JP4850549B2 - Data transmission method and data transmission system - Google Patents

Description

  The present invention relates to a data transfer technique using a relay device. For example, the present invention relates to a technique for transferring data from an outdoor mobile terminal to an indoor device via a public access point storage.

With the spread of public wireless networks and the adoption of networks for outdoor devices such as digital cameras, data transfer from outdoor devices to indoor devices has begun. Patent Document 1 proposes a data storage system that temporarily stores data in an image temporary storage server and then transfers the data from the image temporary storage server to the image server (see Patent Document 1). Further, in Patent Document 2, data is stored even when the outdoor device stores data in a specific server and the indoor device polls the server to acquire the data so that direct communication between the indoor and outdoor devices cannot be performed. A method for realizing transfer has been proposed (see Patent Document 2).
JP 2003-018542 A Japanese Patent Laying-Open No. 2005-079647

  According to the method of transferring data after temporarily storing data in a server or the like, the outdoor device can be disconnected from the temporary storage server when the temporary storage of data is completed. However, in order to access the indoor device from the temporary storage server and perform encrypted communication, the temporary storage server needs to store the authentication information of the indoor device, which has a problem in safety. Further, when the temporary storage server is a specific server, the data temporary storage destination is fixed. Therefore, when multiple outdoor devices store data on a specific server, access to the specific server is concentrated and the load increases. In addition, the traffic on the line with the outdoor device increases, and data transfer takes time, The outdoor device is restricted by the connection with the specific server for a long time.

  The present invention has been made in view of the above-described problems, and in secure data transfer between devices via a relay device, the device restraint time by the relay device is reduced and the security safety is improved. With the goal.

In order to achieve the above object, a data transfer method according to the present invention comprises:
A method of transferring data from a device to a server via a relay device,
A connection step in which the device wirelessly connects to the relay device;
A holding step in which the relay device holds data received from the device via the wireless connection in a storage device, and notifies the device of access information for accessing the data via the wireless connection ;
An establishment step in which the device establishes encrypted communication with the server via the relay device using a wireless connection that has transmitted the data to the relay device;
A transmission step in which the device transmits data acquisition information generated based on the access information to the server by the encrypted communication;
The server has a an acquisition step of acquiring the data from the relay apparatus according to establish an encrypted communication, the data acquisition information between the relay device.

  According to the present invention, in secure data transfer between devices via a relay device, the device restraint time by the relay device is reduced and the security safety is improved.

  Hereinafter, some preferred embodiments of the present invention will be described with reference to the accompanying drawings.

<First Embodiment>
FIG. 1 is a diagram showing a device configuration example of a data transfer system according to the first embodiment. The digital camera 101 can store a captured image as image data and transmit the image data to the outside via a wireless communication interface. The access point 102 includes a wireless communication interface and a communication interface that connects to the Internet. The access point 102 includes a storage 103, and can receive and store data (for example, image data) from a device (for example, the digital camera 1) connected via a wireless communication interface. The home server 104 can communicate with the access point 102 via the Internet 110 and the gateway 105. The gateway 105 is a gateway of the network to which the home server 104 belongs, has an SSL-VPN device, and can perform secure communication. Although an example using SSL-VPN (Secure Sockets Layer Virtual Private Network) will be described below, the form for realizing secure communication is not limited to SSL-VPN.

  The operation outline of the data transfer system of this embodiment will be described with reference to FIG. First, communication between the digital camera 101 and the access point 102 is established, and data (image data) held by the digital camera 101 is uploaded to the storage 103 (191). At this time, the digital camera 101 receives access information to the uploaded data from the access point 102. Subsequently, the digital camera 101 establishes SSL-VPN communication with the home server 104 via the access point 102, and transfers the access information received from the access point 102 to the home server 104 as a data acquisition command (192). The home server 104 that has received the data acquisition command establishes SSL-VPN communication with the access point 102 according to the access information. The home server 104 acquires data indicated by the access information (data stored in the storage 103 by the upload 191) from the access point 102 (193). The access point 102 deletes data accessed by the home server 104.

