Relay program and relay device

Abstract

To smoothly install a certificate.SOLUTION: A relay program is configured to relay communication between a server and a terminal device and includes an acquisition unit, an analysis unit, and an installation unit. The acquisition unit is configured to acquire, from the server, installation information on a plurality of certificates. The analysis unit is configured to analyze the installation information and acquire information necessary for installation of each of the certificates. The installation unit is configured to sequentially transmit an instruction to install each of the certificates into the terminal device. The installation unit is configured to, upon receipt of an installation completion notification, transmit the next installation instruction.SELECTED DRAWING: Figure 4

Description

[[Technical Field]]

[0001] The present disclosure relates to a relay program and the like for relaying communication between a server and a terminal device. [[Background Art]]

[0002] As described in Patent Document 1, there is known a technology for managing terminal devices having functions as image forming apparatuses such as printers and scanners by an MDM system that centrally manages terminal devices such as smartphones. In the MDM system of Patent Document 1, a server that manages smartphones and the like communicates with terminal devices as image forming apparatuses via a relay device, and manages these terminal devices. [[Prior Art Literature]] [[Patent Literature]]

[0003] [[Patent Document 1]] Japanese Patent Laid-Open No.2022-70493 [[Summary of the Invention]] [[Problem to be Solved by the Invention]]

[0004] Meanwhile, in an MDM system, a server may issue an instruction to collectively install a plurality of certificates to a terminal device. However, for example, when the terminal device is configured as an image forming apparatus, the hardware resources (for example, memory capacity) of the terminal device are insufficient, which may make it difficult to collectively install a plurality of certificates.

[0005] An object of the present disclosure is to smoothly install certificates. [[Means for Solving the Problem]]

[0006] One aspect of this disclosure is a relay program that operates a computer as a relay device configured to relay communication between a server and a terminal device, and comprises an acquisition unit, an analysis unit, and an installation unit. The acquisition unit is configured to acquire installation information from the server for installing multiple certificates on the terminal device. The analysis unit is configured to analyze the installation information and acquire the information necessary for installing each certificate. The installation unit is configured to generate installation instructions that instruct the terminal device to install each certificate based on the information acquired by the analysis unit, and to sequentially transmit installation instructions corresponding to each certificate. Furthermore, after transmitting an installation instruction corresponding to any certificate, the installation unit is configured to transmit an installation instruction corresponding to the next certificate when it receives a completion notification indicating that the installation of that certificate has been completed.

[0007] With the above configuration, even when installing multiple certificates to a terminal device at once, the relay program sequentially instructs the terminal device to install each certificate. Therefore, even if the terminal device has limited hardware resources, each certificate can be installed to the terminal device efficiently. Consequently, certificate installation can be carried out smoothly.

[0008] In one aspect of this disclosure, the installation unit may be configured to send an installation instruction corresponding to any certificate, then have a thread wait to perform processing for sending an installation instruction corresponding to the next certificate, and upon receiving a completion notification corresponding to the sent installation instruction, activate the waiting thread and perform processing for sending an installation instruction corresponding to the next certificate.

[0009] With the above configuration, the process from sending the installation instruction to receiving the completion notification and then sending the next certificate installation instruction can be carried out smoothly. In one aspect of this disclosure, the analysis unit may be configured to obtain server information indicating the servers that provide each certificate from the installation information. The installation instructions may include server information that provides the certificates to be installed by the installation instructions.

[0010] According to the above configuration, certificates can be conveniently installed on the terminal device. In one aspect of this disclosure, the analysis unit may be configured to obtain from the installation information the input information required to install the certificate. The installation instructions may include input information corresponding to the certificate to be installed by the installation instructions.

