JP7006765B2 - Communication systems and programs - Google Patents

Description

The present invention relates to communication systems and programs.

A communication system that controls data in a closed network to be viewed from a communication terminal located in an open network has been known (see, for example, Patent Document 1).
[Prior Art Document]
[Patent Document]
[Patent Document 1] Patent No. 4551218

It has been desired to improve the convenience when using the data in the closed network by a plurality of communication terminals.

According to the first aspect of the present invention, each of the first communication terminal and the second communication terminal is authenticated with the same user ID, and both the first communication terminal and the second communication terminal log in to the information providing service. Log in to the information providing service, the data receiving unit that receives the data copied on the first communication terminal from the terminal authentication unit that maintains the status, and the first communication terminal that is logged in to the information providing service. A communication system including a paste request receiving unit for receiving a paste request and a data transmitting unit for transmitting data to the second communication terminal in response to the paste request is provided from the second communication terminal.

The communication system is the same as the second communication terminal when the data storage unit for storing the data received by the data receiving unit and the paste request receiving unit receive the paste request from the second communication terminal. It may further be provided with a data determination unit that determines whether or not the data received from the first communication terminal that has been authenticated by the user ID of the above and logged in to the information providing service is stored in the data storage unit. When it is determined that the data is stored in the data storage unit, the data transmission unit may transmit the data to the second communication terminal. In the communication system, the data storage unit may delete the data according to the lapse of a predetermined time after storing the data received by the data receiving unit. In the communication system, the history storage unit that stores the history of the data received by the data receiving unit and the copy operation performed in the first communication terminal for a predetermined period, and the paste request receiving unit perform the second communication. When the paste request is received from the terminal, the history transmission unit that transmits the history stored in the history storage unit to the second communication terminal and the history transmission unit that transmits the history from the second communication terminal. A designated receiving unit that receives the designation of data for the history may be further provided, and the data transmitting unit may receive the designated data in response to the reception of the data designation for the history by the designated receiving unit. It may be transmitted to the second communication terminal.

The communication system may be located in a second network where access from the first network is restricted, and may include an information providing device having the data receiving unit, the paste request receiving unit, and the data transmitting unit, and the data may be provided. The receiving unit may receive the data from the first communication terminal located in the first network via the relay device located in the first network, and the paste request receiving unit may receive the data from the relay device. The paste request may be received from the second communication terminal located in the first network, and the data transmission unit transmits the data to the second communication terminal via the relay device. You can do it. The information providing device may further include a paste request confirmation unit for confirming whether or not the relay device has received the paste request by intermittently inquiring to the relay device, and the paste request reception device may be provided. When it is confirmed by the paste request confirmation unit that the relay device has received the paste request, the unit may receive the paste request from the relay device.

According to the second aspect of the present invention, each of the first communication terminal and the second communication terminal is authenticated with the same user ID, and both the first communication terminal and the second communication terminal log in to the information providing service. A copy indicating that a copy operation has been performed on the data in the second network between the terminal authentication unit that maintains the status and the first communication terminal that is located in the first network and logged in to the information providing service. Receives paste requests from a copy notification information receiving unit that receives notification information, a link information storage unit that stores link information for data, and a second communication terminal located in the first network and logged in to the information providing service. A communication system including a paste request receiving unit for performing a paste request and a link information transmitting unit for transmitting link information to a second communication terminal in response to a paste request is provided.

In the communication system, when the paste request receiving unit receives the paste request, whether or not the link information for the data to which the copy operation indicated by the copy notification information is performed is stored in the link information storage unit. The link information determination unit may further include a link information determination unit, and when it is determined that the link information is stored in the link information storage unit, the link information transmission unit uses the link information as the second communication terminal. May be sent to. The communication system is located in the second network and includes an information providing device having the terminal authentication unit, the copy notification information receiving unit, the link information storage unit, the paste request receiving unit, and the link information transmitting unit. The second network may be restricted from accessing the first network, and the copy notification information receiving unit may be connected to the copy notification information receiving unit from the first communication terminal via a relay device located in the first network. The copy notification information may be received, the paste request receiving unit may receive the paste request from the second communication terminal via the relay device, and the link information transmitting unit may receive the paste request via the relay device. Then, the link information may be transmitted to the second communication terminal. The information providing device may further include a paste request confirmation unit for confirming whether or not the relay device has received the paste request by intermittently inquiring to the relay device, and the paste request reception device may be provided. When it is confirmed by the paste request confirmation unit that the relay device has received the paste request, the unit may receive the paste request from the relay device.

According to the third aspect of the present invention, each of the first communication terminal and the second communication terminal is authenticated with the same user ID, and both the first communication terminal and the second communication terminal log in to the information providing service. Data stored in the first data storage device located in the second network in the terminal authentication unit that maintains the presence state and the first communication terminal located in the first network and logged in to the information providing service. From the copy notification information receiving unit that receives the copy notification information indicating that the copy operation has been performed to, and the second communication terminal located in the first network and logged in to the information providing service, in the second network. A paste request receiving unit that receives a paste request for the second data storage device located in the second data storage device, and a storage control unit that stores data in the second data storage device in response to the paste request receiving unit receiving the paste request. A communication system is provided.

The storage control unit responds to the data acquisition unit that acquires the data for which the copy operation indicated by the copy notification information is performed from the first data storage device and the paste request receiving unit that receives the paste request. It may have a data transmission unit that transmits the data acquired by the data acquisition unit to the second data storage device.

According to the fourth aspect of the present invention, a program for making a computer function as the communication system is provided.

The outline of the above invention does not list all the necessary features of the present invention. A subcombination of these feature groups can also be an invention.

An example of the communication environment of the information providing device 100 is schematically shown. An example of the processing flow by the information providing apparatus 100 is schematically shown. An example of the functional configuration of the information providing device 100 is schematically shown. An example of the processing flow by the information providing apparatus 100 is schematically shown. An example of the functional configuration of the token authentication unit 110 is schematically shown. An example of the functional configuration of the management device 300 is schematically shown. An example of the processing flow by the information providing apparatus 100 is schematically shown. An example of the functional configuration of the provider information processing unit 150 is shown schematically. An example of the provider registration information table 500 is shown schematically. An example of the processing flow by the information providing apparatus 100 is schematically shown. An example of the processing flow by the information providing apparatus 100 is schematically shown. An example of the processing flow by the information providing apparatus 100 is schematically shown. An example of the functional configuration of the copy data processing unit 170 is schematically shown. An example of the processing flow by the relay device 200 is schematically shown. An example of the functional configuration of the relay device 200 is schematically shown. An example of the functional configuration of the communication terminal 400 is shown schematically. A display example by the communication terminal 400 is shown schematically. A display example by the communication terminal 400 is shown schematically.

Hereinafter, the present invention will be described through embodiments of the invention, but the following embodiments do not limit the invention to which the claims are made. Also, not all combinations of features described in the embodiments are essential to the means of solving the invention.

FIG. 1 schematically shows an example of the communication environment of the information providing device 100. In the present embodiment, the information providing device 100 is connected to a network 10 which is a closed network. The information providing device 100 supplies an information providing service 101 that provides information in a closed network to a communication terminal 400 connected to a network 50 that is an open network. The information providing device 100 may be an example of a communication system.

The network 10 is, for example, an in-house network in which access from an open network is restricted. The network 50 includes, for example, the Internet and mobile phone communication networks. The communication terminal 400 is, for example, a mobile phone such as a smartphone, a tablet terminal, a PC (Personal Computer), or the like. The network 50 may be an example of the first network. The network 10 may be an example of the second network.

In the present embodiment, the file server 12, the mail server 14, and the web server 16 are connected to the network 10. Note that these are examples, and any application server may be connected to the network 10. For example, a file server 12, a mail server 14, a web server 16, a groupware server, a web database, and the like may be connected to the network 10. The electronic file managed by the file server 12, the mail data managed by the mail server 14, and the Web data managed by the web server 16 may be an example of the information provided by the information providing service 101. The file server 12, the mail server 14, and the web server 16 may be an example of a data storage device.

In this embodiment, the network 10 is connected to the network 50 via the router 20. The router 20 passes the connection request from the network 10 to the network 50, but does not pass the connection request from the network 50 to the network 10.

The communication terminal 400 located in the network 50 registered in the information providing service 101 establishes a communication connection with the information providing device 100 via the relay device 200 connected to the network 50. The information providing device 100 provides the data managed by the file server 12, the mail server 14, and the web server 16 to the communication terminal 400 for which the communication connection has been established, via the relay device 200. The relay device 200 and the information providing device 100 establish a communication connection between the communication terminal 400 and the file server 12, the mail server 14, and the web server 16, and the communication terminal 400, the file server 12, and the mail server are established. 14 and the web server 16 may execute direct communication.

