terminal device, the authorization-use information that the first terminal device has received from the communication relay device, and transmits the authorization-use information to the communication relay device based on the destination information included in the obtained authorization-use information. If the authorization-use information transmitted to the first terminal device matches the authorization-use information received from the second terminal device, the communication relay device authorizes relaying communication between the first terminal device and the second terminal device.

Description

  The present invention relates to a communication relay authorization system, a communication relay device, a communication relay authorization method, a terminal device, and a control program, and in particular, a communication relay authorization system, a communication relay device, and a communication relay authorization for authorizing communication relay between terminal devices. The present invention relates to a method, a terminal device, and a control program.

  Patent Document 1 discloses a technology related to a server that authorizes relaying of communication in order to realize bidirectional communication between a home network and the Internet. The server according to Patent Document 1 operates as follows. InterServer, which is a server according to Patent Document 1, mediates connection between a relay device in a network home appliance and a client device (paragraph 0033 and FIG. 1). Here, the network home appliance is connected to the home network, and the client device is connected to a network other than the home network. In addition, the InterServer includes a filter unit and authorizes access based on the filter rule (paragraphs 0043, 0044, and 0045 and FIGS. 3A and 4). Further, the filter rule can be input and changed by the end user via the Web server.

  Patent Document 2 discloses a technology related to a remote control system for connecting a control counselor computer and a control target user computer. The remote control system according to Patent Document 2 operates as follows. First, the relay server generates a connection cipher and transmits it to one terminal, that is, the counselor computer. Next, the counselor notifies the other terminal, that is, the user of the user computer by telephone. . Then, the user inputs the connection encryption on the user computer. Thereafter, the relay server authorizes the relay if the connection ciphers match (paragraphs 0023 and 0024 and FIGS. 1 and 2).

  Patent Document 3 discloses a technique related to a gateway that relays communication between two terminals. The gateway according to Patent Document 3 operates as follows. First, the gateway relays communication between the client and the application server (paragraph 0019). At this time, the gateway generates a token based on the tunnel connection information, and attaches the token to the request from the client to the application server. Then, the server authorizes access based on this token. That is, for relaying communication, authorization is performed at the time of connection to the gateway, and for individual requests, the server authorizes based on a token attached by the gateway.

  Patent Document 4 discloses a technique related to an authentication system that realizes authentication by a one-time password method by using a general portable terminal instead of using a dedicated device such as a hardware token. In the authentication system according to Patent Document 4, in order to access a Web page or the like that requires authentication, a user ID and a portable terminal are previously registered with respect to a Web server or the like having an authentication database that manages the Web page and performs authentication Registration is performed in association with the terminal ID. Then, when accessing the Web page from a PC or the like, the mobile terminal accesses the Web server, and access authentication is performed with the terminal ID using the issued one-time password. Subsequently, the Web server is accessed using a user ID from a PC or the like. At that time, the Web server refers to the authentication database and permits access to the Web page only when the terminal ID associated with the accessed user ID has been authenticated.

  Patent Document 5 discloses a technique related to a data communication relay device that relays a service request from a client to a server.

  Patent Document 6 discloses a technique related to a proxy server that relays communication with a wide area network side in a network in a communication system in which a client terminal in a specific network can communicate with an authentication server via a wide area network. Yes.

JP 2004-194313 A JP 2004-310734 A JP 2009-163546 A JP 2008-171087 A JP 2003-283556 A JP 2009-258917 A

  The techniques related to Patent Documents 1 to 4 described above have a problem that a user's operation for authorizing relay of communication between terminal devices is complicated. In the technique according to Patent Document 1, an end user must input a filter rule. Also, a simple input method for inputting the filter rule is not disclosed. Also in the technology according to Patent Document 2, the end user must input the connection encryption. In addition, obtaining a connection cipher requires a telephone call from a counselor. As a result, in the technique according to Patent Document 2, the operations of the counselor and the end user must be performed, and the operation is complicated.

  Furthermore, in the technique according to Patent Document 3, connection authorization to the gateway and connection authorization to the application server must be associated in advance. In other words, access control information based on tunnel connection information (including VPNID and client ID according to paragraph 0043 of Patent Document 3) passed to the server in advance via a token needs to be set in the server in advance. That is, authorization information must be set in the application server in advance. Further, a simple setting method for setting authorization information is not disclosed.

  Patent Document 4 requires registration in which a user ID and a terminal ID of a portable terminal are associated with each other in advance on a Web server.

  Patent Document 5 relates to request selection when access from a plurality of clients is concentrated, and does not relate to authorization of communication relay. Further, Patent Document 6 is a technique related to a proxy server that allows authentication to be continued even when communication with an authentication server is not possible, and does not relate to token generation or the like.

  The present invention has been made to solve such problems, a communication relay authorization system, a communication relay device, a communication relay authorization method for realizing relay of communication between terminal devices with a simple operation, An object is to provide a terminal device and a control program.

  A communication relay authorization system according to a first aspect of the present invention includes a communication relay device that relays communication between terminal devices, a first terminal device, and a second that can acquire data from the first terminal device. The communication relay device generates authorization information including credential information used to authorize relay of communication between the terminal devices and destination information of the communication relay device, and The generated authorization information is transmitted to the first terminal device, and the second terminal device receives the authorization information received from the communication relay device by the first terminal device from the first terminal device. Based on the destination information included in the acquired authorization information, the authorization information is transmitted to the communication relay device, and the communication relay device transmits the authorization information transmitted to the first terminal device; From the second terminal device If the signal was approved for information match, characterized in that authorizing the relay communication between the first terminal device and the second terminal device.

  The communication relay device according to the second aspect of the present invention comprises an authorization information generating means for generating authorization information including credential information used for authorizing relay of communication between terminal devices and own destination information. The authorization information transmitting means for transmitting the generated authorization information to the first terminal device, and the authorization information acquired by the second terminal device from the first terminal device and transmitted based on the destination information When the authorization information receiving means for receiving the authorization information transmitted to the first terminal device and the authorization information received from the second terminal device match, the first terminal device and the Authorization means for authorizing relaying of communication with the second terminal device.

  A communication relay authorization method according to a third aspect of the present invention is a communication relay device that relays communication between a first terminal device and a second terminal device, and authorizes relay of communication between the terminal devices. And generating the authorization information including the credential information used for the communication and the destination information of the communication relay device, transmitting the generated authorization information to the first terminal device, and the second terminal device The authorization information acquired from one terminal device and transmitted based on the destination information, and the authorization information transmitted to the first terminal device and the authorization information received from the second terminal device are: If they match, the relay of communication between the first terminal device and the second terminal device is authorized.

  A control program according to a fourth aspect of the present invention is a control program for a communication relay device that relays communication between a first terminal device and a second terminal device, and relays communication between the terminal devices. Generation processing for generating authorization information including credential information used for authorization and own destination information, transmission processing for transmitting the generated authorization information to the first terminal device, and second terminal device Receives from the first terminal device and receives the authorization information transmitted based on the destination information, the authorization information transmitted to the first terminal device, and received from the second terminal device If the authorization information matches, the computer is caused to execute an authorization process for authorizing relaying of communication between the first terminal device and the second terminal device.