[0011] According to the above configuration, certificates can be conveniently installed on the terminal device. Another aspect of this disclosure is a relay device equivalent to a computer operating with the above-mentioned relay program. This aspect allows for the smooth installation of certificates. [Brief explanation of the drawing]

[0012] [Figure 1] This is a block diagram showing the configuration of the terminal management system. [Figure 2] This is a block diagram showing the configuration of a terminal device. [Figure 3] This is a block diagram showing the configuration of the relay device. [Figure 4] This is a diagram illustrating the process of splitting certificate installation information. [Figure 5] This is a flowchart illustrating the process for updating the control program of a terminal device. [Modes for carrying out the invention]

[0013] The embodiments of this disclosure will be described below with reference to the drawings. However, the embodiments of this disclosure are not limited to those described below, and various forms may be taken as long as they fall within the technical scope of this disclosure.

[0014] [1. Overview] The terminal management system 1 of this embodiment includes a management server 2, a relay device 3, a plurality of terminal devices 4, and a plurality of mobile terminals 5 (see Figure 1).

[0015] The management server 2 and the relay device 3 are connected to a global network G and can communicate with each other via the global network G. The management server 2 and the relay device 3 communicate with each other using, for example, HTTPS (Hypertext Transfer Protocol Secure). The global network G can be any network, including, for example, the internet.

[0016] The terminal management system 1 functions as a so-called mobile device management system (in other words, an MDM system). The management server 2 can manage the mobile devices 5 by communicating with them via the global network G. For example, the management server 2 is owned by the provider of the MDM system service, and the relay device 3 is owned by the administrator who manages each terminal device 4 using the MDM system.

[0017] [2. Terminal devices] Terminal device 4 has the function of an image forming apparatus and has at least one of the following: a printer function that prints an image based on image data, and a scanning function that reads an image on a sheet and generates image data. Terminal device 4 may be configured as a portable, small device or as a stationary device.

[0018] As an example, the terminal device 4 is connected to a global network G, and is capable of communicating with the relay device 3 via the global network G. Also as an example, the terminal device 4 may be connected to a local network L together with the relay device 3, and may be capable of communicating with the relay device 3 via the local network L. The local network L may be a so-called intranet, may be a wired network, may be a wireless network such as a wireless LAN, or may be a network in which wired and wireless communications are mixed. In addition, the terminal device 4 may be capable of communicating with the relay device 3 via a wired or wireless communication line such as USB, Bluetooth (registered trademark), or the like, for example.

[0019] It should be noted that the terminal device 4 can communicate with the relay device 3 via HTTPS or the like, for example. Also, as will be described in detail later, the terminal device 4 is configured to communicate with the management server 2 via the relay device 3. As an example, the terminal device 4 may be configured such that it cannot communicate with the management server 2 without going through the relay device 3.

[0020] The terminal device 4 includes a control unit 40, a storage unit 41, a user I / F 42, and a communication I / F 43 (see FIG. 2). Also, as an example, the terminal device 4 includes a printing unit 44 and a reading unit 45.

[0021] The control unit 40 includes a CPU. The storage unit 41 includes, for example, a semiconductor memory such as ROM, RAM, NVRAM, flash memory, or SSD. That is, the terminal device 4 includes a computer including a CPU and a semiconductor memory.

[0022] The memory unit 41 stores a control program for the overall control of the terminal device 4, and the control unit 40 operates according to the control program to realize various functions of the terminal device 4. Note that the various functions realized by the control unit 40 are not limited to those realized by the execution of the control program; some or all of them may be realized using one or more hardware components. Furthermore, the memory unit 41 stores at least one electronic certificate 41A (hereinafter simply referred to as "certificate"), which will be described later.

[0023] The user interface 42 includes input devices for receiving various inputs, such as buttons and touch panels. The user interface 42 also includes display devices, such as liquid crystal panels and LED display devices.

[0024] Communication I / F43 is a component for communicating with devices such as relay device 3 via communication lines such as the global network G, the local network L, USB, or Bluetooth.

