Session relay system, client terminal, session relay method, remote access method, session relay program and client program

• US 20030204601A1
• Filed: 03/13/2003
• Published: 10/30/2003
• Est. Priority Date: 04/26/2002
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Takano, Kohji
• Application Number:
  US10/388,355
• Publication Number:
  US 20030204601A1
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

To enable access to a server via telnet or the like even if access to the server via telnet or the like from an external network is limited by a firewall. In order to accomplish this, first and second sessions are conducted between first and second information processing systems 2, 1 according to first and second protocols and, by relaying between the first and second sessions, a third session is established between the first and second information processing systems. A processing result sent from the second information processing system 1 to the first information processing system 2 is stored in a buffer 35 of a session relay system 3 and transferred to the first information processing system 2 in response to an update request. With this arrangement, even if a firewall 6 preventing the second session from passing therethrough exists on the first session, a session can be established between the first and second information processing systems 2, 1, and further, even such a processing result that is sent while the first session is disconnected can also be received by the first information processing system.

Claims

1. A session relay system that conducts a plurality of first sessions with a first information processing system according to a first protocol, and a second session with a second information processing system according to a second protocol, and relays between the plurality of first sessions and one said second session to establish a third session composed of those sessions, said session relay system comprising:

session managing means for producing ID information for identifying said third session that is established in response to a connection request from said first information processing system, and sending said ID information to said first information processing system having made said connection request; and

processing result transfer means for sending data of a processing result to said first information processing system, said data of the processing result sent from said second information processing system in response to a processing request sent from said first information processing system along with said ID information.

2. A session relay system according to claim 1, wherein said processing result transfer means comprises buffer means for storing the data of the processing result sent from said second information processing system in response to said processing request, in a buffer correspondingly to the ID information sent along with said processing request, and update means, responsive to an update request along with said ID information from said first information processing system, for sending data in the buffer corresponding to said ID information to said first information processing system, said data in the buffer not yet sent to said first information processing system.

3. A session relay system according to claim 2, wherein said connection request and said update request are made via the different first sessions.

4. A session relay system according to claim 2, wherein said buffer is a ring buffer provided per said ID information, and said buffer means adds said data of the processing result to the corresponding ring buffer, and sends said data of the processing result to said first information processing system along with position information relating to a position of the end of said added data in said ring buffer after the addition of said data, and further adds to said corresponding ring buffer in sequence data of the processing result that is sent subsequently to disconnection of said first session following the termination of the data sending to said first information processing system.

5. A session relay system according to claim 4, wherein, upon sending the data of the processing result in response to the update request accompanied by the ID information, said update means sends to said first information processing system data subsequent to said position, which is sent along with said update request, in said ring buffer corresponding to said ID information.

6. A session relay system according to claim 1, wherein said first information processing system exists outside a first firewall, said session relay system and said second information processing system exist inside said first firewall, and said first session can be conducted by passing through said first firewall.

7. A session relay system according to claim 6, wherein said session relay system comprises a third information processing system that conducts the first session with said first information processing system, and a fourth information processing system that conducts the second session with said second information processing system and is capable of communicating with said third information processing system according to a third protocol, and wherein communication between said third and fourth information processing systems according to said third protocol is conducted by passing through a second firewall, said third information processing system includes said session managing means, and said fourth information processing system establishes the second session with said second information processing system and relays between the communication according to said third protocol and the communication according to said second protocol.

8. A session relay system according to claim 1, wherein said first protocol is HTTP.

9. A session relay system according to claim 1, wherein said second protocol is telnet.

10. A client terminal comprising:

connection requesting means for receiving a connection request for connection to a predetermined server and sending said connection request to a predetermined session relay system via a session according to a predetermined protocol;

ID information receiving means for receiving ID information sent from said session relay system for identifying an upper session with said server, said upper session including said session and established in response to said connection request;

processing requesting means for receiving a processing request to said server and sending said processing request to said session relay system along with said ID information;

update requesting means for sending an update request to said session relay system along with said ID information, said update request requesting an update by data of a processing result sent from said server in response to said processing request and stored in said session relay system; and

display means for displaying data sent from said session relay system in response to said update request.