  A terminal device according to a fifth aspect of the present invention includes an authorization including credential information used for authorizing the relay in a communication relay device that relays communication between the terminal devices, and destination information of the communication relay device. Acquisition means for acquiring the information for use from the other terminal device, and transmission means for transmitting the authorization information to the communication relay device based on the destination information included in the acquired authorization information.

  A control program according to a sixth aspect of the present invention includes an authorization including credential information used for authorizing the relay in a communication relay device that relays communication between terminal devices, and destination information of the communication relay device. The computer executes acquisition processing for acquiring the information from the other terminal device, and transmission processing for transmitting the authorization information to the communication relay device based on the destination information included in the acquired authorization information. Let

  A terminal device according to a seventh aspect of the present invention includes an authorization including credential information used for authorizing the relay in a communication relay device that relays communication between the terminal devices, and destination information of the communication relay device. Receiving means for receiving the information for use, and setting means for setting the information for authorization to be obtainable from another terminal device when the information for authorization is received from the communication relay device.

  A control program according to an eighth aspect of the present invention includes an authorization including credential information used for authorizing the relay in a communication relay device that relays communication between terminal devices, and destination information of the communication relay device. The computer executes a receiving process for receiving the information for use, and a setting process for setting the information for authorization to be obtainable from another terminal device when the information for authorization is received from the communication relay device.

  According to the present invention, a communication relay authorization system, a communication relay device, a communication relay authorization method, a terminal device, and a control program for realizing processing for authorizing communication relay between terminal devices by a simple operation of an end user are provided. be able to.

It is a block diagram which shows the structure of the communication relay authorization system concerning Embodiment 1 of this invention. It is a sequence diagram which shows the flow of the communication relay authorization process concerning Embodiment 1 of this invention. It is a block diagram which shows the structure of the communication relay authorization system concerning Embodiment 2 of this invention. It is a block diagram which shows the example of the hardware constitutions of the communication relay apparatus concerning Embodiment 2 of this invention. It is a block diagram which shows the example of the hardware constitutions of the terminal device A concerning Embodiment 2 of this invention. It is a block diagram which shows the example of the hardware constitutions of the terminal device B concerning Embodiment 2 of this invention. It is a sequence diagram which shows the flow of the communication relay authorization process concerning Embodiment 2 of this invention. It is a flowchart for demonstrating the flow of the relay request | requirement transmission process concerning Embodiment 2 of this invention. It is a flowchart for demonstrating the flow of the relay request | requirement reception process concerning Embodiment 2 of this invention. It is a flowchart for demonstrating the flow of the information reception process for authorization concerning Embodiment 2 of this invention. It is a flowchart for demonstrating the flow of the information acquisition process for authorization concerning Embodiment 2 of this invention. It is a flowchart for demonstrating the flow of the authorization process concerning Embodiment 2 of this invention. It is a block diagram which shows the structure of the communication relay authorization system concerning Embodiment 3 of this invention.

  Hereinafter, specific embodiments to which the present invention is applied will be described in detail with reference to the drawings. In the drawings, the same elements are denoted by the same reference numerals, and redundant description will be omitted as necessary for the sake of clarity.

<Embodiment 1 of the Invention>
FIG. 1 is a block diagram showing a configuration of a communication relay authorization system 1000 according to the first exemplary embodiment of the present invention. The communication relay authorization system 1000 includes a communication relay device 100, a terminal device A110, and a terminal device B120. Here, the communication relay device 100 relays communication between arbitrary terminal devices. The communication between the terminal devices is assumed to be a communication method capable of bidirectional data communication between specific terminal devices via a network or the like. For example, VPN (Virtual Private Network) and the like can be mentioned, but the invention is not limited to this.

  Next, a configuration for authorizing relaying of communication between the terminal device A110 and the terminal device B120 using the communication relay device 100 will be described.

The communication relay device 100 includes an authorization information generation unit 101, an authorization information transmission unit 102, an authorization information reception unit 103, and an authorization unit 104.
The authorization information generating unit 101 generates authorization information including a token ID and a token upload destination. Here, the token ID is identification information used for authorizing relay of communication between terminal devices, and is an example of credential information. The credential information is information used to authorize relay of communication between terminal devices. The credential information is information that is shared between terminal devices that perform communication, but is kept secret to external terminal devices other than the terminal device. Therefore, the credential information is preferably information that is difficult to predict, and is preferably passed between the terminal devices so as not to be intercepted by a third party. The credential information includes, for example, a random number issued for use in one time and an access token. The token upload destination is an example of destination information for receiving the authorization information transmitted from the terminal apparatus B120 by the authorization information receiving unit 103 of the communication relay apparatus 100.
The authorization information transmitting unit 102 of the communication relay device 100 transmits the authorization information to the terminal device A110.

  The terminal device A110 includes an authorization information download unit 111, an authorization information transfer request presentation UI unit 112, and an authorization information delivery unit 113. The authorization information download unit 111 downloads authorization information from the communication relay device 100. After the authorization information download unit 111 downloads the authorization information, the authorization information collection request presentation UI unit 112 presents information for requesting the end user of the terminal device B120 to collect the authorization information. This presentation is, for example, a dialog display on the screen. The authorization information delivery unit 113 allows the authorization information delivery unit 122 of the terminal device B120 to be described later to accept the authorization information. As a technique for transferring / delivering authorization information, it is sufficient that data can be transferred / taken between at least one direction between specific terminal devices. In addition to short-range wireless communication (infrared communication, etc.), QR code It can also be applied to display / reading.

  The terminal device B120 includes an authorization information take-up UI unit 121, an authorization information take-out unit 122, and an authorization information upload unit 123. The authorization information take-up UI unit 121 provides a UI for allowing an end user to take in the authorization information. For example, the terminal device B120 may be provided with an authorization information collection start button. When the end user presses the take-off start button, the authorization information take-out means 122 takes the authorization information from the authorization information delivery means 113. After the authorization information take-out means 122 takes the authorization information, the authorization information upload means 123 refers to the destination information included in the authorization information and transmits the authorization information to the communication relay device 100 that is the destination. In the above description, the destination information is the communication relay device 100. However, the destination information is not limited to this, and the destination information may be a destination assigned to the authorization information receiving unit 103 itself of the communication relay device.

  The authorization information receiving unit 103 of the communication relay apparatus 100 receives authorization information from the terminal apparatus B120. The authorization unit 104 matches the token ID of the authorization information generated by the authorization information generation unit 101 and transmitted from the authorization information transmission unit 102 with the token ID of the authorization information received by the authorization information reception unit 103. If so, the communication relay between the terminal device A110 and the terminal device B120 is authorized.

  When the terminal device A110 sets the received authorization information to be acquirable, it is desirable to notify the end user of the terminal device B120 that the authorization information can be obtained. For example, this corresponds to the case where the authorization information collection request presentation UI unit 112 presents information requesting the end user to retrieve the authorization information. Thereby, the end user can easily know the acquisition timing of the authorization information.