[0025] Furthermore, the printing unit 44 is the part that realizes the printer function described above, and the reading unit 45 is the part that realizes the scanning function described above. Of course, the terminal device 4 may also be equipped with either the printing unit 44 or the reading unit 45.

[0026] [3. Relay device] The relay device 3 is configured to relay communication between the management server 2 and the terminal device 4. In other words, the terminal device 4 communicates with the management server 2 via the relay device 3. The relay device 3 comprises a control unit 30, a storage unit 31, a user interface 32, and a communication interface 33 (see Figure 3).

[0027] The control unit 30 has a CPU. The storage unit 31 has semiconductor memory such as ROM, RAM, NVRAM, flash memory, or SSD. Furthermore, the storage unit 31 may also have, for example, a hard disk drive. In other words, the relay device 3 is equipped with a computer including a CPU and semiconductor memory.

[0028] The relay device 3 has various programs installed, including the OS 31A and the relay program 31B (details of which will be described later). The storage unit 31 has a configuration as a non-transitional physical recording medium, and programs such as the OS 31A and the relay program 31B are stored there. The control unit 30 executes the programs such as the OS 31A and the relay program 31B stored in the storage unit 31, which is a non-transitional physical recording medium, thereby realizing the various functions of the relay device 3. Note that the various functions realized by the control unit 30 are not limited to being realized by program execution, and some or all of them may be realized using one or more hardware components.

[0029] The relay program 31B may be pre-installed on the relay device 3, for example. Alternatively, the relay program 31B may be provided stored on a storage medium such as a DVD-ROM or USB memory, and installed on the relay device 3 by reading the relay program 31B from the storage medium. Furthermore, the relay program 31B may be installed on the relay device 3 by downloading it via a global network G or a local network L, for example.

[0030] In addition, the memory unit 31 has an action database (DB) formed within it, which is a database for registering actions that will be described later. The User I / F32 includes input devices for receiving various inputs from the administrator, such as a keyboard and mouse. The User I / F32 also includes display devices, such as an LCD panel and an LED display device.

[0031] Communication I / F33 communicates with management server 2, for example, via global network G. Furthermore, communication I / F33 communicates with terminal device 4, for example, via global network G, local network L, or communication lines such as USB or Bluetooth.

[0032] [4. Functions of the terminal management system] The administrator of terminal device 4 manages terminal device 4 by accessing the management site on management server 2, for example, using a web browser. Management server 2 manages terminal device 4 by communicating with terminal device 4 via relay device 3, following instructions received from the administrator via the management site. The function of relay device 3 for managing terminal device 4 is realized by the control unit 30 executing relay program 31B.

[0033] As an example, terminal management system 1 has an action instruction function, a periodic monitoring function, and a self-check monitoring function. The action instruction function is a function that causes terminal device 4 to perform an action. An action may be, for example, updating various settings, updating a control program, installing a certificate, downloading a file, or sending status information.

[0034] The relay device 3 registers the actions to be performed by the terminal device 4 in the action DB provided in the storage unit 31. The terminal device 4 also polls the relay device 3 to determine whether or not there is an action that should be performed by the terminal device 4. For example, the terminal device 4 sends a polling command to itself at periodic intervals (for example, every 5 seconds). When the relay device 3 receives a polling command from the terminal device 4, it determines whether or not the action that the terminal device 4 should perform is registered in the action DB. If the action is registered, the relay device 3 sends a command to the terminal device 4 indicating the action to be performed.

[0035] The periodic monitoring function is a function in which the relay device 3 periodically acquires status information indicating the status of the terminal device 4 from the terminal device 4. The status information may include, for example, various setting values ​​related to the image formation function, the remaining battery level 56, the remaining amount of colorant, the remaining amount of paper, the location of the terminal device 4, or the user name of the terminal device.

