JP2019022187A - Suspicion place estimation device, and suspicion place estimation method - Google Patents

Abstract

To perform suspicion place estimation related to a mobile communication proprietor network and a virtual mobile communication proprietor network from the log information of a terminal performing communication via the virtual mobile communication proprietor network.SOLUTION: A suspicion place estimation device includes a reception part for receiving log information generated in the Web page display process in multiple terminals, and an estimation part for estimating a suspicion place of a quality deterioration factor related to display of the Web page, based on the determination of conditions about the required times in each of multiple stages in the display process, included in multiple types of log information received by the reception part, and the determination whether the wireless quality conditions are satisfied for the wireless quality data in the display process.SELECTED DRAWING: Figure 3

Description

  The present invention relates to a technique for estimating a suspected portion of quality degradation in a web browsing service via a virtual mobile communication carrier network.

  The number of users of smartphones and tablets is increasing, but recently, the number of users who use virtual mobile network operators (MVNOs), which are less expensive than mobile carriers, is increasing. ing. In addition, high-speed technology such as carrier aggregation is also progressing, and various mobile services have been used. Among them, the web application service is a service that is used by many users and is in high demand.

  However, the quality of the mobile NW environment varies greatly depending on the time zone and location used. When quality degradation occurs, for example, when the requested page is displayed slowly while using the service, it is necessary for the mobile telecommunications carrier to urgently deal with it, but the cause and location of degradation cannot be identified immediately. In some cases, the response is delayed, which may reduce user satisfaction (QoE: quality of experience) and lead to customer churn.

  So far, techniques for estimating a quality degradation point from a Web browser log have been proposed. For example, Patent Document 1 discloses a technique for identifying a suspected place by a point region (threshold value) specified in the Euclidean space. Further, Patent Document 2 discloses a technique for estimating a suspected place by comparing an index given when making a suspected determination of each area (terminal, mobile carrier network, POI, server) with a threshold value. Is disclosed.

Honda et al., “Suspicious Location Estimation Device and Suspicious Location Estimation Method”, JP-A-2006-92500 Yoshimura et al., "Suspicious point estimation device and suspected part estimation method", Japanese Patent Application Laid-Open No. 2017-28546.

  The technology proposed so far is estimation of a suspected quality deterioration target for the NW configuration of the mobile communication carrier, and not the virtual mobile communication carrier. In the NW configuration of the virtual mobile carrier, the Web page is displayed via both the mobile carrier network and the virtual mobile carrier network. However, when quality degradation occurs in the wireless NW section, The technology does not consider the separation of both networks, and it is difficult to estimate which network is a suspected quality degradation point. This separation is very important, especially because the wireless access section can be a bottleneck in the mobile carrier network and the connection point with the mobile carrier network in the virtual mobile carrier network. It is a viewpoint.

  The present invention has been made in view of the above points, and from the log information of the terminal that performs communication via the virtual mobile carrier network, the suspected location relating to the mobile carrier network and the virtual mobile carrier network An object is to provide a technique that enables estimation.

According to the disclosed technology, a receiving unit that receives log information generated in the process of displaying a Web page on a plurality of terminals;
Each of the plurality of log information received by the receiving unit satisfies the condition determination for the time required for each of the plurality of stages in the display process and the radio quality condition for the radio quality data in the display process. And an estimation unit that estimates a suspected location of a factor of quality deterioration related to the display of the web page, based on both determination results,
There is provided a suspected place estimation apparatus characterized by comprising:

  According to the disclosed technology, a technology is provided that enables estimation of a suspected location relating to a mobile communication carrier network and a virtual mobile communication carrier network from log information of a terminal that performs communication via the virtual mobile communication carrier network. Is done.

It is a figure which shows the structural example of the Web system in embodiment of this invention. It is a figure which shows the hardware structural example of the suspicious part estimation apparatus in embodiment of this invention. It is a figure which shows the function structural example of the user terminal and suspected place estimation apparatus in embodiment of this invention. It is a flowchart for demonstrating an example of the process sequence which a user terminal performs. It is a figure which shows the structural example of the browser log transmitted to a suspected place estimation apparatus from a user terminal. It is a figure which shows an example of the process sequence of a display process of a web page. It is a figure which shows an example of the index value group contained in a browser log. It is a flowchart for demonstrating an example of the process sequence which a suspected location estimation apparatus performs.