  As described above, the data of the digital camera 101 is securely transferred from, for example, the outdoor access point 102 to the indoor home server 104. That is, secure data transfer from the outdoor device (digital camera 101) to the indoor device (home server 104) via the storage of the public access point can be realized without the access point storing authentication information for the indoor device. Further, since such secure data transfer can be continued even after the outdoor device and the access point are disconnected, the time during which the digital camera 101 is restrained by the access point 102 can be reduced. Hereinafter, the data transfer operation will be described in detail.

  FIG. 2 is a block diagram illustrating a module configuration example of the digital camera 101. The control unit 200 includes a CPU and a memory (not shown) and realizes various controls in the digital camera 101. The imaging unit 210 drives an optical system and an imaging device (for example, a CCD) under the control of the control unit 200, and outputs captured image data. The control unit 200 stores captured image data (hereinafter referred to as image data) in the storage 201. The storage 201 is configured by a removable storage medium such as a compact flash (registered trademark) or an SD memory. The wireless communication interface 202 realizes wireless connection between the access point 102 and the digital camera 101 under the control of the control unit 200.

  The control unit 200 also functions as a data encryption unit 204, a command issue unit 205, and a data transmission / reception unit 206 when the CPU executes a control program. Further, the memory of the control unit 200 also functions as the authentication information storage unit 203. The authentication information storage unit 203 holds authentication information for connecting to the home server 104 from the outside. The data transmission / reception unit 206 reads data stored in the storage 201 and transmits it to the storage 103 of the access point 102 using the wireless communication interface 202. Further, the data transmission / reception unit 206 receives access information for data temporarily stored in the storage 103 from the access point 102 via the wireless communication interface 202. The data encryption unit 204 encrypts data to be transmitted to the access point 102, that is, data to be stored in the storage 103. The encryption by the data encryption unit 204 will be described in detail in the fifth embodiment. The command issuing unit 205 creates a data acquisition command to be provided to the home server 104. The data acquisition command is created based on access information to the data received by the data transmitting / receiving unit 206 from the access point 102.

  FIG. 3 is a block diagram illustrating a module configuration example of the access point 102. The control unit 300 includes a CPU and a memory (not shown), and realizes various controls at the access point 102. The wireless communication interface 302 is used for connection with the digital camera 101, and the wired communication interface 303 is used for connection with the Internet 110. In this embodiment, a class C private IP address (192.168.0.1) is assigned to the wireless communication interface 302. Further, it is assumed that the wired communication interface 303 is assigned a class B global IP address (130.0.0.1).

  The control unit 300 also functions as a data temporary storage management unit 304, a DHCP server 305, and a data transmission / reception unit 306 when the CPU executes a control program stored in the memory. The DHCP server 305 assigns a private IP address to a device connected to the access point via the wireless communication interface 302. The data temporary storage management unit 304 acquires data (for example, image data) from the digital camera 101 connected via the wireless communication interface 302 via the data transmission / reception unit 306 and stores it in the storage 103. Then, the temporary data storage management unit 304 notifies the digital camera 101 of access information to the data stored in the storage 103. When the home server 104 is connected via the wired communication interface 303 and access based on the access information is executed, data is read from the storage 103 and transmitted to the home server 104. Further, the data temporary storage management unit 304 deletes the data received by the home server 104 from the storage 103 and the access point 102.

  FIG. 4 is a block diagram illustrating a module configuration example of the home server 104. The control unit 300 includes a CPU and a memory (not shown), and realizes various controls in the home server 104. The wired communication interface 402 connects the home server 104 to the Internet 110 via the gateway 105. In this way, the home server 104 can perform encrypted communication with the access point 102. In the present embodiment, it is assumed that the wired communication interface 402 is assigned a class C private IP address (192.168.10.1). Further, it is assumed that a class B global IP address (131.0.0.1) is assigned to the WAN side port of the gateway, and the name can be resolved by FQDN: gw.myHome.net. The instruction storage unit 403 stores a data acquisition instruction received from the digital camera 101. The data receiving unit 404 connects to the access point 102 via the wired communication interface 402 and the Internet 110 based on the data access information stored in the command storage unit 403, and acquires data.