[0036] In addition, the status information includes a status indicating the version of the control program of terminal device 4, and a status indicating that this is the first status information notification after terminal device 4 has started up (hereinafter referred to as the startup flag). Terminal device 4 transmits status information due to startup by power-on or restart due to an update of the control program. The startup flag in this status information is set to ON. On the other hand, the startup flag in status information transmitted for the second time or later after terminal device 4 has started up or restarted is set to OFF.

[0037] The storage unit 31 of the relay device 3 is equipped with a management database that stores status information for each terminal device 4. When the control unit 30 of the relay device 3 receives status information, it updates the management database based on that status information.

[0038] The self-check monitoring function is a function that, when the status of terminal device 4 changes, transmits status information indicating the changed status from terminal device 4 to relay device 3. When the control unit 30 of relay device 3 receives this status information, it updates the management DB based on this status information.

[0039] Therefore, for example, an administrator can access the management database of the relay device 3 via the management site and check the status of the terminal device 4. Also, for example, an administrator can request actions on the terminal device 4 via the management site.

[0040] In addition, the administrator can manage the terminal device 4 in the same way as when using the management server 2 by directly accessing the relay device 3 without going through the management server 2. For example, the administrator can manage the terminal device 4 by operating the user interface 34 of the relay device 3, or by accessing the management site on the relay device 3 using a web browser.

[0041] [5. Installing the Certificate] As described above, the terminal management system 1 provides an action to install a certificate on the terminal device 4 via the relay device 3 through its action instruction function. Furthermore, this action makes it possible to install multiple certificates on the terminal device 4 at once.

[0042] Specifically, for example, the CA certificate and client certificate required to access a network provided by Wi-Fi (registered trademark) may be installed together on terminal device 4. Of course, this is not the only option; various certificates can be installed together, and it is even possible to install three or more certificates together.

[0043] The following describes the installation process for installing a certificate on the terminal device 4 via the relay device 3, using the flowchart in Figure 4. Note that the processing in the relay device 3 in this process is achieved by the control unit 30 operating according to the relay program 31B.

[0044] In S100, the management server 2 sends a certificate installation instruction to the relay device 3, following instructions received from the administrator of the terminal device 4 via the management site. At this time, the management server 2 sends the relay device 3 identification information of the terminal device 4 on which the certificate will be installed, and installation information for installing the certificate. The installation information includes server information that identifies the server providing the certificate (e.g., URL, etc.) and input information that needs to be entered to install the certificate (e.g., password, etc.).

[0045] Here, the installation instructions and installation information sent by the management server 2, as an example, instruct the terminal device 4 to install two certificates (hereinafter referred to as the first and second certificates) at once. In S105, the control unit 30 of the relay device 3, which received the installation instructions and installation information, analyzes the installation information (details will be described later) and generates the first and second installation information necessary for the installation of the first and second certificates, respectively.

[0046] In S110, the control unit 30 of the relay device 3 registers "Installation of the first certificate" as an action for the terminal device 4 specified by the management server 2 in the action DB. In S115, the control unit 40 of terminal device 4 sends a polling command to relay device 3 to check whether there is an action to be performed on terminal device 4. If "Install first certificate" is registered as an action for terminal device 4 in the action DB, the control unit 30 of relay device 3 sends a command to terminal device 4 instructing it to perform that action. At this time, the first installation information necessary for installing the first certificate is also sent to terminal device 4. In other words, this command and the first installation information constitute an installation instruction to terminal device 4.

[0047] Furthermore, when the control unit 40 of the terminal device 4 receives a command instructing an action, it sends a command to the relay device 3 instructing it to delete the action from the action database. Upon receiving this command, the control unit 30 of the relay device 3 deletes the action from the action database.

[0048] In the following step S120, the control unit 30 of the relay device 3 creates a thread that executes the process of registering "Install second certificate" as an action on the terminal device 4 specified by the management server 2 in the action DB, and puts this thread into a waiting state. The waiting state of this thread is released when it receives notification that the installation of the first certificate is complete. Then, in S125, the control unit 30 sends a message to the management server 2 indicating that the certificate installation has started.