  FIG. 2 is a sequence diagram showing a flow of communication relay authorization processing according to the first exemplary embodiment of the present invention. First, the communication relay device 100 generates authorization information including credential information used to authorize relay of communication between terminal devices and destination information of the communication relay device (S101).

  Next, the communication relay device 100 transmits the generated authorization information to the terminal device A110, and the terminal device A110 receives the authorization information from the communication relay device 100 (S102).

  Subsequently, the terminal apparatus B120 acquires the authorization information received from the communication relay apparatus 100 by the terminal apparatus A110 from the terminal apparatus A110 (S103). Then, based on the destination information included in the acquired authorization information, the terminal device B120 transmits the authorization information to the communication relay device 100 (S104).

  Thereafter, if the authorization information transmitted to the terminal device A110 matches the authorization information received from the terminal device B120, the communication relay device 100 authorizes relaying of communication between the terminal device A110 and the terminal device B120. To do.

  As described above, in the first embodiment of the present invention, the authorization information including the credential information and the destination information generated by the communication relay device 100 is transferred from the terminal device A110 to the terminal device B120. In the terminal device B120, the end user does not have to input characters or the like of the authorization information by key operation on the terminal device B120.

  Further, the authorization information according to the first exemplary embodiment of the present invention includes a token upload destination in addition to the credential information (for example, token ID). Therefore, the terminal device B120 can easily know the destination information of the upload destination only by acquiring the authorization information from the terminal device A110. Therefore, it is not necessary for the end user to input the destination information of the communication relay device 100 into the terminal device B120 by a key operation.

  According to Embodiment 1 of the present invention, when communicating via a communication relay device that authorizes relaying between terminal devices, the end user takes over authorization information from the terminal device A110 for relay authorization. Since it is only necessary to perform an operation of permitting in the terminal device B120, the end user can authorize with a simple operation.

<Embodiment 2 of the Invention>
The second embodiment uses the authorization information authorized in the relay between the terminal device A and the terminal device B in the first embodiment and authorizes the relay to the same terminal device by the second and subsequent end users. The authorization operation is further simplified. In the following description, in the communication relay authorization system, detailed description of the same configuration / operation as in the first embodiment will be omitted, and the added configuration / operation will be described in detail. FIG. 3 is a block diagram showing the configuration of the communication relay authorization system 2000 according to the second embodiment of the present invention. The communication relay authorization system 2000 includes a communication relay device 200, a terminal device A210, and a terminal device B220.

  First, the communication relay device 200 will be described. The communication relay apparatus 200 includes an authorized token storage unit 205 and a relay request accepting unit 206 in addition to the authorization information generating unit 201, the authorization information transmitting unit 202, the authorization information receiving unit 203, and the authorization unit 204. Prepare.

  The authorization information generating unit 201 generates authorization information, and the authorization information transmitting unit 202 transmits the authorization information to the terminal device A 210. As in the first embodiment, the authorization information receiving unit 203 receives authorization information from the terminal device B220.

  In the authorization unit 204, the token ID of the authorization information generated by the authorization information generation unit 201 and transmitted by the authorization information transmission unit 202 matches the token ID of the authorization information received by the authorization information reception unit 203. In this case, the relay of communication between the terminal device A 210 and the terminal device B 220 is authorized, and the authorization information is stored in the authorized token storage unit 205.

  The relay request receiving unit 206 receives a relay request from the terminal device A210. Then, when the received relay request includes authorization information, the relay request receiving unit 206 determines whether or not it matches the authorization information stored in the authorized token storage unit 205. If the authorization information in the relay request matches the authorization information in the authorized token storage unit 205, it is determined that the relay using the authorization information has already been authorized. Then, the communication relay device 100 relays communication between the terminal device A 210 and the terminal device B 220 in response to the relay request.

  Here, if the relay request from the terminal device A210 does not include the authorization information, or if it includes the authorization information stored in the authorized token storage unit 205, the authorization information generation unit 201 Authorization information is newly generated and transmitted to the terminal device A 210 to establish relay authorization with the terminal device B 220.

  Next, the terminal device A210 will be described. In addition to the authorization information download unit 211, the authorization information transfer request presentation UI unit 212, and the authorization information delivery unit 213, the terminal device A210 includes a relay request transmission unit 215 and a downloaded information storage unit 214.

  The authorization information download unit 211 downloads the authorization information from the communication relay device 200 and stores the authorization information in the downloaded information storage unit 214 described later. When the terminal device B220 is newly requested for relay authorization, after the authorization information download unit 211 downloads the authorization information, the authorization information collection request presentation UI unit 212 receives the authorization information from the end user. Present the requested information. The authorization information delivery means 213 allows the terminal device B220 to obtain authorization information. When the terminal device A 210 requests the terminal device B 220 for a new relay authorization, it is the same as the configuration / operation of the first embodiment, and thus detailed description thereof is omitted.

  The relay request transmission unit 215 transmits a relay request for communication with the terminal device B 220 to the communication relay device 200. At this time, if the downloaded information storage unit 214 stores the authorization information, the relay request is transmitted including the authorization information.

  Then, the relay request reception unit 206 determines whether the relay request received from the terminal device A 210 matches the authorization information and the authorization information stored in the authorized token storage unit 205. If the authorization information in the relay request matches the authorization information in the authorized token storage unit 205, it is determined that the relay using the authorization information has already been authorized, and the communication relay device 100 The communication between the terminal device A210 and the terminal device B220 is relayed in response to the request.

  As described above, in the second embodiment, by using the authorization information authorized in the relay between the terminal device A and the terminal device B in the first embodiment, the authorization for the relay to the terminal device B is obtained again. At this time, the end user of the terminal device B does not have to perform the operation of taking the authorization information, and can realize a simpler operation.

  FIG. 4 is a block diagram illustrating an example of a hardware configuration of the communication relay device 200 according to the second embodiment of the present invention. The communication relay apparatus 200 includes a CPU (Central Processing Unit) 231, a RAM (Random Access Memory) 232, a ROM (Read Only Memory) 233, a communication IF (Interface) 234, and a hard disk 235.

  The hard disk 235 is a nonvolatile storage device. The hard disk 235 stores an OS (not shown), a control program 2351, and the like. Here, the control program 2351 is a computer program in which the communication relay authorization process according to the second embodiment of the present invention is implemented. That is, each process of the authorization information generation unit 201, the authorization information transmission unit 202, the authorization information reception unit 203, the authorization unit 204, and the relay request reception unit 206 is implemented.

  The CPU 231 controls various processes in the communication relay device 200, access to the RAM 232, ROM 233, communication IF 234, and hard disk 235, and the like. The communication IF 234 performs communication with external terminal devices including the terminal devices A210 and B220. The communication IF 234 realizes the authorization information transmitting unit 202, the authorization information receiving unit 203, and the relay request receiving unit 206 together with the processing of the control program 2351. The communication IF 234 is an interface for performing communication with the terminal device A210 and the terminal device B220.

  In the communication relay apparatus 200, the CPU 231 reads and executes the OS, the control program 2351, and the like stored in the RAM 232, the ROM 233, or the hard disk 235. Thereby, the communication relay apparatus 200 can implement | achieve a communication relay authorization process.