The information providing service 101 supplied by the information providing device 100 may provide the information in the network 50 to the communication terminal 400. For example, after the information providing device 100 and the communication terminal 400 establish a communication connection via the relay device 200, the information providing device 100 provides the communication terminal 400 with data provided by a service located in the network 50. , Provided via the relay device 200. The cloud service 52 and the cloud service 54 may be an example of a service located in the network 50. The cloud service 52 and the cloud service 54 may be SaaS (Software as a Service), PaaS (Platform as a Service), IaaS (Infrastructure as a Service), or the like. The information providing device 100 and the relay device 200 establish a communication connection between the communication terminal 400 and the cloud service 52 and the cloud service 54, and the communication terminal 400 and the cloud service 52 and the cloud service 54 directly communicate with each other. You may do it.

The information providing device 100 according to the present embodiment may execute the token authentication function. The token authentication function may be a process of authenticating the communication terminal 400 that is not logged in to the information providing service 101 via the communication terminal 400 that is logged in to the information providing service 101. Further, the token authentication function may be a process of authenticating the communication terminal 400 not registered in the information providing service 101 via the communication terminal 400 logged in to the information providing service 101. The information providing device 100 may execute the token authentication function in cooperation with the management device 300 located in the network 50.

The information providing device 100 according to the present embodiment may execute the active bookmark function. The active bookmark function is to register provider registration information including a plurality of provider information indicating the provider of each data displayed by each of the plurality of communication terminals 400 registered as a terminal group, and the provider concerned. When the registration information is specified, the function may be a function of causing the plurality of communication terminals 400 to display the data provided by the provider indicated by the plurality of provider information included in the provider registration information.

The information providing device 100 according to the present embodiment may execute the inter-device clipboard function. The inter-device clipboard function may be a function of pasting the data copied in the communication terminal 400 to the outside of the communication terminal 400. The inter-device clipboard function is, for example, a function of pasting data copied by one of a plurality of communication terminals 400 to another communication terminal 400 among a plurality of communication terminals 400.

FIG. 2 schematically shows an example of the processing flow by the information providing device 100. FIG. 2 shows a flow of processing in which the information providing device 100 establishes a communication connection with the communication terminal 400 registered in the information providing service 101.

In step (the step may be abbreviated as S) 202, the communication terminal 400 transmits a connection request to the relay device 200. The connection request may include a user ID that identifies a user who uses the communication terminal 400, a password, a terminal ID that identifies the communication terminal 400, and an information providing device ID that identifies the information providing device 100. In S204, the relay device 200 stores the received connection request.

In S206, the information providing device 100 confirms with the relay device 200 whether or not the connection request for the information providing device 100 is stored in the relay device 200. The information providing device 100 may intermittently execute confirmation of the connection request. For example, the information providing device 100 confirms the connection request every second.

In S208, the relay device 200 transmits the connection request received from the communication terminal 400 to the information providing device 100. When the relay device 200 receives the confirmation of the connection request from the information providing device 100, the relay device 200 determines whether or not the connection request including the information providing device ID of the information providing device 100 is stored. Then, when the relay device 200 stores the connection request including the information providing device ID of the information providing device 100, the relay device 200 transmits the connection request to the information providing device 100.

In S210, the information providing device 100 determines whether or not authentication is possible based on the connection request received in S208. The information providing device 100 determines whether or not authentication is possible by confirming whether or not the user ID, password, and terminal ID included in the connection request match the data registered in advance.

In S212, the information providing device 100 transmits a connection execution request for executing a communication connection with the communication terminal 400 to the relay device 200 in response to the determination in S210 that authentication is possible.

In S214, the relay device 200 establishes a communication connection between the information providing device 100 and the communication terminal 400. The relay device 200 uses, for example, the IP address and port number used for transmitting the connection execution request in S212 as the IP address and port number for identifying the logical line on the network 10 side from the communication terminal 400 in S202. A communication connection between the information providing device 100 and the communication terminal 400 is established by associating the IP address and the port number used at the time of transmitting the connection request.

FIG. 3 schematically shows an example of the functional configuration of the information providing device 100. The information providing device 100 includes an authentication information storage unit 102, a terminal authentication unit 103, a relay device confirmation unit 104, a communication connection establishment unit 105, a content management unit 106, a content provision unit 107, a token authentication unit 110, and a provider information processing unit 150. And a copy data processing unit 170 is provided. It is not always essential that the information providing device 100 includes all of these configurations.

The authentication information storage unit 102 stores authentication information used for authenticating the communication terminal 400 that has transmitted the connection request. The authentication information may include a combination of a user ID, a password and a terminal ID. The terminal ID may be any data as long as it can identify a plurality of communication terminals 400 registered in the information providing service 101. For example, the terminal ID is the MAC address of the communication terminal 400. Further, the terminal ID may be data assigned by the information providing device 100 when the communication terminal 400 is registered.

The terminal authentication unit 103 determines whether or not the communication terminal 400 can be authenticated using the authentication information stored in the authentication information storage unit 102, and authenticates the communication terminal 400 when it is determined that the authentication is possible. If it is determined that the authentication is not possible, the terminal authentication unit 103 does not authenticate the communication terminal 400. The terminal authentication unit 103 manages the authenticated communication terminal 400 as if it is logged in to the information providing service 101.

The terminal authentication unit 103 according to the present embodiment can authenticate each of the plurality of communication terminals 400 with the same user ID, and can maintain a state in which the plurality of communication terminals 400 are logged in to the information providing service 101. As a result, a user who owns a plurality of communication terminals 400 can log in to the information providing service 101 at the same time using one user ID in the plurality of communication terminals 400.

The relay device confirmation unit 104 intermittently confirms with the relay device 200 whether or not various requests transmitted from the communication terminal 400 to the information providing device 100 are stored in the relay device 200. For example, the relay device confirmation unit 104 periodically executes the confirmation. Further, the relay device confirmation unit 104 may execute the confirmation irregularly. The relay device confirmation unit 104 may be an example of the paste request confirmation unit.

The communication connection establishment unit 105 establishes a communication connection with the communication terminal 400. The communication connection establishment unit 105 may establish a communication connection with the communication terminal 400 by transmitting a connection execution request to the relay device 200.

The content management unit 106 manages the content in the network 10 provided to the communication terminal 400. The content in the network 10 may be data stored in the application server connected to the network 10. The electronic file data stored in the file server 12, the mail data stored in the mail server 14, and the Web data stored in the web server 16 may be an example of the contents in the network 10. For example, when the content to be stored in the file server 12 is specified by the communication terminal 400 whose communication connection is established by the communication connection establishment unit 105, the content management unit 106 receives and stores the content from the file server 12. do. Further, the content management unit 106 may manage the content in the network 50 provided to the communication terminal 400. The content in the network 50 may be data managed by a service connected to the network 50. For example, the content in the network 50 is data provided by the cloud service 52 and the cloud service 54.

The content providing unit 107 provides the content managed by the content management unit 106 to the communication terminal 400 for which the communication connection is established by the communication connection establishment unit 105. For example, when the content provided by the file server 12 is designated by the communication terminal 400, the content providing unit 107 transmits the content managed by the content management unit 106 to the communication terminal 400.

The token authentication unit 110 executes the token authentication function. The token authentication unit 110 is registered in the communication terminal 400 or the information providing service 101 that is not logged in to the information providing service 101 via the communication terminal 400 that is authenticated by the terminal authentication unit 103 and logged in to the information providing service 101. Authenticate the communication terminal 400 that has not been used.

The provider information processing unit 150 executes the active bookmark function. The provider information processing unit 150 executes the active bookmark function for a plurality of communication terminals 400 authenticated by at least one of the terminal authentication unit 103 and the token authentication unit 110.

The copy data processing unit 170 executes the inter-device clipboard function. The copy data processing unit 170 executes the inter-device clipboard function for a plurality of communication terminals 400 authenticated by at least one of the terminal authentication unit 103 and the token authentication unit 110.

FIG. 4 schematically shows an example of the processing flow by the information providing device 100. FIG. 4 schematically shows a flow of processing when the token authentication unit 110 of the information providing device 100 executes the token authentication function. Here, a state in which one user is using the communication terminal 402 and the communication terminal 404 and the communication terminal 402 is logged in to the information providing service 101 will be described as a start state. As shown in FIG. 4, the communication terminal 402, the communication terminal 404, and the information providing device 100 may communicate with each other via the relay device 200.

In S402, the communication terminal 402 transmits a key data request requesting a challenge key to the information providing device 100. The challenge key may be an example of the first key data.

In S404, the information providing device 100 generates key data in response to receiving the key data request. The information providing device 100 may generate a challenge key and a response key. The response key may be an example of the second key data.

In S406, the information providing device 100 generates authentication data for authenticating a communication terminal other than the communication terminal 402 and transmits the authentication data to the management device 300. The information providing device 100 may generate authentication data including the challenge key and the response key generated in S404 and the user ID used by the communication terminal 402 that transmitted the key data request at the time of authentication. The management device 300 stores the received authentication data.