  Hereinafter, an embodiment (this embodiment) of the present invention will be described with reference to the drawings. The embodiment described below is merely an example, and the embodiment to which the present invention is applied is not limited to the following embodiment.

(System configuration)
FIG. 1 is a diagram illustrating a configuration example of a Web system according to an embodiment of the present invention. In FIG. 1, one or more user terminals 20 can be connected to a virtual mobile carrier network N3 via a mobile carrier N2 via any one of one or more base stations 30. Further, the user terminal 20 can communicate with one or more Web servers 40 via the mobile communication carrier network N2, the virtual mobile communication carrier network N3, the POI, the Internet N1, and the like. Furthermore, the user terminal 20 can communicate with the suspected place estimation device 10 via, for example, the mobile communication carrier network N2 and the virtual mobile communication carrier network N3.

  The user terminal 20 is a communication terminal provided with a web browser (hereinafter simply referred to as “browser”) capable of displaying a web page. For example, a mobile phone, a smartphone, a tablet terminal, an in-vehicle device, a PC (Personal Computer), or the like may be used as the user terminal 20. The Web page is data including, for example, HTML (Hyper Text Markup Language), CSS (Cascading Style Sheets), and a script.

  The suspicious part estimation device 10 is a computer that estimates the suspicious part that causes the deterioration of the Web page displayed on the user terminal 20 such as a display time (display waiting time). In the embodiment of the present invention, the suspected place includes the user terminal 20, the base station 30, the mobile communication operator network N2, the virtual mobile communication operator network N3 including the inter-operator POI, the POI (or the Internet N1), And one of the six communication locations of the Web server 40. Note that the suspected place estimation device 10 may be installed in a virtual mobile communication carrier, for example.

  The Web server 40 is one or more computers that implement a Web site that stores or generates a Web page.

  FIG. 2 is a diagram illustrating a hardware configuration example of the suspected place estimation apparatus according to the embodiment of the present invention. 2 includes a drive device 100, an auxiliary storage device 102, a memory device 103, a CPU 104, an interface device 105, and the like that are connected to each other via a bus B.

  A program that realizes processing in the suspected place estimation apparatus 10 is provided by a recording medium 101 such as a CD-ROM. When the recording medium 101 storing the program is set in the drive device 100, the program is installed from the recording medium 101 to the auxiliary storage device 102 via the drive device 100. However, the program need not be installed from the recording medium 101 and may be downloaded from another computer via a network. The auxiliary storage device 102 stores the installed program and also stores necessary files and data.

  The memory device 103 reads the program from the auxiliary storage device 102 and stores it when there is an instruction to start the program. The CPU 104 executes a function related to the suspected place estimation device 10 according to a program stored in the memory device 103. The interface device 105 is used as an interface for connecting to a network.

  FIG. 3 is a diagram illustrating a functional configuration example of the user terminal and the suspected place estimation device according to the embodiment of the present invention. In FIG. 3, the user terminal 20 includes a Web display control unit 21, a log generation unit 22, a log transmission unit 23, a log storage unit 24, and the like. Each of these units is realized by processing that one or more programs installed in the user terminal 20 cause the CPU of the user terminal 20 to execute.

  The Web display control unit 21 downloads a Web page, displays a Web page, and the like in response to an input of a Web page display instruction by the user. The Web page display instruction is, for example, input of a URL (Uniform Resource Locator), selection of a link in a Web page that has already been displayed, or the like. Note that the Web display control unit 21 may be realized, for example, by a process that a Web browser program causes the CPU of the user terminal 20 to execute.

  The log generation unit 22 is triggered by an input of a display instruction for a Web page, by calling a navigation timing API, a standard API provided in the OS (Operating System) of the user terminal 20, or the like until the Web page is displayed. The time required for a plurality of stages (a plurality of sections) in the process and the wireless quality data in the Web page display process are measured, and a log including the measurement result (hereinafter referred to as “browser log”) is generated. Here, RSRQ and RSSNR are used as radio quality data, but the present invention is not limited to this. For example, any one or more of RSRP, RSRQ, RSSI, and RSSNR may be used.

  The log transmission unit 23 transmits the browser log generated by the log generation unit 22 to the suspected place estimation device 10. Alternatively, the log transmission unit 23 transmits the browser log stored in the log storage unit 24 to the suspected place estimation device 10.