  Data transfer processing performed by the digital camera 101, the access point 102, and the home server 104 having the above-described configuration will be described in detail with reference to the flowcharts of FIGS. In the data transfer process described below, as described above with reference to FIG. 1, the image data stored in the storage 201 of the digital camera 101 is stored in the storage 401 of the home server 104 via the access point 102. . 5 is a flowchart for explaining the operation at the time of data transfer processing by the digital camera, FIG. 6 is a flowchart for explaining the operation at the time of data transfer processing by the access point, and FIG. 7 is for explaining the operation at the time of data transfer processing by the home server. It is a flowchart to do. The processing shown in each flowchart is realized by the control units 200, 300, and 400 of each device executing a predetermined control program.

  First, the digital camera 101 connects to the access point 102 via the wireless communication interface 202 in order to cause the access point 104 to hold data stored in the storage 201. When the digital camera 101 enters the wireless communicable area of the wireless communication interface 302 of the access point 102, the process proceeds from step S501 to step S502. In step S <b> 502, the digital camera 101 requests the DHCP server 305 of the access point 102 to assign a private IP address of the wireless communication interface 202. In response to this request, the access point 102 advances the process from step S600 to step S601 (FIG. 6). In step S601, the DHCP server 305 assigns a private IP address to the wireless communication interface 202. In this example, it is assumed that a private IP address (192.168.0.2) is assigned.

  In step S503, the digital camera 101 establishes a wireless communication connection with the access point 102 using the assigned private IP address (192.168.0.2). In step S <b> 504, the data transmission / reception unit 206 transmits data to the data transmission / reception unit 306 of the access point 102. Transmission of data to the access point 102 is continued until transmission of all data to be transmitted is completed (step S505). Data transmitted from the digital camera 101 to the access point 102 is, for example, image data. In the digital camera 101, image data to be transmitted can be designated by a predetermined operation, and the designated data is transmitted to the access point 102. At this time, the digital camera 101 may designate and transmit the data of the storage 201 one by one, or may sequentially send a plurality of designated images. Needless to say, the user can select any one of these transmission methods.

  The data transmitting / receiving unit 306 of the access point 102 receives data from the digital camera 101 in step S602. In step S603, the temporary data storage management unit 304 saves the data received by the data transmission / reception unit 306 in the storage 103 and creates access information for the data. FIG. 8 is a diagram showing a data configuration example of access information generated in the present embodiment. The data temporary storage management unit 304 according to the present embodiment generates, as access information, a URL that uses a hash value of data stored in the storage 103 as a path unit. That is, the access information of the present embodiment is a URL composed of a global IP address (130.0.0.1) assigned to the wired communication interface 303 and a hash value of stored data. In this embodiment, the data can be accessed by using SSL as a communication protocol and using the URL.

  Next, in step S604, the data transmission / reception unit 306 of the access point 102 transmits the access information generated in step S603 to the digital camera 102. The above steps S602 to S604 are executed every time data is transmitted from the digital camera 101 (step S504). Therefore, the access point 102 transmits access information to the digital camera 101 for each piece of data transmitted from the digital camera 101.

  Next, upon receiving access information from the access point 102 in step S506, the command issuing unit 205 of the digital camera 101 creates a data acquisition command for the home server 104 based on the access information to the data received in step S507. . As described above, in step S506, access information is received for each data transmitted in step S504. The home server 104 can be instructed only to acquire data, and the access information itself may be used as a data acquisition command. In this case, since the data acquisition command is the URL itself received from the access point 102, step S507 can be omitted.

  With the processing described above, data to be transmitted to the home server 104 in the digital camera 101 is stored in the access point 102. The above processing is the processing of the data upload 191 in FIG. Next, the home server 104 is caused to execute access to the access point 102 to acquire the data stored in the above process.

  First, the digital camera 101 starts encrypted communication with the home server 104 via the access point 102. In the present embodiment, SSL-VPN is used for this encrypted communication, but the present invention is not limited to this form. For example, TLS (Transport Layer Security) may be used as the encryption procedure. Since the use of SSL-VPN is obvious to those skilled in the art, detailed description thereof is omitted. It is also possible to issue a data acquisition command by connecting the digital camera 101 and the home server 104 via an access point different from the access point 102.