In S408, the information providing device 100 transmits the challenge key generated in S404 to the communication terminal 402. The communication terminal 402 that has received the challenge key may notify the user that the challenge key has been received.

In S410, the communication terminal 404 accesses the management device 300. The user of the communication terminal 402 and the communication terminal 404 accesses the management device 300 by using the communication terminal 404 that he / she wants to log in to the information providing service 101 after the key data request is transmitted by the communication terminal 402.

In S412, the management device 300 transmits a key acquisition instruction to the communication terminal 404. The communication terminal 404 shifts to the state of waiting for the challenge key in response to receiving the key acquisition instruction. The communication terminal 404 may shift to a reception standby state in which the challenge key is received via short-range wireless communication. Short-range wireless communication includes, for example, wireless LAN (Local Area Network) such as Bluetooth (registered trademark), NFC (Near Field Communication), Wi-Fi (registered trademark) (Wireless Field), optical communication, and wireless communication. Voice communication, etc.

In S414, the communication terminal 402 transmits a challenge key to the communication terminal 404. For example, the communication terminal 402 first searches for a communication terminal that has transitioned to the reception standby state within the short-range wireless communication possible range. Then, when a communication terminal transitioning to the reception standby state is detected, a challenge key is transmitted to the communication terminal using the short-range wireless communication function.

Here, the example in which the communication terminal 404 receives the challenge key from the communication terminal 402 via short-range wireless communication has been described, but the present invention is not limited to this. The communication terminal 404 may accept the input of the challenge key from the user. For example, first, the communication terminal 402 displays the challenge key received in S408. Further, the communication terminal 404 displays an input screen for inputting a challenge key in response to receiving the key acquisition instruction in S412. Then, the user browses the challenge key displayed on the communication terminal 402 and inputs it to the communication terminal 404.

In S416, the communication terminal 404 transmits the challenge key acquired in S414 to the management device 300. In S418, the management device 300 determines whether or not authentication is possible based on the challenge key received in S416 and the authentication data received in S406. When the management device determines that the challenge key received in S416 and the challenge key included in the authentication data match, the management device may determine that authentication is possible. When the management device 300 determines that the authentication is not possible, the management device 300 may notify at least one of the communication terminal 402 and the communication terminal 404 that the authentication is not possible.

In S420, the management device 300 transmits the response key included in the authentication data received in S406 to the communication terminal 404. In S422, the communication terminal 404 transmits a response key to the communication terminal 402 via short-range wireless communication.

Here, the example in which the communication terminal 402 receives the response key from the communication terminal 404 via short-range wireless communication has been described, but the present invention is not limited to this. The communication terminal 402 may accept the input of the response key from the user. For example, first, the communication terminal 404 displays the response key received in S420. Further, the communication terminal 402 displays an input screen for inputting a response key after transmitting the challenge key in S414. Then, the user browses the response key displayed on the communication terminal 404 and inputs it to the communication terminal 402.

In S424, the communication terminal 402 transmits the response key acquired in S422 to the information providing device 100. In S426, the information providing device 100 determines whether or not authentication is possible based on the response key received in S424 and the response key generated in S404.

When the information providing device 100 determines that the response key received in S424 and the response key generated in S404 match, it may determine that authentication is possible. When the information providing device 100 determines that the authentication is rejected, at least one of the communication terminal 402 and the communication terminal 404 may be notified that the authentication is rejected.

In S428, the information providing device 100 generates an authenticated token and transmits it to the management device 300. The information providing device 100 may generate an authenticated token including the user ID used by the communication terminal 402 that has transmitted the key data request at the time of authentication and the address information of the relay device 200. The information providing device 100 may generate an authenticated token including an encrypted user ID encrypted using a pre-stored encryption key.

In S430, the management device 300 transmits the authenticated token received in S428 to the communication terminal 404. In S432, the communication terminal 404 refers to the address information of the relay device 200 included in the authenticated token received in S430, and transmits the encrypted user ID included in the authenticated token to the relay device 200.

In S434, the information providing device 100 determines whether or not authentication is possible based on the encrypted user ID received in S432 and the user ID included in the authentication data generated in S406. The information providing device 100 may determine that authentication is possible when it is determined that the user ID obtained by decrypting the encrypted user ID and the user ID included in the authentication data match. When the information providing device 100 determines that the authentication is rejected, at least one of the communication terminal 402 and the communication terminal 404 may be notified that the authentication is rejected.

In S436, the information providing device 100 transmits a connection execution request to the relay device 200. In S438, the relay device 200 establishes a communication connection between the information providing device 100 and the communication terminal 404. As a result, the communication terminal 404 is logged in to the information providing service 101 with the same user ID as the communication terminal 402. The terminal authentication unit 103 may authenticate the communication terminal 402 and the communication terminal 404 with the same user ID, and maintain a state in which both the communication terminal 402 and the communication terminal 404 are logged in to the information providing service 101.

The information providing device 100 may be an example of an authentication device. Further, the communication terminal 402 may be an example of the first communication terminal. Further, the communication terminal 404 may be an example of a second communication terminal.

FIG. 5 schematically shows an example of the functional configuration of the token authentication unit 110. The token authentication unit 110 includes a key data request reception unit 112, a key data generation unit 114, an authentication data generation unit 116, an encryption unit 118, an authentication data storage unit 120, a key data transmission unit 122, and an authentication data transmission unit 124. A key data receiving unit 126, a key authentication pass / fail determination unit 128, a token transmission unit 130, an ID reception unit 132, an authentication pass / fail determination unit 134, a communication connection establishment unit 136, and a terminal group registration unit 138 are provided. It is not essential that the token authentication unit 110 includes all of these configurations.

The key data request receiving unit 112 receives the key data request transmitted by the communication terminal 400. The key data request receiving unit 112 may receive the key data request via the relay device 200.

The key data generation unit 114 generates key data in response to the key data request receiving unit 112 receiving the key data request. The key data generation unit 114 may generate a challenge key and a response key.

The authentication data generation unit 116 generates authentication data for authenticating a communication terminal 400 other than the communication terminal 400 that has transmitted the key data request. The authentication data may include a challenge key and a response key generated by the key data generation unit 114, and a user ID used by the communication terminal 400 that transmitted the key data request at the time of authentication.

The encryption unit 118 encrypts the user ID used at the time of authentication by the communication terminal 400 that transmitted the key data request. The encryption unit 118 may encrypt the user ID by using the encryption key stored in advance. For example, the encryption unit 118 encrypts the user ID using the session key. The authentication data generation unit 116 may generate authentication data including a challenge key and a response key, and an encrypted user ID encrypted by the encryption unit 118. The authentication data storage unit 120 stores the authentication data generated by the authentication data generation unit 116.

The key data transmission unit 122 transmits the challenge key generated by the key data generation unit 114 to the communication terminal 400 that has transmitted the key data request. The key data transmission unit 122 may transmit the challenge key to the communication terminal 400 that has transmitted the key data request via the relay device 200. The key data transmission unit 122 may be an example of the first key data transmission unit. The authentication data transmission unit 124 transmits the authentication data generated by the authentication data generation unit 116 to the management device 300.

The key data receiving unit 126 receives a response key from the communication terminal 400 that has transmitted the key data request. The key data receiving unit 126 may be an example of the first key data receiving unit.

The key authentication possibility determination unit 128 determines whether authentication is possible based on the response key received by the key data receiving unit 126 and the response key generated by the key data generation unit 114. The key authentication possibility determination unit 128 determines that authentication is possible when it is determined that the response key received by the key data reception unit 126 and the response key generated by the key data generation unit 114 match. The key authentication possibility determination unit 128 may be an example of the first key authentication possibility determination unit.

The token transmitting unit 130 transmits the authenticated token to the management device 300 when the key authentication propriety determination unit 128 determines that the authentication is possible. The token transmission unit 130 may be an example of the first token transmission unit. The ID receiving unit 132 receives the encrypted user ID from the communication terminal 400 other than the communication terminal 400 that transmitted the key data request.

The authentication possibility determination unit 134 determines whether authentication is possible based on the encrypted user ID received by the ID receiving unit 132 and the user ID included in the authentication data generated by the authentication data generation unit 116. When the authentication possibility determination unit 134 determines that the encrypted user ID can be decrypted and the decrypted user ID matches the user ID included in the authentication data, the authentication possibility determination unit 134 determines that authentication is possible. The authentication possibility determination unit 134 determines whether or not the authentication is possible when the encrypted user ID cannot be decrypted or when it is determined that the decrypted user ID and the user ID included in the authentication data do not match. The token authentication possibility determination unit 134 may be an example of the ID authentication possibility determination unit.