[0049] In S130, the control unit 40 of the terminal device 4 downloads the first certificate from the server via the global network G, and then installs the downloaded first certificate (S135). It is anticipated that sending a password to the server may be necessary for downloading the certificate, or that password verification may be necessary during installation. In such cases, the control unit 40 sends the password included as input information in the first installation information to the server or uses it for verification during installation. Then, the control unit 40 sends a completion notification to the relay device 3 indicating that the installation of the first certificate is complete (S140).

[0050] In S145, the control unit 30 of the relay device 3, having received notification that the installation of the first certificate is complete, starts a waiting thread and registers "Installation of the second certificate" in the action DB using that thread. Then, the control unit 30 sends a message to the management server 2 indicating that the installation of the first certificate was successful (S150).

[0051] In S155, the control unit 40 of terminal device 4 sends a polling command to relay device 3 to check whether there is an action to be performed on terminal device 4. If "Install second certificate" is registered as an action for terminal device 4 in the action DB, the control unit 30 of relay device 3 terminates the aforementioned thread (S160). Furthermore, in response to the polling command, the control unit 30 sends a command to terminal device 4 instructing it to "Install second certificate" (S165). At this time, the second installation information necessary for installing the second certificate is also sent to terminal device 4. In other words, this command and the second installation information constitute an installation instruction to terminal device 4.

[0052] In S170, the control unit 40 of the terminal device 4 downloads the second certificate from the server via the global network G and installs the downloaded second certificate (S175). At this time, the control unit 40 sends the input information included in the second installation information to the server for download or uses it for verification during installation, as needed. Then, the control unit 40 sends a completion notification to the relay device 3 indicating that the installation of the second certificate is complete (S180).

[0053] In the following step S185, the control unit 30 of the relay device 3 sends a message to the management server 2 indicating that the installation of the second certificate was successful. Furthermore, when installing three or more first to nth certificates (where n is an integer greater than or equal to 3), the second to n-th certificates may be installed by repeatedly executing the same process as S115 to S150 after the process S100 to S150 has been completed. Then, after the process S150 corresponding to the n-th certificate has been completed, the nth certificate may be installed by executing the same process as S155 to S185.

[0054] [6. Analysis of installation information] Next, we will explain the analysis of installation information performed in S105 of the installation process. As mentioned above, the installation information includes server information and input information. The control unit 30 of the relay device 3 searches the entire installation information, obtains the server information, and obtains the input information associated with the server information.

[0055] As an example, the installation information 7 in Figure 5 includes server information 70 corresponding to the first certificate, which is a CA certificate, and server information 71 corresponding to the second certificate, which is a client certificate. Server information 70 corresponding to the first certificate is the URL of the Certificate Authority's server, and server information 71 corresponding to the second certificate is the URL of the server that issues the client certificate.

[0056] Furthermore, the installation information 7 includes, as input information 71A associated with the server information 71, the password to be entered into the server during download and the password used for verification during installation. However, the input information 71A may include only one of these passwords. Also, as an example, the installation information 7 does not include the input information associated with the server information 70.

[0057] The control unit 30 first obtains server information 70 corresponding to the first certificate from the installation information 7 and generates first installation information 7A including the server information 70. Subsequently, the control unit 30 obtains server information 71 corresponding to the second certificate and input information 71A associated with the server information 71 from the installation information 7 and generates second installation information 7B including the server information 71 and input information 71A.

[0058] [7. Effects] (1) According to the above embodiment, even when multiple certificates are installed together on the terminal device 4 by an installation instruction from the management server 2, the relay program 31B sequentially instructs the terminal device 4 to install each certificate. Therefore, even if the hardware resources of the terminal device 4 (e.g., memory capacity) are limited, each certificate can be suitably installed on the terminal device 4. Thus, certificate installation can be carried out smoothly.

