Relay Server Mediates Firewall-Blocked Image Printer Configuration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems face challenges in setting the configuration of an image forming apparatus behind a firewall without altering the firewall's security policy, as management servers are typically unable to communicate with the apparatus due to strict internet connection limitations.
Innovation Solution
An information processing system comprising a management server, a personal computer, and an image forming apparatus, where the management server and image forming apparatus employ relay programs, web server programs, and extension application programs to establish a session and compress/decompress HTTP requests, allowing the management server to set the image forming apparatus's configuration without modifying the firewall settings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a firewall is configured to protect the image forming apparatus at the customer site, then security is improved, but remote configuration from the management server becomes impossible
Solution Approach 1:
The patent introduces a relay server as an intermediary component that mediates communication between the management server and the image forming apparatus. The relay server runs a relay program that establishes a relay communication connection, allowing HTTP requests to be transmitted through the firewall without modifying firewall settings. This intermediary enables remote configuration while maintaining firewall security policies.
2Ease of operation
If the firewall configuration is modified to allow management server access, then remote configuration becomes possible, but security policy is compromised
Solution Approach 1:
The relay server acts as a trusted intermediary that operates within the existing firewall security policy. Instead of modifying firewall configurations, the relay server's relay program creates a communication path that is permitted by the firewall, thus enabling remote configuration without compromising security.
Solution Approach 2:
The image forming apparatus autonomously runs the relay program locally, which automatically establishes the relay communication connection without requiring external firewall configuration changes. The system serves itself by implementing the communication mechanism internally through the relay program.
3Device complexity
If direct HTTP communication is used between management server and image forming apparatus, then communication simplicity is improved, but firewall blocking occurs
Solution Approach 1:
The relay server introduces a mediation layer that receives HTTP requests from the management server and forwards them to the image forming apparatus. This intermediary structure allows standard HTTP communication to function despite firewall restrictions, as the relay program establishes the necessary communication path.
Solution Approach 2:
The communication path is segmented into multiple stages: management server to relay server, and relay server to image forming apparatus. This segmentation allows each segment to be configured independently, with the relay program handling the firewall-traversing segment while maintaining HTTP protocol compatibility.
Data Source
AI summary
The second connector of the image forming apparatus behind the firewall connects to the first connector of the management server to establish a session. The web browser of the personal computer sends an HTTP request to the first compressor on the basis of an instruction from a user, a destination of the HTTP request being the web server unit of the image forming apparatus. The first compressor of the management server compresses the HTTP request received from the web browser to generate first compressed data, and sends the generated first compressed data to the second decompressor of the image forming apparatus through a communication path established between the first connector and the second connector. The second decompressor of the image forming apparatus decompresses the first compressed data received from the first compressor to reproduce the original HTTP request, and sends the HTTP request to the web server unit.