The communication connection establishment unit 136 establishes a communication connection with the communication terminal 400 that has transmitted the encrypted user ID received by the ID receiving unit 132 when the authentication possibility determination unit 134 determines that the authentication is possible. The communication connection establishment unit 136 may establish a communication connection with the communication terminal 400 that has transmitted the encrypted user ID by transmitting the connection establishment request to the relay device 200.

The terminal group registration unit 138 registers the communication terminal 400 that has transmitted the key data request received by the key data request reception unit 112 and the communication terminal 400 for which the communication connection establishment unit 136 has established a communication connection in the same terminal group. ..

FIG. 6 schematically shows an example of the functional configuration of the management device 300. The management device 300 includes an authentication data receiving unit 302, an authentication data storage unit 304, a terminal request receiving unit 306, a key acquisition instruction transmitting unit 308, a key data receiving unit 310, a key authentication pass / fail determination unit 312, and a key data transmitting unit 314. , Token receiving unit 316 and ID transmitting unit 318. It is not essential that the management device 300 has all of these configurations.

The authentication data receiving unit 302 receives the authentication data transmitted by the authentication data transmitting unit 124. The authentication data storage unit 304 stores the authentication data received by the authentication data receiving unit 302.

The terminal request receiving unit 306 accepts access from the communication terminal 400. The access from the communication terminal 400 is, for example, an authentication request. Further, the access from the communication terminal 400 may be an acquisition request of the key input page. When the terminal request receiving unit 306 accepts access from the communication terminal 400, the key acquisition instruction transmitting unit 308 transmits a key acquisition instruction to the communication terminal 400.

The key data receiving unit 310 receives the challenge key from the communication terminal 400 that the terminal request receiving unit 306 has received access to. The key data receiving unit 310 may be an example of the second key data receiving unit.

The key authentication possibility determination unit 312 determines whether authentication is possible based on the challenge key received by the key data receiving unit 310 and the challenge key included in the authentication data stored in the authentication data storage unit 304. When the key authentication possibility determination unit 312 determines that the challenge key received by the key data receiving unit 310 and the challenge key included in the authentication data match, it may determine that authentication is possible. The key authentication possibility determination unit 312 may be an example of the second key authentication possibility determination unit.

When the key authentication possibility determination unit 312 determines that the key authentication is possible, the key data transmission unit 314 accesses the response key included in the authentication data stored in the authentication data storage unit 304 by the terminal request reception unit 306. Is transmitted to the communication terminal 400 that has received. The key data transmission unit 314 may be an example of the second key data transmission unit.

The token receiving unit 316 receives the authenticated token transmitted by the token transmitting unit 130. The ID transmission unit 318 transmits the authenticated token received by the token reception unit 316 to the communication terminal 400 that the terminal request reception unit 306 has received access to.

FIG. 7 schematically shows an example of the processing flow by the information providing device 100. FIG. 7 shows a processing flow when the information providing device 100 executes the active bookmark function. Here, it is active for the communication terminal 402, the communication terminal 404, and the communication terminal 406 that are authenticated by the same user ID and logged in to the information providing service 101 by at least one of the terminal authentication unit 103 and the token authentication unit 110. The case of executing the bookmark function will be described as an example. As shown in FIG. 7, the communication terminal 402, the communication terminal 404, and the communication terminal 406 may communicate with the information providing device 100 via the relay device 200.

In S702, the communication terminal 402 transmits a display request for the data stored in the file server 12 to the information providing device 100. In S704, the information providing device 100 transmits a data acquisition request requested from the communication terminal 402 to the file server 12. In S706, the file server 12 transmits data to the information providing device 100 in response to an acquisition request from the information providing device 100. In S708, the information providing device 100 converts the data received from the file server 12 into browsing data to be displayed on the communication terminal 402, and transmits the browsing data to the communication terminal 402.

In S710, the communication terminal 404 transmits a display request for data stored in the mail server 14 to the information providing device 100. In S712, the information providing device 100 transmits a data acquisition request requested from the communication terminal 404 to the mail server 14. In S714, the mail server 14 transmits data to the information providing device 100 in response to an acquisition request from the information providing device 100. In S716, the information providing device 100 converts the data received from the mail server 14 into browsing data to be displayed on the communication terminal 404, and transmits the browsing data to the communication terminal 404.

In S718, the communication terminal 406 transmits a display request for data stored in the web server 16 to the information providing device 100. In S720, the information providing device 100 transmits a data acquisition request requested from the communication terminal 406 to the web server 16. In S722, the web server 16 transmits data to the information providing device 100 in response to an acquisition request from the information providing device 100. In S724, the information providing device 100 converts the data received from the web server 16 into browsing data to be displayed on the communication terminal 406, and transmits the browsing data to the communication terminal 406.

In S726, the communication terminal 402 transmits a registration instruction for registering the provider registration information to the information providing device 100. The registration instruction may include the name of the provider registration information. The registration instruction may be an example of an instruction to generate provider registration information.

In S728, a plurality of provider information indicating the sources of data displayed by each of the communication terminal 402, the communication terminal 404, and the communication terminal 406 in response to the information providing device 100 receiving the registration instruction in S726. To get. In the example of FIG. 7, the information providing device 100 acquires the provider information indicating the file server 12, the provider information indicating the mail server 14, and the provider information indicating the web server 16. In S730, the information providing device 100 generates the provider registration information including the plurality of provider information acquired in S728.

In S732, the communication terminal 402 transmits the display instruction of the provider registration information for which the registration instruction was transmitted in S726 to the information providing device 100. The display instruction may include the name of the provider registration information.

In S734, the information providing device 100 refers to the provider registration information generated in S730 in response to the display instruction received in S732. The information providing device 100 acquires a plurality of provider information included in the provider registration information. In this example, the provider registration information includes the provider information indicating the file server 12, the provider information indicating the mail server 14, and the provider information indicating the web server 16.

In S736, the information providing device 100 transmits the provider information indicating the file server 12 acquired in S734 to the communication terminal 402. The communication terminal 402 transmits a display request requesting the data of the file server 12 to the information providing device 100 according to the received provider information.

In S738, the information providing device 100 transmits the provider information indicating the mail server 14 acquired in S734 to the communication terminal 404. The communication terminal 404 transmits a display request requesting the data of the mail server 14 to the information providing device 100 according to the received provider information.

In S740, the information providing device 100 transmits the provider information indicating the web server 16 acquired in S734 to the communication terminal 406. The communication terminal 406 transmits a display request requesting the data of the web server 16 to the information providing device 100 according to the received provider information.

By the above-mentioned processing, the working situation in the plurality of communication terminals 400 at a certain time point can be reproduced at an arbitrary timing thereafter. As a result, when a user who uses a plurality of communication terminals 400 continues the work, it is possible to reduce the trouble of reproducing the operation state.

FIG. 8 schematically shows an example of the functional configuration of the provider information processing unit 150. The provider information processing unit 150 includes a generation instruction receiving unit 152, a provider information acquisition unit 154, a registration information generation unit 156, a registration information storage unit 158, a designated information receiving unit 160, a provider information transmitting unit 162, and an inquiry output unit. It includes 164 and an inquiry response receiving unit 166. It is not always essential that the provider information processing unit 150 includes all of these configurations.

The generation instruction receiving unit 152 receives the generation instruction of the provider registration information from the communication terminal 400. The instruction to generate the provider registration information may include the name of the provider registration information. Further, the instruction for generating the provider registration information may include the designation of the terminal group for which the provider registration information is generated. The designation of the terminal group may include the terminal ID of the communication terminal 400 belonging to the terminal group.

The provider information acquisition unit 154 acquires the provider information in response to the generation instruction receiving unit 152 receiving the generation instruction of the provider registration information from the communication terminal 400. When the generation instruction includes the designation of the terminal group for which the provider registration information is to be generated, the provider information acquisition unit 154 issues the communication terminal 400 and the generation instruction indicated by the terminal ID included in the designation. The provider information indicating the provider of the data displayed by the transmitted communication terminal 400 is acquired.

If the generation instruction does not include the designation of the terminal group for which the provider registration information is to be generated, the provider information acquisition unit 154 is the same user as the communication terminal 400 that has sent the provider registration information generation instruction. Acquires the provider information indicating the provider of the data displayed by the communication terminal 400 that has been authenticated by the ID and is logged in to the information providing service 101 and the communication terminal 400 that has transmitted the generation instruction.

The registration information generation unit 156 generates provider registration information including a plurality of provider information acquired by the provider information acquisition unit 154. The registration information generation unit 156 may generate provider registration information in which the terminal ID of the communication terminal 400 to which each provider has provided data is associated with each of the plurality of provider information.

The registration information storage unit 158 stores the provider registration information generated by the registration information generation unit 156. The registration information storage unit 158 may store the provider registration information in association with the name of the provider registration information included in the instruction to generate the provider registration information.

The designated information receiving unit 160 receives the designated information for designating the provider registration information from the communication terminal 400. The designated information may include the name of the provider registration information.