11. A session relay method that conducts first sessions with a first information processing system according to a first protocol, and a second session with a second information processing system according to a second protocol, and relays between the plurality of first sessions and one said second session to establish a third session composed of those sessions, said session relay method comprising:

a session managing step of producing ID information for identifying said third session that is established in response to a connection request from said first information processing system, and sending said ID information to said first information processing system having made said connection request; and

a processing result transfer step of sending data of a processing result to said first information processing system, said data of the processing result sent from said second information processing system in response to a processing request sent from said first information processing system along with said ID information.

12. A session relay method according to claim 11, wherein said processing result transfer step comprises a storing step of storing the data of the processing result sent from said second information processing system in response to said processing request, in a buffer correspondingly to the ID information sent along with said processing request, and an update step of, responsive to an update request along with said ID information from said first information processing system, sending data in the buffer corresponding to said ID information to said first information processing system, said data in the buffer not yet sent to said first information processing system.

13. A session relay method according to claim 12, wherein said connection request and said update request are made via the different first sessions.

14. A session relay method according to claim 12, wherein said buffer is a ring buffer provided per said ID information, and said storing step adds said data of the processing result to the corresponding ring buffer, and sends said data of the processing result to said first information processing system along with position information relating to a position of the end of said added data in said ring buffer after the addition of said data, and further adds to said corresponding ring buffer in sequence data of the processing result that is sent subsequently to disconnection of said first session following the termination of the data sending to said first information processing system.

15. A session relay method according to claim 14, wherein, upon sending the data of the processing result in response to the update request accompanied by the ID information, said update step sends to said first information processing system data subsequent to said position, which is sent along with said update request, in said ring buffer corresponding to said ID information.

16. A session relay method according to claim 11, wherein said first information processing system exists outside a first firewall, said session relay system and said second information processing system exist inside said first firewall, and said first session can be conducted by passing through said first firewall.

17. A session relay method according to claim 16, wherein the first session with said first information processing system is conducted by a third information processing system, and the second session with said second information processing system is conducted by a fourth information processing system capable of communicating with said third information processing system according to a third protocol, and wherein communication between said third and fourth information processing systems according to said third protocol is conducted by passing through a second firewall, said third information processing system performs said session managing step, and said fourth information processing system establishes the second session with said second information processing system and relays between the communication according to said third protocol and the communication according to said second protocol.

18. A session relay method according to claim 11, wherein said first protocol is HTTP.

19. A session relay method according to claim 11, wherein said second protocol is telnet.

20. A remote access method comprising:

a connection requesting step of receiving a connection request for connection to a server inside a firewall and sending said connection request to a session relay system inside said firewall via one session according to a protocol that can pass through said firewall;

an ID information receiving step of receiving ID information sent from said session relay system for identifying an upper session with said server, said upper session including said one session and established in response to said connection request;

a processing requesting step of receiving a processing request to said server and sending said processing request to said session relay system along with said ID information;

an update requesting step of sending an update request to said session relay system along with said ID information via a session, other than said one session, according to said protocol and included in said upper session, said update request requesting an update by data of a processing result sent from said server in response to said processing request and stored in said session relay system; and

a display step of displaying data sent from said session relay system in response to said update request.

21. A remote access method according to claim 20, further comprising a step of storing a position of the end of a ring buffer of said session relay system sent from said session relay system along with the data of the processing result, wherein, upon sending said update request, said update requesting step sends the stored newest position simultaneously.

22. A remote access method according to claim 20, wherein said protocol is HTTP.

23. Computer readable program code comprising:

connection requesting means for receiving a connection request for connection to a predetermined server and sending said connection request to a predetermined session relay system via a session according to a predetermined protocol;

ID information receiving means for receiving ID information sent from said session relay system for identifying an upper session with said server, said upper session including said session and established in response to said connection request;

processing requesting means for receiving a processing request to said server and sending said processing request to said session relay system along with said ID information;

update requesting means for sending an update request to said session relay system along with said ID information, said update request requesting an update by data of a processing result sent from said server in response to said processing request and stored in said session relay system; and

display means for displaying data sent from said session relay system in response to said update request.

24. Computer readable program code for implementing a session relay method that conducts first sessions with a first information processing system according to a first protocol, and a second session with a second information processing system according to a second protocol, and relays between the plurality of first sessions and one said second session to establish a third session composed of those sessions, said session relay method comprising:

a session managing step of producing ID information for identifying said third session that is established in response to a connection request from said first information processing system, and sending said ID information to said first information processing system having made said connection request; and

a processing result transfer step of sending data of a processing result to said first information processing system, said data of the processing result sent from said second information processing system in response to a processing request sent from said first information processing system along with said ID information.