Relay communication system and access management apparatus

摘要

A first relay server transmits, to an access management apparatus that manages an access right to a second relay server, an access request with respect to the second relay server. The access management apparatus confirms that the access right to the second relay server is set in the first relay server, and then requests the second relay server to permit an access by the first relay server. In a case where the second relay server permits the access from the first relay server, the access management apparatus notifies the first relay server of such access permission. Based on the notice from the access management apparatus, the first relay server establishes a routing session with the second relay server. By using the routing session, the first relay server starts the communication with a general server that serves as a maintenance target.

主权项

1. A relay communication system comprising:
a first relay apparatus provided in a first LAN; a second relay apparatus provided in a second LAN; and an access management apparatus defined by a third relay apparatus provided in a third LAN and configured to hold an access permission list in which identification information of access target apparatuses and identification information of apparatuses permitted to access the access target apparatuses are associated with each other; wherein the first relay apparatus is configured to request, to the access management apparatus, a selection list of apparatuses accessible by the first relay apparatus, select the second relay apparatus from the selection list, and transmit to the access management apparatus an access request to the second relay apparatus; the second relay apparatus is configured to be in an initial state of denying access from apparatuses other than the access management apparatus, and change to a standby state for connection to the first relay apparatus when having received an access permission request from the access management apparatus; the access management apparatus includes:
an access permission unit configured to extract, from the access permission list, information corresponding to the first relay apparatus, create the selection list, and transmit the selection list to the first relay apparatus, and when having received from the first relay apparatus an access request to the second relay apparatus, determine whether or not to permit the first relay apparatus to access the second relay apparatus based on the access permission list;a notification unit configured to, in a case where the first relay apparatus is permitted to access the second relay apparatus, notify the second relay apparatus of the access permission request, and notify the first relay apparatus of an access permission to the second relay apparatus; andan access recording unit configured to record a status of access from the first relay server to the second relay server as an access record information, update the access record information based on a session establishment notice from the first relay server including an update time, and update the access record information based on a session disconnection notice from the first relay server including a receipt time; the first relay apparatus includes:
a communication session establishment unit configured to establish a communication session with the second relay apparatus when having received the access permission, and an access status notification unit configured to notify the access management apparatus of the session establishment notice and the session disconnection notice; each of the first relay apparatus and the second relay apparatus includes a relay communication unit configured to relay, by using the communication session, communication between a first communication terminal connected to the first LAN on the first relay apparatus side and a second communication terminal connected to the second LAN on the second relay apparatus side; and the first, second, and third LANs are separate and different LANs.