The provider information transmission unit 162 acquires and refers to the provider registration information designated by the designated information received by the designated information receiving unit 160 from the registration information storage unit 158. Then, the provider information transmission unit 162 transmits the provider information to each of the plurality of communication terminals 400 in order to display the data provided by the provider indicated by the plurality of provider information included in the referenced provider registration information. do.

The provider information transmission unit 162 may transmit a plurality of provider information to the communication terminal 400 that has transmitted the designated information and the communication terminal 400 that belongs to the same terminal group as the communication terminal 400. For example, the provider information transmission unit 162 provides provider information to the communication terminal 400 that has transmitted the designated information and the communication terminal 400 that is authenticated by the same user ID as the communication terminal 400 and is logged in to the information provision service 101. To send.

The provider information transmission unit 162 has a plurality of communication terminals 400 included in the same terminal group as the communication terminal 400 that has transmitted the designated information, and the number of the communication terminals 400 in the state of being logged in to the information provision service 101 is the number of the communication terminals 400. When the number is smaller than the number of communication terminals 400 corresponding to the plurality of provider information included in the provider registration information, the plurality of provider information may be transmitted to at least one of the communication terminals 400 in the logged-in state.

Further, when the provider information transmission unit 162 is in a state where the terminal ID is associated with the plurality of provider information and the communication terminal 400 indicated by each terminal ID is logged in to the information providing service 101. The provider information may be transmitted to the communication terminal 400 indicated by the terminal ID associated with each of the plurality of provider information.

The provider information transmission unit 162 is in a state where at least one of the communication terminals 400 indicated by the terminal IDs associated with each of the plurality of provider information is not logged in to the information providing service 101. If there is, the provider information associated with the terminal ID of the communication terminal in the non-logged state may be transmitted to any other communication terminal 400 of the plurality of communication terminals 400.

Further, the provider information transmission unit 162 displays data such as an icon indicating the provider information associated with the terminal ID of the communication terminal in the non-logged state, in all other data of the plurality of communication terminals 400. It may be transmitted to the communication terminal 400 of. The communication terminal 400 that has received the data transmits a display request to the information providing device 100 in order to display the data provided by the provider indicated by the provider information when the data is specified by the user. good.

As a result, even when the number of communication terminals 400 logged in to the information providing service 101 is smaller when the provider registration information is specified than when the provider registration information is registered, the provider All of the data provided by the provider indicated by the plurality of provider information included in the registration information can be displayed by the logged-in communication terminal 400.

The inquiry output unit 164 is a communication terminal 400 identified by a plurality of terminal IDs associated with a plurality of provider information included in the provider registration information when the designated information receiving unit 160 receives the designated information. Among them, when at least one of the communication terminals 400 is not logged in to the information providing service 101, the inquiry information is transmitted to the communication terminal that has transmitted the designated information. The inquiry information may include the content of inquiring to which communication terminal 400 the provider information corresponding to the terminal ID of the communication terminal 400 in the non-logged-in state is transmitted. Further, the inquiry information may include a content asking which communication terminal 400 is not to be transmitted.

The inquiry response receiving unit 166 receives a response to the inquiry information output by the inquiry output unit 164. The provider information transmission unit 162 may transmit the provider information to the plurality of communication terminals 400 according to the response received by the inquiry response reception unit 166.

FIG. 9 schematically shows an example of the provider registration information table 500. The provider registration information for each terminal group may be registered in the provider registration information table 500. The provider registration information table 500 includes a main terminal column 502, a group terminal column 504, a name column 506, and a provider information column 508.

The main terminal column 502 includes the terminal ID of the main terminal of the terminal group. The group terminal column 504 includes the terminal ID of the group terminal of the terminal group. The group terminal column 504 may include the number of group terminals belonging to the terminal group.

The name column 506 includes the name of the provider registration information. The provider information column 508 includes a plurality of provider information. When the group terminal column 504 includes the terminal ID, the provider information column 508 may include the provider information for each terminal ID. When the group terminal column 504 includes the number of group terminals, the provider information column 508 may include provider information for each communication terminal 400.

In FIG. 9, the provider registration information named for work of the terminal group including the terminal ID: AAA001, AAA002, AAA003, AAA004, and the terminal ID: BBB001 and the name for business trip of the terminal group including the two communication terminals 400. The provider registration information of is exemplified.

When the information providing device 100 receives the designated information specifying the provider registration information named for work from the communication terminal 400 having the terminal ID of AAA001, AAA002, AAA003, or AAA004, the information providing device 100 communicates with the terminal ID of AAA001. The provider information indicating the file server 12 and the cloud service 52 is transmitted to the terminal 400. In the present embodiment, the cloud service 52 is located in the network 50, but may be located in the network 10.

Further, the information providing device 100 transmits the provider information indicating the mail server 14 to the communication terminal 400 whose terminal ID is AAA002. Further, the information providing device 100 transmits the provider information indicating the web server 16 to the communication terminal 400 whose terminal ID is AAA003. Further, the information providing device 100 transmits the provider information indicating the cloud service B to the communication terminal 400 whose terminal ID is AAA04. In the present embodiment, the cloud service 54 is located in the network 50, but may be located in the network 10.

When the information providing device 100 receives the designated information for designating the provider registration information named for business trip from the communication terminal 400 having the terminal ID of BBB001, the file server 12 with respect to the communication terminal 400 having the terminal ID of BBB001. Send the provider information indicating. Further, the information providing device 100 is the first of a plurality of communication terminals 400 that are authenticated with the same user ID as the user ID used by the communication terminal 400 having a terminal ID of BBB001 and logged in to the information providing service 101. The provider information indicating the mail server 14 and the cloud service 52 is transmitted to the communication terminal 400 of 1, and the provider information indicating the web server 16 is transmitted to the second communication terminal 400.

FIG. 10 schematically shows an example of the processing flow by the information providing device 100. FIG. 10 shows a flow of processing in which the information providing device 100 pastes the data copied in the communication terminal 402 into the communication terminal 404. Here, a state in which the communication terminal 402 and the communication terminal 404 are authenticated by the same user ID and both are logged in to the information providing service 101 will be described as a start state.

In S1002, the communication terminal 402 executes a copy operation on the data stored in the communication terminal 402. The communication terminal 402 may execute the copy operation according to the operation by the user of the communication terminal 402.

In S1004, the communication terminal 402 transmits the data to which the copy operation has been performed to the relay device 200 in response to the copy operation in S1002. The communication terminal 402 may add information indicating that the data has been copied and transmit the data to the relay device 200. The relay device 200 may store the received data in association with the terminal ID of the communication terminal 402 that has transmitted the data.

In S1006, the relay device 200 determines whether or not the information providing device 100 has transmitted the copy-operated data to the relay device 200 from any of the plurality of communication terminals 400 registered in the information providing service 101. Confirm to. The confirmation is executed by the relay device confirmation unit 104.

In S1008, the relay device 200 transmits the data received in S1004 to the information providing device 100 in response to the confirmation in S1006. The relay device 200 may transmit data to the information providing device 100 together with the terminal ID of the communication terminal 402.

In S1010, the information providing device 100 stores the data received in S1008. The information providing device 100 may store the data in association with the terminal ID received in S1008.

In S1012, the communication terminal 404 transmits a paste request to the relay device 200. The relay device 200 may store the received paste request in association with the terminal ID of the communication terminal 404 that transmitted the paste request.

In S1014, the information providing device 100 confirms with the relay device 200 whether or not the paste request is transmitted to the relay device 200 from any of the plurality of communication terminals 400 registered in the information providing service 101. The confirmation is executed by the relay device confirmation unit 104.

In S1016, the relay device 200 transmits the paste request received in S1012 to the information providing device 100 in response to the confirmation in S1014. The relay device 200 may transmit a paste request to the information providing device 100 together with the terminal ID of the communication terminal 404.

In S1018, in response to receiving the paste request in S1016, the information providing device 100 is authenticated with the same user ID as the communication terminal 404 indicated by the terminal ID received together with the paste request, and logs in to the information providing service 101. It is determined whether or not the data received from the communication terminal 402 is stored.

In S1020, the information providing device 100 transmits the data stored in S1010 to the communication terminal 404 in response to the determination that the data is stored in S1018. The information providing device 100 may transmit the data to the communication terminal 404 via the relay device 200.

By the above-mentioned processing, the user of the communication terminal 402 and the communication terminal 404 can easily copy the data copied in the communication terminal 402 as if copying and pasting between the communication terminal 402 and the communication terminal 404. Can be pasted into.

FIG. 11 schematically shows an example of the processing flow by the information providing device 100. FIG. 11 shows a flow of processing in which the information providing device 100 pastes the data in the network 10 to which the copy operation is performed in the communication terminal 402 into the communication terminal 404. Here, a state in which the communication terminal 402 and the communication terminal 404 are authenticated by the same user ID and both are logged in to the information providing service 101 will be described as a start state.