[0059] (2) When the relay program 31B sends a command to the terminal device 4 indicating the action of "installing the certificate," it generates a thread to register the next certificate installation as an action and puts the thread into a waiting state. When it receives notification from the terminal device 4 that the certificate installation is complete, the waiting thread is activated and the next certificate installation is registered as an action. This allows the process from instructing "install the certificate" to receiving the installation completion notification and then instructing the next "install the certificate" to proceed smoothly.

[0060] (3) The relay program 31B also sends server information and input information to the terminal device 4 along with a command indicating the action of "installing the certificate". This allows the terminal device 4 to install the certificate efficiently.

[0061] [8. Other Embodiments] (1) In the above embodiment, the relay device 3 and the terminal device 4 are configured to communicate directly. However, the relay device 3 and the terminal device 4 may communicate via an intermediary device. Specifically, in the above embodiment, as an example, the relay device 3 and the terminal device 4 communicate via HTTPS, but if the terminal device 4 does not support HTTPS, for example, an intermediary device capable of HTTPS communication may be used. That is, communication between the terminal device 4 and the intermediary device may be conducted via HTTP, for example, and communication between the intermediary device and the relay device 3 may be conducted via HTTPS, thereby relaying the communication between the relay device 3 and the terminal device 4 through the intermediary device.

[0062] In this case as well, the certificate is installed in the same manner as the installation process described above. However, in steps S130 and S170 of the update process, terminal device 4 may download the certificate from the server via the intermediary device. That is, the intermediary device may download the certificate from the server and then provide the certificate to terminal device 4. Of course, terminal device 4 is not limited to this and may download the certificate directly from the server.

[0063] (2) In addition, the terminal device 4 polls the relay device 3, which sends an action command to the terminal device 4. However, the method of sending from the relay device 3 to the terminal device 4 is not limited to this and can be implemented in various ways.

[0064] (3) Multiple functions of one component in the above embodiment may be realized by multiple components, or one function of one component may be realized by multiple components. Also, multiple functions of multiple components may be realized by one component, or one function realized by multiple components may be realized by one component. Furthermore, some of the configurations of the above embodiment may be omitted. Also, at least some of the configurations of the above embodiment may be added to or replaced with the configurations of other above embodiments.

[0065] (4) In addition to the relay device 3 described above, this disclosure can also be implemented in various forms, such as a non-transitional physical recording medium such as a semiconductor memory or a hard disk drive in which the relay program 31B is stored, or a method for corresponding to the installation process realized by the relay program 31B.

[0066] [9. Correspondence between wordings] S100 in the installation process corresponds to an example of the acquisition unit, S105 corresponds to an example of the analysis unit, and S110~S120, S145, S155~S165 correspond to an example of the installation unit.

[0067] [10. The technical concept disclosed herein] [Item 1] A relay program that operates a computer as a relay device configured to relay communication between a server and a terminal device, An acquisition unit configured to obtain installation information for installing multiple certificates on the terminal device from the server, An analysis unit configured to analyze the aforementioned installation information and obtain the information necessary for the installation of each of the aforementioned certificates, An installation unit is configured to generate installation instructions that instruct the terminal device to install each of the certificates based on the information acquired by the analysis unit, and to sequentially transmit the installation instructions corresponding to each of the certificates. Equipped with, The installation unit is configured to send an installation instruction corresponding to one of the certificates, and then, upon receiving a completion notification indicating that the installation of the said certificate is complete, to send an installation instruction corresponding to the next certificate. Live broadcast program.

[0068] [Item 2] In the relay program described in item 1, The installation unit is configured to, after sending the installation instruction corresponding to any of the certificates, have a thread waiting to execute a process for sending the installation instruction corresponding to the next certificate, and upon receiving the completion notification corresponding to the sent installation instruction, activate the waiting thread and execute a process for sending the installation instruction corresponding to the next certificate. Live broadcast program.