  FIG. 5 is a block diagram showing an example of a hardware configuration of the terminal device A210 according to the second embodiment of the present invention. The terminal device A 210 includes a CPU 241, a RAM 242, a ROM 243, communication IFs 244a and 244b, a hard disk 245, a display device 246, and an input device 247. In addition, about the structure equivalent to the communication relay apparatus 200, description is abbreviate | omitted suitably.

  A control program 2451 is stored in the hard disk 245. The control program 2451 is implemented with processing of an authorization information download unit 211, an authorization information transfer request presentation UI unit 212, an authorization information delivery unit 213, a downloaded information storage unit 214, and a relay request transmission unit 215.

  The communication IF 244a is an interface for performing communication with the communication relay device 200. For example, it can be realized by a wired IP communication interface or a wireless communication interface. The communication IF 244a implements the authorization information download unit 211 and the relay request transmission unit 215 together with the processing of the control program 2451. The communication IF 244b is an interface for performing communication with the terminal device B220. For example, a short-range wireless communication interface such as infrared communication can be used. The communication IF 244b implements the authorization information delivery unit 213 together with the processing of the control program 2451. Note that the communication method is not limited to the above as long as the authorization information can be delivered from the terminal device A210 to the terminal device B220. For example, a technique for transferring data information using a two-dimensional barcode or the like can be applied.

  The display device 246 is an output device such as a display device. The display device 246 displays information output by the authorization information collection request presentation UI unit 212. The input device 247 is a general input device such as a keyboard.

  In the terminal device A210, the CPU 241 reads and executes the OS, the control program 2451, and the like stored in the RAM 242, the ROM 243, or the hard disk 245. As a result, the terminal device A 210 can realize the authorization information receiving process.

  FIG. 6 is a block diagram illustrating an example of a hardware configuration of the terminal device B220 according to the second embodiment of the present invention. The terminal device B220 includes a CPU 251, a RAM 252, a ROM 253, communication IFs 254a and 254b, a hard disk 255, a display device 256, and an input device 257. In addition, about the structure equivalent to the communication relay apparatus 200 or the terminal device A210, description is abbreviate | omitted suitably.

  A control program 2551 is stored in the hard disk 255. In the control program 2551, each process of the authorization information taking UI unit 221, the authorization information taking unit 222, and the authorization information uploading unit 223 is implemented.

  The communication IF 254a is an interface for performing communication with the communication relay device 200. For example, a wireless IP communication interface is realized. The communication IF 254a realizes the authorization information upload unit 223 in combination with the processing of the control program 2551. The communication IF 254b is an interface for performing communication with the terminal device A210, and implements, for example, a short-range wireless communication interface. The communication IF 254b realizes the process of the authorization information collection unit 222 together with the process of the control program 2551. Note that the communication method is not limited to the above as long as the authorization information can be delivered from the terminal device A210 to the terminal device B220. For example, a technique for transferring data information using a two-dimensional barcode or the like can be applied.

  The display device 256 is an output device such as a display device. The display device 256 displays a near field wireless communication reception start button output by the authorization information collection UI unit 221. The input device 247 is a general input device such as a keyboard, and accepts a pressing operation of a reception start button by the user.

  In the terminal device B220, the CPU 251 reads and executes the OS, the control program 2551, and the like stored in the RAM 252, the ROM 253, or the hard disk 255. Thereby, the terminal device B220 can implement the authorization information acquisition process.

  FIG. 7 is a sequence diagram showing the flow of the communication relay authorization process according to the second embodiment of the present invention. First, the terminal device A 210 performs a relay request transmission process (S201). FIG. 8 is a flowchart for explaining the flow of the relay request transmission process according to the second embodiment of the present invention.

  First, the authorization information transmitting unit 202 of the terminal device A210 determines whether the downloaded authorization information is stored in the downloaded information storage unit 214 (S11). If the downloaded authorization information is stored, the authorization information transmitting unit 202 transmits a relay request including the downloaded authorization information to the communication relay device 200 (S12). If the downloaded authorization information is not stored, the authorization information transmitting unit 202 transmits a relay request not including the authorization information to the communication relay device 200 (S13).

  Returning to FIG. Next, the communication relay device 200 performs a relay request reception process (S202). FIG. 9 is a flowchart for explaining the flow of the relay request receiving process according to the second embodiment of the present invention.

  The communication relay device 200 receives the relay request transmitted from the terminal device A 210 by the relay request receiving means 206 (S21). Next, the relay request accepting unit 206 determines whether or not the received relay request includes authorization information (S22). If the relay request includes authorization information, the relay request reception unit 206 determines whether or not the authorization information is stored in the authorized token storage unit 205 (S23).

  If the authorization information is stored, since the relay in the communication relay device 200 has been authorized, the communication relay device 200 starts relaying communication between the terminal device A 210 and the terminal device B 220. (S24). Therefore, the operation flow of the communication relay authorization process ends.

  If the relay request does not include the authorization information in step S22 or if the authorization information is not stored as authorized in step S23, the authorization information generation unit 201 generates the authorization information (S25). . Then, the authorization information transmitting unit 202 transmits the generated authorization information to the terminal device A 210 (S26).

  Returning to FIG. Subsequently, the terminal device A210 performs authorization information reception processing (S203). FIG. 10 is a flowchart for explaining the flow of the authorization information receiving process according to the second embodiment of the present invention.

  First, the terminal device A210 receives the authorization information transmitted from the communication relay device 200 by the authorization information download unit 211 (S31). In other words, the authorization information download unit 211 downloads the authorization information as a response according to the relay request.

  Next, the terminal device A210 stores the received authorization information in the downloaded information storage unit 214 (S32). Then, the terminal device A210 presents the authorization information take-up request to the end user through the authorization information take-up request presentation UI means 212 (S33). For example, the display device 246 displays that the authorization information can be acquired such as near field communication.

  At the same time, the terminal device A 210 activates the authorization information delivery means 213 so that the terminal device B 220 can obtain the authorization information (S34). Note that steps S33 and S34 may be executed in parallel or one of them may be executed first.

  Returning to FIG. Subsequently, the terminal device B220 performs an authorization information acquisition process (S204). FIG. 11 is a flowchart for explaining the flow of the authorization information acquisition process according to the second embodiment of the present invention.

  First, the terminal device B220 obtains authorization information acquisition permission from the end user through the authorization information collection UI unit 221 (S41). That is, the end user visually confirms the take-up request (acquisition request) presented by the authorization information take-up request presentation UI unit 212, and displays the reception start button displayed on the display device 256 or the key associated with the button. By pressing, an intention to acquire authorization information is displayed. In other words, a takeover permission is issued. Thereby, the end user can realize the pairing of the terminal device A210 and the terminal device B220 with a minimum operation. Note that the means for permitting collection by the end user is not limited to this, and any equivalent simple operation may be used.

  Then, when the terminal device B220 obtains the acquisition permission in step S41, the terminal device B220 activates the authorization information collection unit 222 to collect, that is, acquire the authorization information from the terminal device A210 (S42). Then, the terminal device B220 uploads the acquired authorization information to the communication relay device 200 through the authorization information upload unit 223 (S43).