In S1102, the communication terminal 402 located in the network 50 transmits a browsing request for browsing the data stored in the file server 12 to the information providing device 100 via the relay device 200. In S1104, the information providing device 100 transmits a data request to the file server 12 in response to the browsing request received in S1102.

In S1106, the file server 12 transmits data to the information providing device 100 in response to the data request received in S1104. In S1108, the information providing device 100 generates browsing data for displaying the data received from the file server 12 on the communication terminal 402, and transmits the browsing data to the communication terminal 402.

In S1110, the communication terminal 402 detects a copy operation for the data stored in the displayed file server 12. In S1112, the communication terminal 402 transmits copy notification information indicating that a copy operation has been performed on the data stored in the file server 12 to the relay device 200. The relay device 200 stores the received copy notification information.

In S1114, the information providing device 100 confirms with the relay device 200 whether or not the copy notification information is transmitted to the relay device 200 from any of the plurality of communication terminals 400 registered in the information providing service 101. The confirmation is executed by the relay device confirmation unit 104.

In S1116, the relay device 200 transmits the copy notification information received in S1112 to the information providing device 100 in response to the confirmation in S1114. The relay device 200 may transmit copy notification information to the information providing device 100 together with the terminal ID of the communication terminal 402. In S1118, the information providing device 100 stores the link information for the data to which the copy operation indicated by the copy notification information received in S1116 is performed.

In S1120, the communication terminal 404 located in the network 50 transmits the paste request to the relay device 200. The communication terminal 404 may transmit a paste request to the relay device 200 together with the terminal ID of the communication terminal 404. The relay device 200 stores the received paste request in association with the terminal ID of the communication terminal 404.

In S1122, the information providing device 100 confirms with the relay device 200 whether or not the paste request is transmitted to the relay device 200 from any of the plurality of communication terminals 400 registered in the information providing service 101. The confirmation is executed by the relay device confirmation unit 104.

In S1124, the relay device 200 transmits the paste request received in S1120 to the information providing device 100 in response to the confirmation in S1122. The relay device 200 may transmit a paste request to the information providing device 100 together with the terminal ID of the communication terminal 404.

In S1126, the information providing device 100 responds to the paste request received in S1124 by the communication terminal 402 authenticated by the same user ID as the communication terminal 404 that transmitted the paste request and logged in to the information providing service 101. It is determined whether or not the link information for the data for which the copy operation indicated by the copied notification information has been performed is stored. In S1128, the information providing device 100 transmits the link information to the communication terminal 404 in response to the determination in S1126 that the link information is stored.

In S1130, the communication terminal 404 transmits a data request to the file server 12 to the relay device 200 using the link information received in S1128. The relay device 200 stores the received data request in association with the terminal ID of the communication terminal 404.

In S1132, the information providing device 100 confirms with the relay device 200 whether or not a data request is transmitted to the relay device 200 from any of the plurality of communication terminals 400 registered in the information providing service 101. The confirmation is executed by the relay device confirmation unit 104.

In S1134, the relay device 200 transmits the data request received in S1130 to the information providing device 100 in response to the confirmation in S1132. The relay device 200 may transmit a data request to the information providing device 100 together with the terminal ID of the communication terminal 404.

In S1136, the information providing device 100 transmits a data download request to the file server 12 in response to the data request received in S1134. In S1138, the file server 12 transmits data to the information providing device 100 in response to the download request received in S1136. In S1140, the information providing device 100 transmits the data received in S1138 to the communication terminal 404.

By the above-mentioned processing, the user of the communication terminal 402 and the communication terminal 404 can view the data in the file server 12 on the communication terminal 402 as if copying and pasting between the communication terminal 402 and the communication terminal 404. It can be easily pasted into the communication terminal 404.

FIG. 12 schematically shows an example of the processing flow by the information providing device 100. FIG. 12 shows a flow of processing in which the information providing device 100 pastes the data in the network 10 whose copy operation has been performed in the communication terminal 402 in the network 10 in response to the paste request from the communication terminal 404. Here, a state in which the communication terminal 402 and the communication terminal 404 are authenticated by the same user ID and both are logged in to the information providing service 101 will be described as a start state.

In S1202, the communication terminal 402 located in the network 50 transmits a browsing request for browsing the data stored in the mail server 14 to the information providing device 100 via the relay device 200. In S1204, the information providing device 100 transmits a data request to the mail server 14 in response to the browsing request received in S1202.

In S1206, the mail server 14 transmits data to the information providing device 100 in response to the data request received in S1204. In S1208, the information providing device 100 generates browsing data for displaying the data received from the mail server 14 on the communication terminal 402, and transmits the browsing data to the communication terminal 402.

In S1210, the communication terminal 404 located in the network 50 transmits a browsing request for browsing the data stored in the file server 12 to the information providing device 100 via the relay device 200. In S1212, the information providing device 100 transmits a data request to the file server 12 in response to the browsing request received in S1210.

In S1214, the file server 12 transmits data to the information providing device 100 in response to the data request received in S1212. In S1216, the information providing device 100 generates browsing data for displaying the data received from the file server 12 on the communication terminal 402, and transmits the browsing data to the communication terminal 402.

In S1218, the communication terminal 402 detects a copy operation for the data stored in the displayed mail server 14. In S1220, the communication terminal 402 transmits copy notification information indicating that a copy operation has been performed on the data stored in the mail server 14 to the relay device 200. The relay device 200 stores the received copy notification information.

In S1224, the information providing device 100 confirms with the relay device 200 whether or not the copy notification information is transmitted to the relay device 200 from any of the plurality of communication terminals 400 registered in the information providing service 101. The confirmation is executed by the relay device confirmation unit 104.

In S1226, the relay device 200 transmits the copy notification information received in S1220 to the information providing device 100 in response to the confirmation in S1224. The relay device 200 may transmit copy notification information to the information providing device 100 together with the terminal ID of the communication terminal 402.

In S1228, the information providing device 100 transmits to the mail server 14 a download request for downloading the data for which the copy operation indicated by the copy notification information received in S1226 has been performed. In S1230, the mail server 14 transmits data to the information providing device 100 in response to the download request received in S1228. In S1232, the information providing device 100 stores the data received in S1230.

In S1234, the communication terminal 404 transmits a paste request to the relay device 200. The communication terminal 404 may transmit a paste request to the relay device 200 together with the terminal ID of the communication terminal 404. The relay device 200 stores the received paste request in association with the terminal ID of the communication terminal 404.

In S1236, the information providing device 100 confirms with the relay device 200 whether or not the paste request is transmitted to the relay device 200 from any of the plurality of communication terminals 400 registered in the information providing service 101. The confirmation is executed by the relay device confirmation unit 104.

In S1238, the relay device 200 transmits a paste request to the information providing device 100 in response to the confirmation in S1236. The relay device 200 may transmit a paste request to the information providing device 100 together with the terminal ID of the communication terminal 404.

In S1240, in response to the paste request received in S1238, the information providing device 100 is transmitted by the communication terminal 402 logged in with the 101 committee authenticated with the same user ID as the communication terminal 404 that sent the paste request. It is determined whether or not the data for which the copy operation indicated by the copy notification information has been performed is stored.

In S1242, the information providing device 100 transmits the data to the file server 12 in response to the determination in S1240 that the data is stored. The file server 12 stores the received data in association with the terminal ID of the communication terminal 404.

By the above-mentioned processing, the user of the communication terminal 402 and the communication terminal 404 can read the data in the mail server 14 on the communication terminal 402 as if copying and pasting between the communication terminal 402 and the communication terminal 404. It can be easily pasted to the file server 12 where the communication terminal 404 is browsing the data.

FIG. 13 schematically shows an example of the functional configuration of the copy data processing unit 170. The copy data processing unit 170 includes a copy data receiving unit 172, a copy data storage unit 174, a paste request receiving unit 176, a data determination unit 178, a data transmitting unit 180, a copy notification information receiving unit 182, a link information storage unit 184, and link information. It includes a determination unit 186, a link information transmission unit 188, a download request reception unit 190, a data acquisition unit 192, a history storage unit 194, a history transmission unit 196, and a designated reception unit 198. It is not always essential that the copy data processing unit 170 includes all of these configurations.

The copy data receiving unit 172 receives the copy data copied by the communication terminal 400 from the communication terminal 400 logged in to the information providing service 101. The copy data may be text data, audio data, image data, electronic files and the like.

The copy data storage unit 174 stores the copy data received by the copy data reception unit 172. The copy data storage unit 174 may store the copy data in association with the terminal ID of the communication terminal 400 that has transmitted the copy data. The copy data storage unit 174 may measure the elapsed time since the copy data receiving unit 172 received the copy data. Then, the copy data storage unit 174 may delete the data when a predetermined time has elapsed since the copy data reception unit 172 received the copy data. As a result, the possibility of data leakage can be reduced and security can be improved.