  In step S <b> 508 of FIG. 5, the control unit 200 of the digital camera 101 acquires authentication information from the authentication information storage unit 203. This authentication information includes the URL of the home server 104 and a client certificate required for SSL. The digital camera 101 accesses the URL of the home server 104 via SSL and requests connection approval using a client certificate. When the connection is approved, the SSL-VPN device of the gateway maps this to the address of the home server 104, and SSL-VPN communication between the digital camera 101 and the home server 104 is established. In this way, in step S509 (FIG. 5) and step S701 (FIG. 7), the SSL connection between the digital camera 101 and the home server 104 is established. FIG. 9 is a diagram illustrating an example of the URL 901 included in the authentication information and the URL 902 mapped by the gateway 105.

  Next, in step S510, the command issuing unit 204 of the digital camera 101 transmits a data acquisition command to the home server 104 using the SSL-VPN. Upon receiving the data acquisition command from the digital camera 101 in step S702, the home server 104 stores the data acquisition command received in step S703 in the command storage unit 403. Similarly, the digital camera 101 transmits a data acquisition command to the home server 104 for all data transmitted to the access point 102, and the home server 104 stores this in the command storage unit 403. The digital camera 101 transmits a data acquisition command corresponding to all the access points received in step S504 to the home server 104 (step S511). In the home server 104, all data acquisition commands received from the digital camera 101 are stored in the command storage unit 403.

  The above processing corresponds to the data acquisition command transmission processing 192 of FIG. After this data acquisition command transmission process 192 is completed, the home server 104 securely executes a data download process 193 from the access point 102. Therefore, after the data acquisition command transmission processing 192 is completed, the communication between the digital camera 101 and the access point 102 may be disconnected at any time, and the digital camera 101 is released from the restriction of the access point 102.

  In step S704, the home server 104 acquires a data acquisition command stored in the command storage unit 403. In step S705, SSL is connected to the URL specified by the data acquisition command acquired in step S704. The access point 102 proceeds from step S605 to step S606 in accordance with the SSL connection, and transmits the accessed data to the access source (home server 104). In step S <b> 706, the home server 104 receives the data from the access point 102 transmitted in response to the SSL connection and stores it in the storage 401. Data acquisition in the above steps S704 to S706 is executed for all the data acquisition commands stored in step S703 (step S707). It should be noted that SSL-VPN is also used for encrypted communication between the home server 104 and the access point 102, but the present invention is not limited to this form.

  In the access point 102, when the data transmission is completed, in step S607, the data temporary storage management unit 304 is accessed by the home server 104 and deletes the stored data (the data transmitted in step S606) from the storage 103.

  In this embodiment, it is assumed that data reception completion by the home server 104 is confirmed by monitoring reception completion notification such as ACK from the home server 104, and data is deleted after the reception completion is confirmed. However, the timing of data deletion is not limited to confirmation of completion of data reception, and other techniques such as when disconnection from the home server 104 is detected may be used.

  As described above, according to the first embodiment, in the secure data transfer between the digital camera 101 and the home server 104 via the access point 102, the restraint time by the digital camera 101 by the access point 102 can be reduced. it can. Further, the access point 102 does not need to hold the authentication information of the home server 104, and security safety is improved. In this embodiment, the digital camera 101 is used as an outdoor device and the home server 104 is used as an indoor device. However, the present invention is not limited to these. For example, it is apparent that the present invention can be applied to a system that transmits data to a server device as an indoor device using a portable terminal as an outdoor device.

Second Embodiment
In the first embodiment, data transfer to the home server 104 is realized by the home server 104 acquiring from the access point 102 based on a data acquisition command. In the second embodiment, while SSL communication is established between the digital camera 101 and the home server 104, data is transmitted from the digital camera 101 to the home server 104 using this SSL communication. . Then, after the SSL communication is disconnected, data is transmitted according to the method described in the first embodiment, that is, by performing access from the home server 104 to the access point 102 according to the data acquisition command.