[0069] [Item 3] In the relay program described in item 1 or item 2, The analysis unit is configured to obtain server information indicating the server that provides each of the certificates from the installation information. The installation instructions include the server information that provides the certificate to be installed by the installation instructions. Live broadcast program.

[0070] [Item 4] In a relay program described in any one of items 1 through 3, The analysis unit is configured to obtain from the installation information the input information necessary to install the certificate, The installation instructions include the input information corresponding to the certificate to be installed by the installation instructions. Live broadcast program.

[0071] [Item 5] A relay device configured to relay communication between a server and a terminal device, An acquisition unit configured to obtain installation information for installing multiple certificates on the terminal device from the server, An analysis unit configured to analyze the aforementioned installation information and obtain the information necessary for the installation of each of the aforementioned certificates, An installation unit is configured to generate installation instructions that instruct the terminal device to install each of the certificates based on the information acquired by the analysis unit, and to sequentially transmit the installation instructions corresponding to each of the certificates. Equipped with, The installation unit is configured to send an installation instruction corresponding to one of the certificates, and then, upon receiving a completion notification indicating that the installation of the said certificate is complete, to send an installation instruction corresponding to the next certificate. A relay device. [Explanation of symbols]

[0072] 1...Terminal management system, 2...Management server, 3...Relay device, 30...Control unit, 31...Storage unit, 31B...Relay program, 4...Terminal device, 40...Control unit, 41...Storage unit, 41A...Certificate, 42...Printing unit, 43...Reading unit, G...Global network, L...Local network.

Claims

1. A relay program that operates a computer as a relay device configured to relay communication between a server and a terminal device, An acquisition unit configured to obtain installation information for installing multiple certificates on the terminal device from the server, An analysis unit configured to analyze the aforementioned installation information and obtain the information necessary for the installation of each of the aforementioned certificates, An installation unit is configured to generate installation instructions that instruct the terminal device to install each of the certificates based on the information acquired by the analysis unit, and to sequentially transmit the installation instructions corresponding to each of the certificates. Equipped with, The installation unit is configured to send the installation instruction corresponding to the next certificate after sending the installation instruction corresponding to one of the certificates and receiving a completion notification indicating that the installation of the said certificate is complete. The installation unit is configured to, after sending the installation instruction corresponding to any of the certificates, have a thread waiting to execute a process for sending the installation instruction corresponding to the next certificate, and upon receiving the completion notification corresponding to the sent installation instruction, activate the waiting thread and execute a process for sending the installation instruction corresponding to the next certificate. Live broadcast program.

2. In the relay program described in claim 1, The analysis unit is configured to obtain server information indicating the server that provides each of the certificates from the installation information. The installation instructions include the server information that provides the certificate to be installed by the installation instructions. Live broadcast program.

3. In the relay program described in claim 1, The analysis unit is configured to obtain from the installation information the input information necessary to install the certificate, The installation instructions include the input information corresponding to the certificate to be installed by the installation instructions. Live broadcast program.

4. A relay device configured to relay communication between a server and a terminal device, An acquisition unit configured to obtain installation information for installing multiple certificates on the terminal device from the server, An analysis unit configured to analyze the aforementioned installation information and obtain the information necessary for the installation of each of the aforementioned certificates, An installation unit is configured to generate installation instructions that instruct the terminal device to install each of the certificates based on the information acquired by the analysis unit, and to sequentially transmit the installation instructions corresponding to each of the certificates. Equipped with, The installation unit is configured to send the installation instruction corresponding to the next certificate after sending the installation instruction corresponding to one of the certificates and receiving a completion notification indicating that the installation of the said certificate is complete. The installation unit is configured to, after sending the installation instruction corresponding to any of the certificates, have a thread waiting to execute a process for sending the installation instruction corresponding to the next certificate, and upon receiving the completion notification corresponding to the sent installation instruction, activate the waiting thread and execute a process for sending the installation instruction corresponding to the next certificate. Relay device.

Images