The paste request receiving unit 176 receives the paste request from the communication terminal 400 logged in to the information providing service 101. When the paste request receiving unit 176 receives the paste request, the data determination unit 178 is authenticated with the same user ID as the communication terminal 400 that sent the paste request, and logs in to the information providing service 101 together with the communication terminal 400. It is determined whether or not the copy data received from the communication terminal 400 is stored in the copy data storage unit 174.

The data transmission unit 180 transmits the copy data stored in the copy data storage unit 174 to the communication terminal 400 that has transmitted the paste request in response to the paste request received by the paste request reception unit 176. When the data transmission unit 180 determines that the copy data is stored in the copy data storage unit 174 by the data determination unit 178, the data transmission unit 180 may transmit the copy data to the communication terminal 400 that has transmitted the paste request. ..

The copy notification information receiving unit 182 provides copy notification information indicating that a copy operation has been performed on the data in the network 10 at the communication terminal 400 located in the network 50 and logged in to the information providing service 101. Received from the communication terminal 400.

The link information storage unit 184 stores link information for data indicating that a copy operation has been performed by the copy notification information received by the copy notification information receiving unit 182. The link information storage unit 184 may store the link information in association with the terminal ID of the communication terminal 400 that has transmitted the copy notification information.

When the paste request receiving unit 176 receives the paste request, the link information determination unit 186 is authenticated with the same user ID as the communication terminal 400 that sent the paste request, and logs in to the information providing service 101 together with the communication terminal 400. It is determined whether or not the link information for the data to which the copy operation is performed indicated by the copy notification information received from the communication terminal 400 is stored in the link information storage unit 184.

The link information transmitting unit 188 transmits the link information stored in the link information storage unit 184 to the communication terminal 400 that transmitted the paste request in response to the paste request receiving unit 176 receiving the paste request. The link information transmission unit 188 may transmit the link information to the communication terminal 404 when the link information determination unit 186 determines that the link information is stored in the link information storage unit 184.

The download request receiving unit 190 receives a download request for data in the network 10 from the communication terminal 400. When the download request receiving unit 190 receives the download request, the data acquisition unit 192 acquires the requested data from a server or the like in the network 10. The data transmission unit 180 may transmit the data acquired by the data acquisition unit 192 to the communication terminal 400 that has transmitted the download request. The data transmission unit 180 and the data acquisition unit 192 may be an example of a storage control unit.

The history storage unit 194 stores the history of the data received by the copy data receiving unit 172 and subjected to the copy operation in the communication terminal 400. The history storage unit 194 may store the history of the data for a predetermined period. The history storage unit 194 may delete the history when a predetermined period has elapsed after storing the history of the data.

Further, the history storage unit 194 may store a history of data indicating that the copy notification information received by the copy notification information receiving unit 182 has been copied. The history storage unit 194 may store the history of the data for a predetermined period. The history storage unit 194 may delete the history when a predetermined period has elapsed after storing the history of the data.

When the paste request receiving unit 176 receives the paste request from the communication terminal 400, the history transmitting unit 196 transmits the history stored in the history storage unit 194 to the communication terminal 400. The communication terminal 400 may display and output the history received from the history transmission unit 196. For example, when the history stored in the history storage unit 194 includes the history of three data, the communication terminal 400 displays and outputs the history indicating the three data.

The designated receiving unit 198 receives the designation of data for the history transmitted by the history transmitting unit 196. For example, when the history transmitted by the history transmission unit 196 includes the history of three data, the designation of any one of the three data is received from the communication terminal 400. The designation of the data for the history may be performed by the user of the communication terminal 400.

The data transmission unit 180 may transmit the designated data to the communication terminal 400 that has transmitted the data designation in response to the reception of the data designation for the history by the designated reception unit 198. Further, the link information transmitting unit 188 transmits the link information corresponding to the designated data to the communication terminal 400 that has transmitted the data designation in response to the reception of the data designation for the history by the designated receiving unit 198. You may send it.

FIG. 14 schematically shows an example of the processing flow by the relay device 200. FIG. 14 shows a flow of processing in which the relay device 200 pastes the data copied in the communication terminal 402 to the communication terminal 404. Here, a state in which the communication terminal 402 and the communication terminal 404 are authenticated by the same user ID and both are logged in to the information providing service 101 will be described as a start state.

In S1402, the communication terminal 402 executes a copy operation on the data stored in the communication terminal 402. The communication terminal 402 may execute the copy operation according to the operation by the user of the communication terminal 402.

In S1404, the communication terminal 402 transmits the copy-operated data to the relay device 200 in response to the copy operation in S1402. The communication terminal 402 may add information indicating that the data has been copied and transmit the data to the relay device 200.

In S1406, the relay device 200 stores the data received in S1404. The relay device 200 may store the received data in association with the terminal ID of the communication terminal 402 that has transmitted the data.

In S1408, the communication terminal 404 transmits a paste request to the relay device 200. The communication terminal 404 may transmit a paste request to the relay device 200 together with the terminal ID of the communication terminal 404.

In S1410, in response to the paste request received in S1408, the relay device 200 is authenticated with the same user ID as the communication terminal 404 indicated by the terminal ID received together with the paste request, and is logged in to the information providing service 101. It is determined whether or not the data received from the terminal 402 is stored.

In S1412, the relay device 200 transmits the data stored in S1406 to the communication terminal 404 in response to the determination that the data is stored in S1410.

By the above-mentioned processing, copy and paste can be realized between the communication terminal 402 and the communication terminal 404 via the relay device 200.

FIG. 15 schematically shows an example of the functional configuration of the copy data processing unit 210 included in the relay device 200. The copy data processing unit 210 includes a copy data receiving unit 212, a copy data storage unit 214, a paste request receiving unit 216, a data determination unit 218, and a data transmitting unit 220.

The copy data receiving unit 212 receives data from the communication terminal 400 that has been copied in the communication terminal 400. The copy data storage unit 214 stores the data received by the copy data reception unit 212. The copy data storage unit 214 may store the data in association with the terminal ID of the communication terminal 400 that has transmitted the data.

The paste request receiving unit 216 receives the paste request from the communication terminal 400. In response to the paste request receiving unit 216 receiving the paste request, the data determination unit 218 is authenticated with the same user ID as the communication terminal 400 that transmitted the paste request, and is logged in to the information providing service 101. It is determined whether or not the data received from the terminal 400 is stored in the copy data storage unit 214.

The data transmission unit 220 is authenticated by the data determination unit 218 with the same user ID as the communication terminal 400 that transmitted the paste request, and the data received from the communication terminal 400 logged in to the information providing service 101 is a copy data storage unit. When it is determined that the data is stored in 214, the data is transmitted to the communication terminal 400 that has transmitted the paste request.

FIG. 16 schematically shows an example of the functional configuration of the communication terminal 400. The communication terminal 400 has a communication unit 412, a data storage unit 414, a display unit 416, and an operation unit 418.

The communication unit 412 executes communication via the network 50. The communication terminal 400 can also be located in the network 10, and when the communication terminal 400 is located in the network 10, the communication unit 412 executes communication via the network 10.

The data storage unit 414 stores various data. The data storage unit 414 may store the data received by the communication unit 412. The communication unit 412 may transmit the data stored in the data storage unit 414.

The display unit 416 displays the data stored in the data storage unit 414. The display unit 416 may be a touch panel display.

The operation unit 418 accepts an operation from the user. The operation unit 418 accepts, for example, a touch operation on the display unit 416, which is a touch panel display. Further, the operation unit 418 accepts operations for input units such as buttons and keys included in the communication terminal 400, for example.

The operation unit 418 may accept a copy operation for the data displayed by the display unit 416. For example, first, when the data displayed on the display unit 416 is selected via the operation unit 418, the display unit 416 displays a menu for the selected data. The menu includes a copy. Then, the operation unit 418 accepts the selection of the copy included in the menu as a copy operation for the data.

Further, when an arbitrary position in the display area of the display unit 416 is selected via the operation unit 418, the communication unit 412 may transmit a paste request to the relay device 200. When the communication unit 412 sends a paste request to the relay device 200 and receives a notification from the relay device 200 that the data to be pasted exists, the display unit 416 displays a menu including the paste. You can do it. Then, when the operation unit 418 accepts the selection of the paste included in the menu, the communication unit 412 may receive the data to be pasted from the relay device 200 and store it in the data storage unit 414.

FIG. 17 schematically shows a display example by the communication terminal 400. FIG. 17 is a “copy” indicating that the display unit 416 is a copy for pasting to the outside of the communication terminal 400 in response to detecting a touch operation on the data icon 420 displayed on the display unit 416. An example of displaying a menu 430 including "(server)" and "copy (terminal)" indicating that the copy is to be pasted inside the communication terminal 400 is shown.