  The apparatus which comprises the system of 2nd Embodiment, the structure of each apparatus, and operation | movement of each apparatus are based on 1st Embodiment (FIGS. 1-7). However, in the flowchart of FIG. 7, after storing the data acquisition command (after step S <b> 703), data is acquired from the digital camera 101 while SSL communication with the digital camera 101 is maintained. In the digital camera 101, after transmitting all the data acquisition commands (after the NO branch in step S511), the data is transferred to the home server 104 while the SSL communication with the home server 104 continues. At this time, a data acquisition command corresponding to data transferred to the home server 104 or information that can specify the data acquisition command is added. Based on the added information, the home server 104 identifies a data acquisition command that has been acquired through SSL communication with the digital camera 101 and is no longer necessary. Then, after executing the remaining data acquisition command (NO branch in step S707), the home server 104 notifies the access point 102 of the data acquisition command that is no longer necessary. Upon receiving this notification, the access point 102 deletes the data corresponding to the data acquisition command from the storage 103 that is no longer necessary.

  Data sent from the digital camera 101 to the home server 104 can be quickly deleted from the storage 103, and the deleted storage area can be used for storing data from other devices. Therefore, according to the present embodiment, the storage 103 can be effectively used by effectively using the time during which the digital camera 101 and the home server 104 are connected.

<Third Embodiment>
Next, a third embodiment will be described. In the first and second embodiments described above, the digital camera 101 has a function related to data transfer using the access point 102. However, the present invention is not limited to such a configuration. For example, an adapter that can be connected to a digital camera may have a function related to data transfer using the access point 102. In the third embodiment, such a configuration will be described.

  FIG. 10 is a diagram showing a device configuration example of the data transfer system according to the third embodiment. The digital camera 101 'stores captured images as image data, and is connected to the adapter 1100 via communication means such as a USB interface. The adapter 1100 can receive image data from the digital camera 101 ′ via the communication unit and transmit it to the outside via a wireless communication interface.

  FIG. 11A is a block diagram illustrating a module configuration example of a digital camera 101 ′ according to the third embodiment. The storage 201 and the imaging unit 210 are configured according to the first embodiment (FIG. 2). In addition to the function of the data receiving unit 206 of the first embodiment, the data receiving unit 206 ′ of the third embodiment also transfers data (image data) stored in the storage 201 via the USB interface 1001 to the adapter 1100. A function to transmit is provided. The control unit 200 'does not have the configuration indicated by the reference numbers 203 to 205 in FIG. In the third embodiment, these configurations are provided in the adapter 1100. The USB interface 1001 realizes USB connection with an external device.

  FIG. 11B is a block diagram illustrating a module configuration example of the adapter 1100 according to the third embodiment. The control unit 1101 includes an authentication information storage unit 203 ′, a data encryption unit 204 ′, and a command issue unit 205 ′. These are configurations similar to the authentication information storage unit 203, the data encryption unit 204, and the command issuing unit 205 that are mounted on the camera 101 in the first embodiment. The data transmitting / receiving unit 206 ″ has a function of receiving data from the digital camera 101 ′ connected via the USB interface 1102. The wireless interface 1103 can perform wireless communication with the access point 102. In this embodiment, the USB interface (1001, 1102) is used for connection between the digital camera 101 ′ and the adapter 1100, but the present invention is not limited to this.

  The data transfer procedure in the third embodiment is the same as that in the first embodiment except for the following differences. The difference is that in step S504 (FIG. 5) of the first embodiment, the data transmitting / receiving unit 206 of the digital camera 101 transmits data to the access point, but in the third embodiment, data is transmitted via the adapter 1100. It is. That is, the data transmission / reception unit 206 ″ of the adapter 1101 acquires data from the storage 201 of the digital camera 101 ′ via the USB interfaces 1001 and 1102, and transmits this data to the access point 102 via the wireless interface 1103.

  According to the third embodiment as described above, the data transmission procedure as in the first embodiment can be realized by connecting the adapter 1100 with a general-purpose interface such as USB. Therefore, even when the digital camera does not have a configuration for transferring data by connecting to an access point, the data transfer processing as in the first or second embodiment can be realized by connecting the adapter 1100. become able to.

<Fourth embodiment>
In the first to third embodiments, authentication information is stored in advance in authentication information storage units 203 and 203 ′ included in the digital camera 101 or the adapter 1100. However, the authentication information may be acquired using an external module that holds the authentication information. For example, authentication information may be stored in a device such as a USB key, and this may be read and used when establishing encrypted communication with the home server 104.