  The log storage unit 24 stores (stores) the browser log generated by the log generation unit 22.

  Note that the program that causes the user terminal 20 to function as the log generation unit 22 and the log transmission unit 23 may be implemented as a plug-in for a Web browser, for example. For example, when there is a report of quality degradation of Web page display time from the user terminal 20 to the virtual mobile carrier, the plug from the virtual mobile carrier to the user terminal 20 In may be transferred.

  The suspected place estimation device 10 includes a log receiving unit 11 and an estimation unit 12. Each of these units is realized by a process that the CPU 104 causes one or more programs installed in the suspected place estimation apparatus 10 to execute. The suspected place estimation apparatus 10 also uses the log storage unit 13. The log storage unit 13 can be realized by using a storage device that can be connected to the auxiliary storage device 102 or the suspected place estimation device 10 via a network.

  The log receiving unit 11 receives a browser log transmitted from the user terminal 20. The log receiving unit 11 stores the received browser log in the log storage unit 13. Accordingly, the browser log is accumulated in the log storage unit 13. Note that the browser log includes the time required for a plurality of stages constituting the display process of the Web page on the user terminal 20. The estimation unit 12 determines whether or not the conditions relating to the time required for a plurality of stages constituting the display process of the Web page included in the browser log stored in the log storage unit 13 are satisfied, and the Web page The suspected part of the cause of quality degradation of the display is estimated. In other words, in the present embodiment, based on the output information of Navigation Timing, etc., it is possible to identify the suspected portion of quality degradation with higher granularity (or accuracy).

  In the embodiment of the present invention, the following (1) to (3) are assumed.

  (1) One browser log is information related to access to the same site (Web server 40) by a single user terminal 20. That is, the browser log is generated for each access to the Web server 40 by the user terminal 20.

  (2) A resolver (DNS (Domain Name System) server) used by the user terminal 20 for name resolution is installed in the mobile carrier network N2 and the virtual mobile carrier N3. For queries for which the resolver does not have a cache, name resolution is requested from the resolver to the authority server on the Internet N1 in accordance with normal DNS operations.

  (3) A TCP (Transmission Control Protocol) 3-way handshake (3-Way handshake) when the user terminal 20 downloads a Web page is executed with the Web server 40 of the Internet N1.

  Further, the estimation unit 12 determines whether or not the given radio quality condition is satisfied for the radio quality data included in the browser log stored in the log storage unit 13 and determines whether the radio access section is a suspected place. Is estimated. As a result, it is possible to identify whether the suspected portion of quality degradation is a radio access section or is higher than the radio access section.

(System operation)
Hereinafter, processing procedures executed by each of the user terminal 20 and the suspected place estimation device 10 will be described. FIG. 4 is a flowchart for explaining an example of a processing procedure executed by the user terminal 20.

  The log generation unit 22 waits for an input of a web page display instruction to the web browser (S101). When the log generation unit 22 detects an input of the display instruction (Yes in S101), the log generation unit 22 calls a navigation timing API, an API of the OS, or the like (S102), and generates a browser log including information obtained by the API (S103). . The generated browser log is stored in the log storage unit 24. Subsequently, the log transmission unit 23 transmits the browser log to the suspected place estimation device 10 (S104). Note that the transmission of the browser log to the suspected place estimation device 10 may be executed periodically or in response to an instruction input by the user. In these cases, browser logs generated by the transmission time may be transmitted together.

  FIG. 5 is a diagram illustrating a configuration example of a browser log transmitted from the user terminal to the suspected place estimation device. As shown in FIG. 5, each browser log includes, for example, date and time, terminal address, base station ID, server address, index value group, and the like.

  The date and time is the date and time when a web page display instruction is input, the date and time when the web page display is completed, or the like. The terminal address is, for example, the IP address of the user terminal 20. The base station ID is identification information of the base station 30 that the user terminal 20 has accessed when the Web page is displayed. The server address is address information (for example, an IP address or a URL) of the Web server 40 that provides the Web page. The index value group is a time required for each of a plurality of stages constituting the Web page display process. The index value group also includes wireless quality. Details of the index value group will be described later.

  In parallel with steps S102 and S103, the Web display control unit 21 executes Web page display processing as shown in FIG.