When the data indicated by the data icon 420 is the data in the communication terminal 400 and "copy (server)" is selected, the communication unit 412 sets the data as the data to which the copy operation has been performed, and the relay device 200 It may be transmitted to the information providing device 100 via. Further, when the data indicated by the data icon 420 is the data in the network 10 and "copy (server)" is selected, the communication unit 412 performs a copy operation on the data in the network 10. Copy notification information indicating that this may be transmitted to the information providing device 100 via the relay device 200. When "copy (terminal)" is selected, the communication terminal 400 may copy the data indicated by the data icon 420 to the clipboard.

Here, the case where the menu 430 including "copy (server)" and "copy (terminal)" is displayed has been described as an example, but the present invention is not limited to this. The communication terminal 400 may display a menu 430 including one copy in response to detecting a touch operation on the data icon 420. When the one copy is selected, the communication terminal 400 may transmit the data indicated by the data icon 420 or the copy notification information to the information providing device 100 and store the data in the clipboard. Further, when the copy is selected, the communication terminal 400 may transmit the data or copy notification information to the information providing device 100 without storing the data indicated by the data icon 420 in the clipboard. ..

FIG. 18 schematically shows a display example by the communication terminal 400. FIG. 18 shows a “paste (server)” indicating that the display unit 416 is a paste for pasting data received from the outside of the communication terminal 400 in response to detecting a touch operation on the display unit 416. , An example of displaying a menu 440 including a "paste (terminal)" indicating that it is a paste for pasting data inside the communication terminal 400 is shown.

When "paste (server)" is selected, the communication terminal 400 may paste the data received from the information providing device 100 via the relay device 200. When "paste (terminal)" is selected, the communication terminal 400 may paste the data stored in the clipboard of the communication terminal 400.

In the above embodiment, the information providing device 100 has been described as an example of the communication system, but the present invention is not limited to this. The communication system may include an information providing device 100 and a relay device 200. Further, the communication system may include an information providing device 100 and a management device 300. Further, the communication system may include an information providing device 100, a relay device 200, and a management device 300.

Further, in the above embodiment, an example in which the information providing device 100 establishes a communication connection with the communication terminal 400 via the relay device 200 and transmits / receives data to / from the communication terminal 400 via the relay device 200 has been described. However, it is not limited to this. The information providing device 100 may establish a communication connection with the communication terminal 400 via the relay device 200, and transmit / receive data to / from the communication terminal 400 without going through the relay device 200.

Further, in the above embodiment, the case where the relay device 200 and the management device 300 are separate bodies has been described as an example, but the present invention is not limited to this. The relay device 200 and the management device 300 may be integrated, and for example, the relay device 200 may have the function of the management device 300.

In the above description, each part of the information providing device 100, the relay device 200, the management device 300, and the communication terminal 400 may be realized by hardware or software. Further, it may be realized by a combination of hardware and software. Further, by executing the program, the computer may function as any one of the information providing device 100, the relay device 200, the management device 300, and the communication terminal 400. The program may be installed from a computer-readable medium or a storage device connected to a network to a computer constituting at least a part of an information providing device 100, a relay device 200, a management device 300, and a communication terminal 400. ..

A program installed in a computer and causing the computer to function as any one of the information providing device 100, the relay device 200, the management device 300, and the communication terminal 400 according to the present embodiment works on the CPU and the like to make the computer the information providing device 100. , The relay device 200, the management device 300, and the communication terminal 400, respectively. By reading the information processing described in these programs into a computer, the software and the hardware resources of any of the information providing device 100, the relay device 200, the management device 300, and the communication terminal 400 cooperate with each other. It functions as a concrete means.

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various changes or improvements can be made to the above embodiments. It is clear from the description of the claims that the form with such changes or improvements may be included in the technical scope of the present invention.

The order of execution of each process, such as operation, procedure, step, and step in the apparatus, system, program, and method shown in the claims, specification, and drawings, is particularly "before" and "prior to". It should be noted that it can be realized in any order unless the output of the previous process is used in the subsequent process. Even if the scope of claims, the specification, and the operation flow in the drawings are explained using "first", "next", etc. for convenience, it means that it is essential to carry out in this order. It's not a thing.

10 network, 12 file server, 14 mail server, 16 web server, 20 router, 50 network, 100 information providing device, 101 information providing service, 102 authentication information storage unit, 103 terminal authentication unit, 104 relay device confirmation unit, 105 communication Connection establishment unit, 106 content management unit, 107 content provision unit, 110 token authentication unit, 112 key data request reception unit, 114 key data generation unit, 116 authentication data generation unit, 118 encryption unit, 120 authentication data storage unit. , 122 key data transmission unit, 124 authentication data transmission unit, 126 key data reception unit, 128 key authentication possibility determination unit, 130 token transmission unit, 132 ID reception unit, 134 authentication possibility determination unit, 136 communication connection establishment unit, 138 Terminal group registration unit, 150 provider information processing unit, 152 generation instruction reception unit, 154 provider information acquisition unit, 156 registration information generation unit, 158 registration information storage unit, 160 designated information reception unit, 162 provider information transmission unit, 164 inquiry output unit, 166 inquiry response reception unit, 170 copy data processing unit, 172 copy data reception unit, 174 copy data storage unit, 176 paste request reception unit, 178 data judgment unit, 180 data transmission unit, 182 copy notification Information receiving unit, 184 link information storage unit, 186 link information judgment unit, 188 link information transmitting unit, 190 download request receiving unit, 192 data acquisition unit, 194 history storage unit, 196 history transmitting unit, 198 designated receiving unit, 200 relay Device, 210 copy data processing unit, 212 copy data receiving unit, 214 copy data storage unit, 216 paste request receiving unit, 218 data judgment unit, 220 data transmitting unit, 300 management unit, 302 authentication data receiving unit, 304 authentication unit. Data storage unit, 306 terminal request reception unit, 308 key acquisition instruction transmission unit, 310 key data reception unit, 312 key authentication pass / fail judgment unit, 314 key data transmission unit, 316 token reception unit, 318 ID transmission unit, 400 communication terminal, 402 communication terminal, 404 communication terminal, 406 communication terminal, 412 communication unit, 414 data storage unit, 416 display unit, 418 operation unit, 420 Data icon, 430 menu, 440 menu, 500 provider registration information table, 502 main terminal column, 504 group terminal column, 506 name column, 508 provider information column

Claims (5)

An instruction to generate provider registration information including a plurality of provider information indicating a provider of each data displayed by each of the plurality of communication terminals from at least one of the plurality of communication terminals registered as a terminal group. Generation instruction receiver to receive, and
A provider information acquisition unit that acquires a plurality of provider information indicating a provider of data displayed by each of the plurality of communication terminals in response to receiving the generation instruction, and a provider information acquisition unit.
A registration information generation unit that generates provider registration information in which each of the plurality of provider information acquired by the provider information acquisition unit and the terminal identification information of each of the plurality of communication terminals are associated with each other.
A designated information receiving unit that receives designated information that specifies the provider registration information from at least one of the plurality of communication terminals.
When the designated information receiving unit receives the designated information, at least among a plurality of communication terminals identified by a plurality of terminal identification information associated with the plurality of provider information included in the provider registration information. If any of the communication terminals is not logged in, the provider information corresponding to the terminal identification information of the communication terminal that is not logged in is one of the plurality of communication terminals that are logged in. With the provider information transmitter to send to
A communication system equipped with. When the designated information receiving unit receives the designated information, the provider information transmitting unit is identified by a plurality of terminal identification information associated with the plurality of provider information included in the provider registration information. When all the communication terminals are logged in among the plurality of communication terminals, the data provided by the provider indicated by the plurality of provider information included in the provider registration information for each of the plurality of communication terminals. The communication system according to claim 1, wherein each of the plurality of provider information is transmitted to each of the plurality of communication terminals in order to display. The generation instruction receiving unit receives the generation instruction including the designation of the terminal group including the terminal identification information of the communication terminal belonging to the terminal group.
The provider information acquisition unit obtains a plurality of provider information indicating a provider of data displayed by the communication terminal indicated by the terminal identification information included in the designation of the terminal group and the communication terminal that has transmitted the generation instruction. The communication system according to claim 1 or 2 to be acquired. When the designated information receiving unit receives the designated information, at least among a plurality of communication terminals identified by a plurality of terminal identification information associated with the plurality of provider information included in the provider registration information. When any of the communication terminals is not logged in, the provider information corresponding to the terminal identification information of the communication terminal in the non-logged state is logged in to the communication terminal to which the specified information is transmitted. Inquiry output unit that outputs inquiry information inquiring which communication terminal to send to
With the inquiry response receiving unit that receives the response to the inquiry information output by the inquiry output unit
Further prepare
From claim 1, the provider information transmitting unit transmits the provider information to any of the plurality of communication terminals in which the provider information is logged in, in response to the response received by the inquiry response receiving unit. The communication system according to any one of 3. A program for operating a computer as the communication system according to any one of claims 1 to 4.

Images