  Returning to FIG. Thereafter, the communication relay device 200 performs an authorization process (S205). FIG. 12 is a flowchart for explaining the flow of the authorization process according to the second embodiment of the present invention.

  First, the communication relay device 200 receives the authorization information uploaded by the terminal device B220 by the authorization information receiving unit 203 (S51). Next, the authorization unit 204 of the communication relay device 200 determines whether or not the received authorization information matches the authorization information previously transmitted to the terminal device A210 (S52).

  If the received authorization information matches the transmitted authorization information, the authorization unit 204 authorizes the relay (S53). Further, the authorization unit 204 stores the authorization information in the authorized token storage unit 205 (S54). Then, the operation flow of the communication relay authorization process ends.

  If the authorization information does not match in step S52, the authorization unit 204 does not authorize the relay (S55). Then, the operation flow of the communication relay authorization process ends.

  With the above configuration and operation, there is an effect that the end user can authorize the terminal device A 210 and the terminal device B 220 to communicate via the communication relay device 200 with a simple operation.

  In addition, since the authorized token storage unit 205 and the downloaded information storage unit 214 are provided, once the communication relay is authorized, the authorization operation by the end user can be omitted in the second and subsequent communication relay requests. The effect becomes.

<Third Embodiment of the Invention>
FIG. 13: is a block diagram which shows the structure of the communication relay authorization system 3000 concerning Embodiment 3 of this invention. The communication relay authorization system 3000 shows one specific example of the communication relay authorization system 1000 according to the first embodiment described above. The The Internet 331 and The Internet 332 in FIG. 13 are given different reference numbers for convenience of explanation, but may be the same network.

  The communication relay authorization system 3000 includes a communication relay device 300, a desktop computer 310, and a mobile phone 320. These correspond to the communication relay device 100, the terminal device A110, and the terminal device B120, respectively, having the configuration shown in FIG.

  The communication relay device 300 includes an authorization information generation module 301, a wired IP communication interface 302, a wired IP communication interface 303, and an authorization information verification module 304. These respectively embody the authorization information generation unit 101, the authorization information transmission unit 102, the authorization information reception unit 103, and the authorization unit 104 of FIG. The wired IP communication interfaces 302 and 303 may be shared. The wired IP communication interfaces 302 and 303 can implement data communication. Further, the authorization information generation module 301 and the authorization information verification module 304 may be realized by executing a computer program.

  The authorization information generation module 301 uses a URI indicating the wired IP communication interface 303 as a token upload destination, and adds a token ID as a query element at the end of the URI. As a result, the authorization information is, for example, the following URI: “http://gateway.example.com/interfaceB?ID=12345”. The authorization information generation module 301 encodes this authorization information into a QR code for transmission. Then, the wired IP communication interface 302 transmits this QR code to the desktop computer 310.

  The desktop computer 310 includes a wired IP communication interface 311, a QR code reading prompt message display module 312, a QR code display module 313, and a display device 314. The wired IP communication interface 311 can realize data communication with the communication relay device 300 via the Internet 331. The QR code reading promotion message display module 312 and the QR code display module 313 may be realized by executing a computer program.

  The desktop computer 310 receives the received QR code through the wired IP communication interface 311. Then, the QR code reading promotion message display module 312 displays a message prompting the end user to read the QR code on the display device 314. This message is, for example, “If you want to authorize relaying communication, please read this QR code”. Further, the QR code display module 313 displays the QR code on the display device 314.

  The mobile phone 320 includes a QR code reader activation button 321, a QR code reader 322, and a wireless IP communication interface 323. The wireless IP communication interface 323 can realize data communication with the communication relay device 300 via the mobile phone network 333 and the Internet 332.

  The cellular phone 320 reads the QR code with the QR code reader 322 if the end user indicates the intention to authorize the communication relay and presses the QR code reader activation button 321. The QR code reader 322 is, for example, a camera. Therefore, the QR code is acquired from the display device 314 to the QR code reader 322.

  Since this QR code is an encoded URI, by decoding the QR code, a URI in which the token upload destination and the token ID are integrated is obtained as the authorization information. The cellular phone 320 accesses this URI using the wireless IP communication interface 323.

  The communication relay device 300 receives access through the wired IP communication interface 303. Since the URI used for access is the authorization information itself, it is verified by the authorization information verification module 304. This verification is performed by determining whether the token ID of the transmitted authorization information matches the received authorization information. If they match, the authorization information verification module 304 authorizes the relay.

  As a result, the desktop computer 310 and the mobile phone 320 can communicate with each other via the communication relay apparatus 300 through the wired IP communication interface 311 and the wireless IP communication interface 323, respectively. This communication relay itself is realized by a device such as an IP router, and is a technique known to those skilled in the art, and thus detailed description thereof is omitted.

  As another embodiment, like the communication relay authorization system 2000 shown in FIG. 3, the authorization operation may be omitted in the second and subsequent communication relays. In that case, after the first authorization is performed via the QR code, the authorization operation by reading the QR code can be omitted in the second and subsequent communication relays. Therefore, even when the mobile phone 320 is taken out outdoors, communication can be relayed according to a relay request from the desktop computer 310.

  As yet another embodiment, infrared communication or NFC (Near Field Communication) communication can be used for passing authorization information between the desktop computer 310 and the mobile phone 320. Since these techniques are known to those skilled in the art, further explanation is omitted.

<Other embodiments of the invention>
The present invention can be applied to uses such as a simple relay authorization method in communication relay between computer devices for consumers.

  In the above-described first embodiment of the present invention, the end user's operation is performed on the terminal device B120, but the present invention is not limited to this. For example, the end user may operate the terminal device A110 to deliver the authorization information to the terminal device B120.

  Moreover, in Embodiment 1 of this invention mentioned above, an end user's operation is not necessarily required. If the terminal device A110 and the terminal device B120 are connected in advance and the delivery of the authorization information can be realized, the communication relay device 100 can authorize the relay of communication. Thereafter, the connection is released, and when the terminal device B120 is taken out to the outside, for example, the access to the terminal device A110 can be realized from the outside via the communication relay device 100.

  Embodiments 1 to 3 of the present invention can be paraphrased as follows. That is, a communication system including a server that waits for communication, a client that starts communication, and a relay device that relays communication between the server and the client, wherein the server and the client each have first communication means to the relay device. Prepare. This first communication means has a bidirectional communication function. Furthermore, a second communication means for directly passing the relay authorization token from the client to the server is provided. This second communication means has at least a one-way communication function from the client to the server. The relay device includes a communication unit that communicates with each of the server and the client, and further includes a relay unit that relays communication from the client to the server. When the client transmits a communication relay request to the relay device using the first communication means in order to start communication with the server, the relay device returns a relay authorization token to the client. The client passes the returned relay authorization token to the server using the second communication means. The server transmits the delivered relay authorization token to the relay device using the first communication means. When the relay device receives the relay authorization token from the server, the relay device authorizes the communication between the client and the server, and the communication using the first communication means from the client after that time is passed to the first communication means of the server. Relay. The server receives communication from the client using the first communication means.