<Fifth Embodiment>
In the fifth embodiment, data temporarily stored in the storage 103 of the access point 102 is encrypted and stored. In the fifth embodiment, data encryption / decryption is performed using the private key / public key pair of the home server 104, but the present invention is not limited to this method. The procedure is described below. Since procedures other than encryption are the same as those in the first embodiment, description thereof is omitted. In addition, it is obvious that the encryption of the fifth embodiment can be applied to the configuration using the adapter shown in the third embodiment.

  First, the public key of the home server 104 is stored in the authentication information storage unit 203 of the digital camera 101. Next, when data is transmitted to the storage 103 of the access point 102, the data encryption unit 204 encrypts the data with the public key and transmits the data. In addition, when the home server 104 acquires data from the access point 102, the home server 104 decrypts the data with the secret key and then stores the data in the storage 401.

  As described above, according to the fifth embodiment, the data stored in the storage 103 is encrypted so that it can be decrypted in the transfer destination home server 104, so that the security is further improved. In addition, since already encrypted data is communicated between the access point 102 and the home server, security is further improved.

<Sixth Embodiment>
The home server 104 may be configured to request access authentication when acquiring data from the access point 102. In the sixth embodiment, the access point 102 issues a one-time password for each data, but the present invention is not limited to this method. The procedure is shown below. Since procedures other than authentication are the same as those in the first embodiment, description thereof is omitted. Also, it is obvious that the access authentication of the fifth embodiment can be applied to the configuration using the adapter shown in the third embodiment.

  In step S <b> 603, when the data temporary storage management unit 304 of the access point 102 receives data from the digital camera 101, it generates a one-time password. Then, the temporary data storage management unit 304 includes the generated one-time password in the access information and transmits the access information to the digital camera 101, and stores the data and the one-time password in the storage 103 as a set. In step S507, the command issuing unit 205 of the digital camera 101 creates a data acquisition command including the above one-time password. In step S510, a data acquisition command including the one-time password is transmitted to the home server 104. The home server 104 acquires a one-time password from the data acquisition command acquired in step S704, and presents the one-time password for authentication when acquiring data from the access point 102 in step S706.

  As described above, according to the sixth embodiment, since password authentication is performed for each data, security is further improved.

<Seventh embodiment>
In the first to sixth embodiments, no limitation is imposed on the data that can be stored in the storage 103 of the access point 102. In the seventh embodiment, it is possible to place arbitrary restrictions on data that can be stored in the storage 103, such as data capacity, number of data, and storage period. In addition, as processing when there is data that cannot be stored in the storage 103 due to the set restriction, various processes such as displaying a warning on the digital camera 101, displaying the stored data separately from the data not stored, etc. Can be used.

<Eighth Embodiment>
In the first to seventh embodiments, the communication interface between the digital camera and the access point and between the adapter and the access point is wireless, and the communication between the access point and the home server is wired. However, the present invention is not limited to this. Any interface can be used as a communication interface between the digital camera 101 (or the adapter 1100), the access point 102, and the home server 104.

<Ninth Embodiment>
Next, a ninth embodiment will be described. FIG. 12 is a diagram showing a device configuration example of a system according to the ninth embodiment. The system of the ninth embodiment includes a mobile phone 1201, an access point 1202, a storage 1203 provided in the access point 1202, and a base station 1204 of the mobile phone 1201. The system of the ninth embodiment includes a home server 1205, a home network gateway 1206, and a gateway 1207 from the public network of the mobile phone 1201 to the Internet.

  FIG. 13 is a block diagram illustrating a module configuration example of the mobile phone 1201 according to the ninth embodiment. The cellular phone 1201 includes a control unit 1300, a storage 1301, a near field communication interface 1302, and a public wireless interface 1303. The near field communication interface 1302 is used for connection with the wireless communication interface of the access point 1202. The public wireless interface 1303 is an interface to the public network. The authentication information storage unit 1304, the data encryption unit 1305, the command issue unit 1306, and the data transmission / reception unit 1307 configured by the control unit 1300 correspond to 203 to 206 in the first embodiment (FIG. 2), respectively. The module configuration of the access point 1202, the home server 1205, and the gateway 1206 is the same as that of the access point 102, the home server 104, and the gateway 105 of the first embodiment.