  FIG. 6 is a diagram illustrating an example of a processing procedure of Web page display processing. In FIG. 6, the network between the user terminal 20 and the DNS server is the mobile communication carrier network N2 and the virtual mobile communication carrier network N3, and the network between the user terminal 20 and the Web server 40. Are the mobile carrier network N2, the virtual mobile carrier network N3, and the Internet N1.

  In step S201, the Web display control unit 21 transmits a DNS query to the DNS server regarding the URL input by the user. In response to the DNS query, the DNS server returns a DNS response including the name resolution result (S202). Subsequently, when the Web display control unit 21 transmits a SYN packet to the Web server 40 (S203), the Web server 40 returns a SYN ACK packet (S204). Subsequently, the Web display control unit 21 transmits an ACK packet to the Web server 40 (S205), and the TCP 3-way handshake is completed.

  Subsequently, when the Web display control unit 21 transmits an HTTP GET message to the Web server 40 (S206), download of content data constituting the Web page is started (S207).

  Regarding the display processing as described above, in step S103 of FIG. 4, a browser log including the index value group shown in FIG. 7 is output. FIG. 7 is a diagram illustrating an example of an index value group included in the browser log. As shown in FIG. 7, one browser log includes index values 1 to 5.

  At this time, the RSRQ value and the RSSNR value are acquired by the API of the OS, and a browser log including each index value group is output as the index value 6a and the index value 6b, respectively.

  The index value 1 is a required time from reception of the DNS response to transmission of the TCP SYN packet. The index value 2 is a required time from the completion of the TCP 3-way handshake to the transmission of the HTTP GET message. The index value 3 is a required time from the transmission of the DNS query to the reception of the DNS response. In addition, the index 3 in the virtual mobile telecommunications carrier is targeted at the DNS server in the virtual mobile telecommunications carrier. The index value 4 is the time required for the TCP 3-way handshake. The index value 5 is a required time from the transmission of the HTTP GET message to the reception of the first response packet.

  In FIG. 6, identifiers ((i) to (v)) of the index values are attached to the sections corresponding to the required time indicated by the index values.

  Then, the process sequence which the suspected place estimation apparatus 10 performs is demonstrated. FIG. 8 is a flowchart for explaining an example of a processing procedure executed by the suspected place estimation apparatus. The process of FIG. 8 may be executed in response to, for example, a report of quality deterioration from the user of the user terminal 20, detection of quality deterioration on the mobile communication carrier side, or the like. Alternatively, it may be executed at an arbitrary timing.

  It should be noted that when performing the suspicious point determination in this procedure, it is necessary to prepare data for comparison with deterioration data (non-deterioration data) in advance.

  In step S <b> 301, the estimation unit 12 extracts a set of browser logs to be processed from the log storage unit 13. For example, a browser log whose date / time value is within a predetermined time after the current time may be processed. In addition, when the date and time when the quality has deteriorated is specified to some extent in the report of quality deterioration from the user, the detection of quality deterioration on the virtual mobile carrier side, etc. A browser log including the date and time within the time may be a processing target.

  Subsequently, the estimating unit 12 classifies the set of extracted browser logs (hereinafter referred to as “set L”) according to the user terminal 20 (S302). The classification for each user terminal 20 may be performed based on the value of the terminal address of each browser log. Each set after classification is hereinafter referred to as “set Lt”.

  Subsequently, for each set Lt, the estimation unit 12 has a condition that the index value 1 is different from that at the time of non-deterioration (hereinafter referred to as “condition 1”), and the index value 2 is different from that at the time of non-deterioration. (Hereinafter referred to as “condition 2”) is determined (S303). The condition that the index value 1 or the index value 2 is different from the non-degraded condition is that there is a distribution shape difference in the comparison of the set value and the set Lt of the required time at the non-degraded state, and the average value and the variance value It is assumed that there is a difference that exceeds the threshold value and that there is a significant difference.

  When at least one of the condition 1 and the condition 2 is satisfied with respect to any set Lt (that is, with respect to any user terminal 20) (Yes in S303), the estimation unit 12 has at least one of the condition 1 and the condition 2 It is determined that the user terminal 20 satisfying either one is a suspected place (S304). In this case, the process of FIG. 8 ends.

  On the other hand, when both conditions 1 and 2 are not satisfied for all the sets Lt (No in S303), the estimation unit 12 classifies the sets L according to the base stations 30 (S305). That is, the classification for each base station 30 is performed in a state where the classification for each user terminal 20 is released. The classification for each base station 30 may be performed based on the base station ID of each browser log. Each set after classification is hereinafter referred to as “set Lb”.