Or Embodiment 1 thru | or 3 of this invention can also be paraphrased as follows.
(Appendix A)
An authorization token generating means for generating an authorization token including a token upload destination indicating a token ID and a communication relay device;
Authorization token transmission means for transmitting the authorization token to a certain terminal device;
An authorization token receiving means for receiving an authorization token from another terminal device;
A communication relay device comprising an authorization unit that authorizes communication between the respective terminal devices when the transmitted authorization token matches the received authorization token.

(Appendix B)
An authorization token download means for receiving an authorization token from the communication relay device of appendix 1,
Authorization token collection request presentation UI means for prompting the end user to collect the authorization token,
A terminal device A including an authorization token delivery means for delivering an authorization token to another terminal;
Authorization token collection UI means for accepting authorization token collection instructions from end users,
An authorization token collection means for collecting an authorization token from another terminal;
A terminal device B comprising an authorization token uploading means for transmitting an authorization token to the communication relay device of appendix 1,
A communication relay authorization system comprising the communication relay device of Appendix A.

(Appendix C)
A downloaded token storage means for storing the downloaded authorization token;
If an authorization token is stored in the downloaded token storage means, a relay request including the authorization token is transmitted to the communication relay device, and if not stored, a relay request not including the authorization token is relayed to the communication relay device. A terminal device A of Appendix B, further comprising relay request transmitting means for transmitting to the device;
A relay request receiving means for receiving the relay request;
The communication relay device according to appendix 2 of the previous term, further comprising an authorized token storage means for storing an authorized authorization token,
If the relay request includes an authorization token and the authorization token matches the authorization token stored in the authorized token storage unit, the communication relay authorization system according to Appendix B that authorizes relaying of communication.

  When the communication relay authorization process according to the present invention is implemented as a control program that causes a computer to execute, the program is stored using various types of non-transitory computer readable media. Can be supplied to the computer. Non-transitory computer readable media include various types of tangible storage media. Examples of non-transitory computer-readable media include magnetic recording media (for example, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (for example, magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R / W and semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (random access memory)) are included. Further, the program may be supplied to the computer using various types of temporary computer readable media. Examples of transitory computer readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path. Even when each of the authorization information receiving process and the authorization information obtaining process according to the present invention is realized as a control program to be executed by a computer, the program uses various types of non-transitory computer-readable media. It can be stored and supplied to a computer in the same manner.

  Furthermore, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the gist of the present invention described above.