  Next, a procedure for transferring data from the mobile phone storage 1301 to the home server storage 401 in the ninth embodiment will be described. First, the mobile phone 1201 connects to the access point 1202 using the short-range wireless interface 1302. Thereafter, the same procedure as steps S502 to S506 in the first embodiment (FIG. 5) is executed to save the data of the storage 1301 in the storage 1203 of the access point 1202, and obtain access information to the data from the access point 1202 To do. The above is the download process 191 'of FIG. Next, the mobile phone 1201 connects to the base station 1204 using the public network interface 1303 and connects to the Internet 110 via the gateway 1207. The mobile phone 1201 connected to the Internet 110 continues to execute the same procedure as steps S507 to S509 of the first embodiment and transmits a data acquisition command to the home server 1205. The above is the data acquisition command transmission processing 192 'of FIG.

  The subsequent procedures at the home server and access point are the same as in the first embodiment. That is, the home server 1205 connects to the access point 1202 via SSL, and executes a download process 193 ′ that acquires data stored in the storage 1203 in accordance with a data acquisition command.

  As described above, according to the ninth embodiment, it is possible to transfer image data or the like to a home server using a mobile phone. In particular, a data acquisition command is notified to the home server via a public line, and data transfer is realized by an Internet connection between the access point and the home server. As described above, since data having a large transfer capacity is transmitted through the Internet connection, it is possible to prevent unnecessary increase in traffic on the public line.

<Other embodiments>
Although the embodiment has been described in detail above, the present invention can take an embodiment as a system, apparatus, method, program, storage medium, or the like. Specifically, the present invention may be applied to a system composed of a plurality of devices, or may be applied to an apparatus composed of a single device.

  In the present invention, the functions of the above-described embodiments are achieved by supplying a software program directly or remotely to a system or apparatus, and the computer of the system or apparatus reads and executes the supplied program code. Including the case. In this case, the supplied program is a program corresponding to the flowchart shown in the drawing in the embodiment.

  Accordingly, since the functions of the present invention are implemented by computer, the program code installed in the computer also implements the present invention. In other words, the present invention includes a computer program itself for realizing the functional processing of the present invention.

  In that case, as long as it has the function of a program, it may be in the form of object code, a program executed by an interpreter, script data supplied to the OS, or the like.

  Examples of the recording medium for supplying the program include the following. For example, floppy (registered trademark) disk, hard disk, optical disk, magneto-optical disk, MO, CD-ROM, CD-R, CD-RW, magnetic tape, nonvolatile memory card, ROM, DVD (DVD-ROM, DVD- R).

  As another program supply method, a client computer browser is used to connect to a homepage on the Internet, and the computer program of the present invention is downloaded from the homepage to a recording medium such as a hard disk. In this case, the downloaded program may be a compressed file including an automatic installation function. It can also be realized by dividing the program code constituting the program of the present invention into a plurality of files and downloading each file from a different homepage. That is, a WWW server that allows a plurality of users to download a program file for realizing the functional processing of the present invention on a computer is also included in the present invention.

  Further, the program of the present invention may be encrypted, stored in a storage medium such as a CD-ROM, and distributed to users. In this case, a user who has cleared a predetermined condition is allowed to download key information for decryption from a homepage via the Internet, execute an encrypted program using the key information, and install the program on the computer. You can also.

  In addition to the functions of the above-described embodiment being realized by the computer executing the read program, the embodiment of the embodiment is implemented in cooperation with an OS or the like running on the computer based on an instruction of the program. A function may be realized. In this case, the OS or the like performs part or all of the actual processing, and the functions of the above-described embodiments are realized by the processing.

  Furthermore, the program read from the recording medium is written in a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, so that part or all of the functions of the above-described embodiments are realized. May be. In this case, after a program is written in the function expansion board or function expansion unit, the CPU or the like provided in the function expansion board or function expansion unit performs part or all of the actual processing based on the instructions of the program.

  As described above, according to the first to tenth embodiments, the storage of the access point temporarily stores the data to be transmitted to the indoor device, and the indoor device asynchronously acquires the data from the access point. . For this reason, even if the communication speed between the access point and the indoor device is low, if the high-speed communication can be performed between the access point and the outdoor device, the outdoor device can be prevented from being restrained by the access point for a long time. In addition, since data is acquired by accessing the access point from the indoor device, it is not necessary for the access point to store authentication information necessary for connection to the indoor device, and security can be improved.