  Subsequently, the estimation unit 12 determines, for each set Lb, a condition (hereinafter referred to as “condition 3”) that the index value 3 is different from that at the time of non-degradation (S306). The condition that the index value 3 is different from the non-degraded condition is that there is a distribution shape difference in the comparison between the set value of the required time at the non-degraded condition and the set Lb, and the average value and the variance value exceed the threshold value. There is a difference and there is a significant difference.

  When condition 3 is satisfied with respect to any set Lb (that is, with respect to any base station 30) (Yes in S306), the suspected deterioration point is between the mobile communication operator and the virtual mobile communication operator (between the operators). In order to determine whether or not it is an influence of POI), the estimation unit 12 extracts the RSRQ value with respect to the set Lb as the index value 6a and the RSSNR value as the index value 6b, and the index value 6a or the index value 6b is not degraded. A condition that there is a difference (hereinafter referred to as “condition 6”) is determined (S307). The condition that the index values 6a and 6b are different from those in the non-degraded condition is that there is a distribution shape difference in the comparison between the set value of the RSRQ value or RSSNR value and the set Lb in the non-degraded state, and the average value and the variance value It is assumed that there is a difference that exceeds the threshold value and that there is a significant difference. When the condition 6 is satisfied for the set Lb (Yes in S307), it is determined that the base station 30 (that is, the wireless access section) is a suspected place (S308), and when the condition 6 is not satisfied (No in S307) ) Determines that the virtual mobile carrier network N3 is a suspected place (S309). In either case of S308 or S309, the processing in FIG. 8 ends.

  Note that the inter-provider POI may be included in the virtual mobile carrier network and the base station 30 may be included in the mobile carrier network. As described above, a wireless access section can be a bottleneck in a mobile carrier network, and a connection point (POI between businesses) can be a bottleneck in a virtual mobile carrier network. Therefore, when it is determined that the base station 30 is a suspicious location, the mobile telecommunications carrier network can be considered to be a suspicious location, and the base station 30 is not a suspicious location and the mobile telecommunications carrier network When the portion (DNS query to DNS response in FIG. 6) passing through the virtual mobile carrier network is suspected, the inter-operator POI, that is, the virtual mobile carrier network becomes the suspected location.

  Therefore, according to the present embodiment, only the log information of the terminal passing through the virtual mobile carrier network is used to determine which one of the mobile carrier network and the virtual mobile carrier network is the suspected deterioration point. Can be estimated from

  On the other hand, when the condition 3 is not satisfied for all the sets Lb (No in S306), the estimation unit 12 classifies the sets L by the Web server 40 (S310). That is, the classification for each Web server 40 is performed in a state where the classification for each base station 30 is released. The classification for each Web server 40 may be performed based on the value of the server address of each browser log. Each set after classification is hereinafter referred to as “set Ls”.

  Subsequently, for each set Ls, the estimation unit 12 has a condition that the index value 4 is different from that at the time of non-deterioration (hereinafter referred to as “condition 4”), and the index value 5 is different from that at the time of non-deterioration. (Hereinafter referred to as “condition 5”) is determined (S311). The condition that the index value 4 or the index value 5 is different from the non-degraded condition is that there is a distribution shape difference in the comparison between the set value of the required time at the non-degraded time and the set Ls, and the average value and the variance value. It is assumed that there is a difference that exceeds the threshold value and that there is a significant difference.

  When at least one of the condition 4 and the condition 5 is satisfied with respect to any set Ls (that is, with respect to any web server 40) (Yes in S311), the estimation unit 12 determines at least one of the condition 4 and the condition 5 It is determined that the Web server 40 satisfying either one is a suspected place (S312). In this case, the process of FIG. 8 ends.

  On the other hand, when both the condition 4 and the condition 5 are not satisfied for all the sets Ls (No in S311), the estimation unit 12 determines that the POI is a suspected place (S313).

  When the process of FIG. 8 is executed at a timing unrelated to quality degradation, it may be determined in step S313 that there is no suspected place.

  As described above, according to the present embodiment, it is possible to estimate a suspected location that is a cause of quality degradation related to the display time of a Web page based on unspecified log information. As a result, it is possible to clarify the responsibilities of each service provider, platform provider, mobile telecommunications carrier, and virtual mobile telecommunications carrier. In addition, it can be expected to speed up the grasping of the situation and the actual situation when the quality deterioration occurs, and the efficiency of the monitoring technique.