  A part or all of the above embodiments can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1) A communication relay device that relays communication between terminal devices;
A first terminal device;
A second terminal device capable of acquiring data from the first terminal device,
The communication relay device is:
Generating authorization information including credential information used to authorize relay of communication between the terminal devices and destination information of the communication relay device;
Transmitting the generated authorization information to the first terminal device;
The second terminal device is:
Obtaining the authorization information received from the communication relay device by the first terminal device from the first terminal device;
Based on the destination information included in the acquired authorization information, the authorization information is transmitted to the communication relay device,
The communication relay device is:
Communication between the first terminal device and the second terminal device when the authorization information transmitted to the first terminal device matches the authorization information received from the second terminal device A communication relay authorization system characterized by authorizing the relay of.
(Supplementary note 2) The communication relay authorization system according to supplementary note 1, wherein the second terminal device acquires the authorization information from the first terminal device in response to an acquisition instruction from a user.
(Supplementary note 3) The supplementary note 1 or 2, wherein the first terminal device delivers the authorization information to the second terminal device in response to an acquisition request from the second terminal device. Communication relay authorization system.
(Supplementary Note 4) The first terminal device is:
Notifying the user that it can be acquired,
The second terminal device is:
The communication relay authorization system according to appendix 3, wherein the authorization information is obtained from the first terminal device in response to an acquisition instruction from the user based on the notification.
(Supplementary Note 5) The first terminal device is
Relay request transmission means for transmitting a relay request for communication with the second terminal device to the communication relay device;
Receiving information storage means for storing the authorization information received from the communication relay device,
The relay request transmission means includes
When the authorization information is stored in the reception information storage means, the authorization information is read out and included in the relay request and transmitted to the communication relay device,
The communication relay device is:
Further comprising authorized information storage means for storing the authorized information for authorization,
When the authorization information included in the relay request received from the first terminal device matches the authorization information stored in the authorized information storage means, the first terminal device and the second terminal device The communication relay authorization system according to any one of appendices 1 to 4, wherein the communication relay is performed.
(Appendix 6) The communication relay device
6. The communication relay according to appendix 5, wherein the authorization information is generated when the authorization information included in the received relay request does not match the authorization information stored in the authorized information storage unit. Authorization system.
(Appendix 7) Authorization information generating means for generating authorization information including credential information used for authorizing relay of communication between terminal devices and own destination information;
Authorization information transmitting means for transmitting the generated authorization information to the first terminal device;
An authorization information receiving means for receiving the authorization information acquired by the second terminal device from the first terminal device and transmitted based on the destination information;
Communication between the first terminal device and the second terminal device when the authorization information transmitted to the first terminal device matches the authorization information received from the second terminal device Authorization means to authorize the relay of
A communication relay device comprising:
(Supplementary Note 8) The communication relay device
Authorized information storage means for storing the authorization information authorized by the authorization means;
Receiving a relay request for communication with the second terminal device from the first terminal device;
When the authorization information included in the received relay request matches the authorization information stored in the authorized information storage unit, the first terminal device and the second terminal device Relay request receiving means for relaying communication with
The communication relay device according to appendix 7, further comprising:
(Supplementary note 9) The authorization information generating means generates the authorization information when the authorization information included in the received relay request does not match the authorization information stored in the authorized information storage means. The communication relay device according to appendix 8, characterized by:
(Supplementary Note 10) A communication relay device that relays communication between a first terminal device and a second terminal device,
Generating authorization information including credential information used to authorize relay of communication between terminal devices and destination information of the communication relay device;
Transmitting the generated authorization information to the first terminal device;
The second terminal device receives the authorization information acquired from the first terminal device and transmitted based on the destination information,
Communication between the first terminal device and the second terminal device when the authorization information transmitted to the first terminal device matches the authorization information received from the second terminal device A communication relay authorization method characterized by authorizing the relay of a communication.
(Supplementary Note 11) In the second terminal device,
The communication relay authorization method according to appendix 10, wherein the authorization information is obtained from the first terminal device in response to an acquisition instruction from a user.
(Supplementary note 12) The supplementary note 10 or 11, wherein the first terminal device delivers the authorization information to the second terminal device in response to an acquisition request from the second terminal device. Communication relay authorization method.
(Supplementary note 13) The first terminal device notifies the user that the authorization information can be acquired,
The second terminal device is:
13. The communication relay authorization method according to appendix 12, wherein the authorization information is obtained from the first terminal device in response to an acquisition instruction from the user based on the notification.
(Supplementary Note 14) The first terminal device stores the authorization information received from the communication relay device in a reception information storage unit,
When transmitting a relay request for communication with the second terminal device to the communication relay device, the authorization information is read and included in the relay request and transmitted to the communication relay device.
The communication relay device is:
Storing the authorized information for authorization in the authorized information storage means;
When the authorization information included in the relay request received from the first terminal device matches the authorization information stored in the authorized information storage unit, the first terminal device, the second terminal device, 14. The communication relay authorization method according to any one of appendices 10 to 13, wherein the communication relay is performed.
(Supplementary Note 15) The communication relay device
15. The communication relay according to appendix 14, wherein the authorization information is generated when the authorization information included in the received relay request does not match the authorization information stored in the authorized information storage unit. Authorization method.
(Supplementary Note 16) A control program for a communication relay device that relays communication between a first terminal device and a second terminal device,
Generation processing for generating authorization information including credential information used for authorizing relay of communication between the terminal devices and its destination information;
A transmission process for transmitting the generated authorization information to the first terminal device;
A receiving process in which the second terminal device receives the authorization information acquired from the first terminal device and transmitted based on the destination information;
Communication between the first terminal device and the second terminal device when the authorization information transmitted to the first terminal device matches the authorization information received from the second terminal device Authorization process to authorize the relay of
A control program that causes a computer to execute.
(Additional remark 17) The memory | storage process which memorize | stores the said information for authorization approved by the said authorization process in the authorized information storage part,
Receiving a communication relay request with the second terminal device from the first terminal device;
A determination process for determining whether or not the authorization information matches the authorization information stored in the authorized information storage unit when the authorization information is included in the received relay request;
A relay process for relaying communication between the first terminal apparatus and the second terminal apparatus when it is determined by the determination process that they match;
The control program according to appendix 16, wherein the computer is further executed.
(Supplementary Note 18) The generation process generates the authorization information when the authorization information included in the received relay request does not match the authorization information stored in the authorized information storage unit. The control program according to appendix 17.
(Supplementary note 19) Authorization information including credential information used for authorizing the relay in a communication relay device that relays communication between terminal devices and destination information of the communication relay device is used as the other terminal device. Acquisition means for acquiring from,
Based on the destination information included in the acquired authorization information, transmission means for transmitting the authorization information to the communication relay device;
A terminal device comprising:
(Supplementary note 20) The terminal device according to supplementary note 19, wherein the authorization information is obtained from the other terminal device in response to an acquisition instruction from a user.
(Supplementary Note 21) When the other terminal device is set to be able to acquire the authorization information received from the communication relay device, the user is notified based on the notification that the authorization information can be acquired. The terminal device according to appendix 20, wherein the authorization information is acquired from the other terminal device in response to an acquisition instruction.
(Supplementary note 22) Authorization information including credential information used for authorizing the relay in a communication relay device that relays communication between terminal devices and destination information of the communication relay device is used as the other terminal device. The acquisition process acquired from
Based on the destination information included in the acquired authorization information, a transmission process for transmitting the authorization information to the communication relay device;
A control program that causes a computer to execute.
(Additional remark 23) The said acquisition process acquires the said information for authorization from said other terminal device according to the acquisition instruction from a user. The control program of Additional remark 22 characterized by the above-mentioned.
(Additional remark 24) The said acquisition process is a notification to the effect that the said information for authorization with respect to the said user is acquirable when the said other terminal device sets the information for authorization received from the said communication relay apparatus so that acquisition is possible 24. The control program according to appendix 23, wherein the authorization information is acquired from the other terminal device in response to an acquisition instruction from the user based thereon.
(Supplementary Note 25) Receiving means for receiving authorization information including credential information used for authorizing the relay in a communication relay device that relays communication between terminal devices, and destination information of the communication relay device;
When the authorization information is received from the communication relay device, setting means for setting the authorization information to be obtainable from another terminal device;
A terminal device comprising:
(Supplementary note 26) The terminal device according to supplementary note 25, further comprising a transmission unit that transmits the authorization information to the other terminal device in response to an acquisition request from the other terminal device.
(Additional remark 27) When the said information for authorization is set so that acquisition is possible, it is further provided with the notification means to notify that the said information for authorization can be acquired with respect to the user of said other terminal device. The terminal device according to Supplementary Note 25 or 26.
(Supplementary Note 28) Relay request transmitting means for transmitting a relay request for communication with the other terminal device to the communication relay device;
Received information storage means for storing the authorization information received from the communication relay device;
28. The terminal device according to any one of appendices 25 to 27, further comprising:
(Supplementary Note 29) A reception process of receiving authorization information including credential information used for authorizing the relay in a communication relay device that relays communication between terminal devices, and destination information of the communication relay device;
When the authorization information is received from the communication relay device, a setting process for setting the authorization information to be obtainable from another terminal device;
A control program that causes a computer to execute.
(Supplementary note 30) The control program according to supplementary note 29, further causing the computer to execute transmission means for transmitting the authorization information to the other terminal device in response to an acquisition request from the other terminal device. .
(Supplementary Note 31) When the received authorization information is set to be obtainable, a notification process for notifying the user of the other terminal device that the authorization information is obtainable is further performed on the computer. The control program according to appendix 29 or 30, wherein the control program is executed.
(Supplementary Note 32) Relay request transmission processing for transmitting a relay request for communication with the other terminal device to the communication relay device;
A storage process for storing the authorization information received from the communication relay device in a storage unit;
32. The control program according to any one of appendices 29 to 31, wherein the computer is further executed.

1000 Communication relay authorization system 100 Communication relay device 101 Authorization information generation means 102 Authorization information transmission means 103 Authorization information reception means 104 Authorization means 110 Terminal apparatus A
111 Authorization information download means 112 Authorization information transfer request presentation UI means 113 Authorization information delivery means 120 Terminal device B
121 Authorization Information Retrieval UI Means 122 Authorization Information Retrieval Means 123 Authorization Information Upload Means 2000 Communication Relay Authorization System 200 Communication Relay Device 201 Authorization Information Generation Means 202 Authorization Information Transmission Means 203 Authorization Information Receiving Means 204 Authorization Means 205 Authorized token storage means 206 Relay request accepting means 210 Terminal device A
211 Authorization information download means 212 Authorization information transfer request presentation UI means 213 Authorization information delivery means 214 Downloaded token storage means 215 Relay request transmission means 220 Terminal device B
221 Authorization information collection UI means 222 Authorization information collection means 223 Authorization information upload means 231 CPU
232 RAM
233 ROM
234 Communication IF
235 Hard disk 2351 Control program 241 CPU
242 RAM
243 ROM
244a Communication IF
244b Communication IF
245 Hard disk 2451 Control program 246 Display device 247 Input device 251 CPU
252 RAM
253 ROM
254a Communication IF
254b Communication IF
255 Hard disk 2551 Control program 256 Display device 257 Input device 3000 Communication relay authorization system 300 Communication relay device 301 Authorization information generation module 302 Wired IP communication interface 303 Wired IP communication interface 304 Authorization information verification module 310 Desktop computer 311 Wired IP communication interface 312 QR Code Reading Promotion Message Display Module 313 QR Code Display Module 314 Display Device 320 Mobile Phone 321 QR Code Reader Activation Button 322 QR Code Reader 323 Wireless IP Communication Interface 331 The Internet
332 The Internet
333 mobile phone network

Claims (25)