It is a figure which shows the apparatus structural example of the data transfer system by 1st Embodiment. It is a block diagram which shows the module structural example of the digital camera by 1st Embodiment. It is a block diagram which shows the module structural example of the access point by 1st Embodiment. It is a block diagram which shows the module structural example of the home server by 1st Embodiment. It is a flowchart explaining the process in the digital camera by 1st Embodiment. It is a flowchart explaining the process in the access point by 1st Embodiment. It is a flowchart explaining the process in the home server by 1st Embodiment. It is an example of URL which accesses the data preserve | saved at the access point. It is explanatory drawing of access URL for performing SSL-VPN. It is a figure which shows the apparatus structural example of the data transfer system by 3rd Embodiment. It is a block diagram which shows the module structural example of the digital camera in 3rd Embodiment. It is a block diagram which shows the module structural example of the adapter in 3rd Embodiment. It is a figure which shows the apparatus structural example of the data transfer system by 9th Embodiment. It is a block diagram which shows the module structural example of the mobile telephone by 9th Embodiment.

Claims (9)

A method of transferring data from a device to a server via a relay device,
A connection step in which the device wirelessly connects to the relay device;
A holding step in which the relay device holds data received from the device via the wireless connection in a storage device, and notifies the device of access information for accessing the data via the wireless connection ;
An establishment step in which the device establishes encrypted communication with the server via the relay device using a wireless connection that has transmitted the data to the relay device;
A transmission step in which the device transmits data acquisition information generated based on the access information to the server by the encrypted communication;
A data transfer method comprising: an acquisition step in which the server establishes encrypted communication with the relay device and acquires the data from the relay device according to the data acquisition information .   The data transfer method according to claim 1, further comprising a deletion step in which the relay device deletes data acquired by the server from the storage device.   The data transfer method according to claim 1, wherein in the holding step, the device causes the storage device to hold data encrypted by a method that can be decrypted by the server. Wherein in the holding step, the relay device the holds the storage device by applying the authentication information to the data, the device access information for accessing the authentication information and the data which has been granted to each data held Notify
In the transmission step, the device transmits a data acquisition command generated based on the access information and the authentication information,
The data transfer method according to claim 1, wherein, in the acquisition step, authentication is performed based on the authentication information when data is acquired from the relay device.   The data transfer method according to claim 1, wherein in the holding step, a restriction is provided on data that the device can hold in the storage device. A data transfer system for transferring data from a device to a server via a relay device,
In the device, connection means for wireless connection with the relay device;
In the relay device, holding means for holding data received from the device via the wireless connection in a storage device, and notifying the device of access information for accessing the data via the wireless connection ;
Establishing means for establishing encrypted communication with the server via the relay device using the wireless connection in which the device has transmitted the data to the relay device;
Transmission means for the device to transmit data acquisition information generated based on the access information to the server by the encrypted communication;
A data transfer system comprising: an acquisition unit that establishes encrypted communication with the relay device and acquires the data from the relay device according to the data acquisition information . A device that transfers data to a server via a relay device,
Connection means for wirelessly connecting to the relay device;
Transmitting means for transmitting data to the relay device via the wireless connection ;
Receiving means for receiving access information to the data transmitted by the transmitting means from the relay device via the wireless connection ;
Generation means for generating data acquisition information for acquiring the data transmitted by the server by the transmission means based on the access information;
Using the wireless connection that transmitted the data to the relay device, and establishing encrypted communication with the server via the relay device, and notifying means for notifying the server of the data acquisition information , Equipment to do. A device control method for transferring data to a server via a relay device,
A connection step of wirelessly connecting to the relay device;
A transmission step of transmitting data to the relay device via the wireless connection ;
A reception step of receiving, from the relay device, access information to the data transmitted in the transmission step via the wireless connection ;
A generation step of generating data acquisition information for acquiring the data transmitted by the server in the transmission step based on the access information;
Using the wireless connection that transmitted the data to the relay device, establishing encrypted communication with the server via the relay device, and notifying the server of the data acquisition information , Control method to do. A control program for causing a computer to execute each step of the control method according to claim 8 .

Images