A communication relay device that relays communication between terminal devices;
A first terminal device;
A second terminal device capable of acquiring data from the first terminal device,
The communication relay device is:
Generating authorization information including credential information used to authorize relay of communication between the terminal devices and destination information of the communication relay device;
Transmitting the generated authorization information to the first terminal device;
The second terminal device is:
Obtaining the authorization information received from the communication relay device by the first terminal device from the first terminal device;
Based on the destination information included in the acquired authorization information, the authorization information is transmitted to the communication relay device,
The communication relay device is:
Communication between the first terminal device and the second terminal device when the authorization information transmitted to the first terminal device matches the authorization information received from the second terminal device A communication relay authorization system characterized by authorizing the relay of.   The communication relay authorization system according to claim 1, wherein the second terminal device acquires the authorization information from the first terminal device in response to an acquisition instruction from a user. The communication relay according to claim 1 or 2, wherein the first terminal device delivers the authorization information to the second terminal device in response to an acquisition request from the second terminal device. Authorization system. The first terminal device is:
Notifying the user that it can be acquired,
The second terminal device is:
The communication relay authorization system according to claim 3, wherein the authorization information is obtained from the first terminal device in response to an acquisition instruction from the user based on the notification. The first terminal device is:
Relay request transmission means for transmitting a relay request for communication with the second terminal device to the communication relay device;
Receiving information storage means for storing the authorization information received from the communication relay device,
The relay request transmission means includes
When the authorization information is stored in the reception information storage means, the authorization information is read out and included in the relay request and transmitted to the communication relay device,
The communication relay device is:
Further comprising authorized information storage means for storing the authorized information for authorization,
When the authorization information included in the relay request received from the first terminal device matches the authorization information stored in the authorized information storage means, the first terminal device and the second terminal device The communication relay authorization system according to any one of claims 1 to 4, wherein the communication relay is performed. The communication relay device is:
6. The communication according to claim 5, wherein the authorization information is generated when the authorization information included in the received relay request does not match the authorization information stored in the authorized information storage unit. Relay authorization system. Authorization information generating means for generating authorization information including credential information used for authorizing relay of communication between terminal devices and own destination information;
Authorization information transmitting means for transmitting the generated authorization information to the first terminal device;
An authorization information receiving means for receiving the authorization information acquired by the second terminal device from the first terminal device and transmitted based on the destination information;
Communication between the first terminal device and the second terminal device when the authorization information transmitted to the first terminal device matches the authorization information received from the second terminal device Authorization means to authorize the relay of
A communication relay device comprising: The communication relay device is:
Authorized information storage means for storing the authorization information authorized by the authorization means;
Receiving a relay request for communication with the second terminal device from the first terminal device;
When the authorization information included in the received relay request matches the authorization information stored in the authorized information storage unit, the first terminal device and the second terminal device Relay request receiving means for relaying communication with
The communication relay device according to claim 7, further comprising: The authorization information generating means generates the authorization information when the authorization information included in the received relay request does not match the authorization information stored in the authorized information storage means. The communication relay device according to claim 8. A communication relay device that relays communication between a first terminal device and a second terminal device,
Generating authorization information including credential information used to authorize relay of communication between terminal devices and destination information of the communication relay device;
Transmitting the generated authorization information to the first terminal device;
The second terminal device receives the authorization information acquired from the first terminal device and transmitted based on the destination information,
Communication between the first terminal device and the second terminal device when the authorization information transmitted to the first terminal device matches the authorization information received from the second terminal device A communication relay authorization method characterized by authorizing the relay of a communication. In the second terminal device,
The communication relay authorization method according to claim 10, wherein the authorization information is obtained from the first terminal device in response to an acquisition instruction from a user.   The communication relay according to claim 10 or 11, wherein the first terminal device delivers the authorization information to the second terminal device in response to an acquisition request from the second terminal device. Authorization method. The first terminal device notifies the user that the authorization information can be acquired,
The second terminal device is:
13. The communication relay authorization method according to claim 12, wherein the authorization information is obtained from the first terminal device in response to an acquisition instruction from the user based on the notification. The first terminal device stores the authorization information received from the communication relay device in a reception information storage unit,
When transmitting a relay request for communication with the second terminal device to the communication relay device, the authorization information is read and included in the relay request and transmitted to the communication relay device.
The communication relay device is:
Storing the authorized information for authorization in the authorized information storage means;
When the authorization information included in the relay request received from the first terminal device matches the authorization information stored in the authorized information storage unit, the first terminal device, the second terminal device, The communication relay authorization method according to claim 10, wherein the communication relay is performed. The communication relay device is:
The communication according to claim 14, wherein the authorization information is generated when the authorization information included in the received relay request does not match the authorization information stored in the authorized information storage unit. Relay authorization method. A communication relay device control program for relaying communication between a first terminal device and a second terminal device,
Generation processing for generating authorization information including credential information used for authorizing relay of communication between the terminal devices and its destination information;
A transmission process for transmitting the generated authorization information to the first terminal device;
A receiving process in which the second terminal device receives the authorization information acquired from the first terminal device and transmitted based on the destination information;
Communication between the first terminal device and the second terminal device when the authorization information transmitted to the first terminal device matches the authorization information received from the second terminal device Authorization process to authorize the relay of
A control program that causes a computer to execute. Obtaining authorization information including the credential information used to authorize the relay in the communication relay device that relays communication between terminal devices and the destination information of the communication relay device from the other terminal device Means,
Based on the destination information included in the acquired authorization information, transmission means for transmitting the authorization information to the communication relay device;
A terminal device comprising:   The terminal device according to claim 17, wherein the authorization information is acquired from the other terminal device in response to an acquisition instruction from a user.   In response to an acquisition instruction from the user based on a notification that the authorization information is acquirable to the user when the other terminal device is set to be acquirable from the communication relay device. The terminal device according to claim 18, wherein the authorization information is acquired from the other terminal device. Obtaining authorization information including the credential information used to authorize the relay in the communication relay device that relays communication between terminal devices and the destination information of the communication relay device from the other terminal device Processing,
Based on the destination information included in the acquired authorization information, a transmission process for transmitting the authorization information to the communication relay device;
A control program that causes a computer to execute. A receiving means for receiving authorization information including credential information used to authorize the relay in a communication relay device that relays communication between terminal devices, and destination information of the communication relay device;
When the authorization information is received from the communication relay device, setting means for setting the authorization information to be obtainable from another terminal device;
A terminal device comprising:   The terminal device according to claim 21, further comprising a transmission unit that transmits the authorization information to the other terminal device in response to an acquisition request from the other terminal device.   The information processing apparatus further comprises notification means for notifying that the authorization information can be obtained to a user of the other terminal device when the received authorization information is set to be obtainable. The terminal device according to 21 or 22. Relay request transmission means for transmitting a relay request for communication with the other terminal device to the communication relay device;
Received information storage means for storing the authorization information received from the communication relay device;
The terminal device according to any one of claims 21 to 23, further comprising: A receiving process for receiving authorization information including credential information used for authorizing the relay in a communication relay device that relays communication between terminal devices, and destination information of the communication relay device;
When the authorization information is received from the communication relay device, a setting process for setting the authorization information to be obtainable from another terminal device;
A control program that causes a computer to execute.

Images