  Conditions 1 to 6 may be set based on experience values, for example. For example, an average value obtained based on a set of browser logs collected in a situation where each of the user terminal 20, the base station 30, the virtual mobile carrier network N3, the POI, and the Web server 40 is a suspected place -The dispersion may be set to be the average value / dispersion when there is no deterioration. Alternatively, the boundary between the normal value and the abnormal value that are theoretically obtained for the index value 1 to the index value 5, the index value 6a, and the index value 6b may be set as the conditions 1 to 6.

(Summary of embodiment)
As described above, according to the present embodiment, each of the reception unit that receives the log information generated in the process of displaying the Web page on the plurality of terminals, and each of the plurality of log information received by the reception unit. Based on the determination results of both the determination of the conditions for the time required for each of the plurality of stages in the display process and the determination whether the radio quality data for the radio quality data in the display process is satisfied, There is provided an estimator for estimating a suspicious location of a factor of quality deterioration related to the display of the Web page.

  The estimation unit classifies the plurality of log information into a first set for each identification information of the terminal included in the log information, and is included in the log information for each first set. The first condition regarding the first required time from the reception of the DNS response to the transmission of the SYN packet and the completion of the 3-way handshake included in the log information until the transmission of the HTTP GET message A second condition for the second required time, and in any one of the first sets, when at least one of the first condition and the second condition is satisfied, The terminal may be estimated to be the suspected place.

  If the first condition and the second condition are not satisfied for all the first sets, the estimation unit includes the plurality of log information in the base included in the log information. Classifying into a second set for each station identification information, and for each second set, a third time for a third required time from transmission of a DNS query to reception of a DNS response included in the log information. If any of the second sets satisfies the third condition, the log information further includes the second set that satisfies the third condition. If the wireless quality condition for the value of the wireless quality data being determined is satisfied and the wireless quality condition is satisfied, the base station is assumed to be the suspected location, and if the wireless quality condition is not satisfied Virtual mobile communication Shah network is estimated that the a suspected place, it is also possible.

  When the third condition is not satisfied for all the second sets, the estimation unit determines the plurality of log information as the third identification information for each Web server identification information included in the plurality of log information. The fourth condition for the fourth required time of the TCP three-way handshake included in the log information for each third set, and included in the log information A fifth condition for a fifth required time from the sending of the HTTP GET message to the reception of the first response packet, and in any of the third sets, the fourth condition and When at least one of the fifth conditions is satisfied, the Web server may be estimated to be the suspected place.

  The estimation unit may estimate that the POI is the suspected place when both the fourth condition and the fifth condition are not satisfied for all the values of the third set. .

  The first condition, the second condition, the third condition, the fourth condition, the fifth condition, or the wireless quality condition is, for example, an index value used for determining the condition. On the other hand, there is a distribution shape difference from the set value of the non-degraded values, a difference exceeding the threshold value for the average value and the variance value, and a significant difference.

  The radio quality data includes, for example, one of RSRP, RSRQ, RSSI, and RSSNR.

  In the present embodiment, the user terminal 20 is an example of a terminal. The browser log is an example of log information. The log receiving unit 11 is an example of a receiving unit. The set Lt is an example of a first set. The set Lb is an example of a second set. The set Ls is an example of a third set. Condition 1, Condition 2, Condition 3, Condition 4, Condition 5, and Condition 6 are examples of the first condition, the second condition, the third condition, the fourth condition, the fifth condition, and the wireless quality condition. is there.

  As mentioned above, although the Example of this invention was explained in full detail, this invention is not limited to such specific embodiment, In the range of the summary of this invention described in the claim, various deformation | transformation・ Change is possible.

  Although the present embodiment has been described above, the present invention is not limited to the specific embodiment, and various modifications and changes can be made within the scope of the gist of the present invention described in the claims. Is possible.

DESCRIPTION OF SYMBOLS 10 Suspicious part estimation apparatus 11 Log receiving part 12 Estimation part 13 Log storage part 20 User terminal 21 Web display control part 22 Log generation part 23 Log transmission part 24 Log storage part 30 Base station 40 Web server 100 Drive apparatus 101 Recording medium 102 Auxiliary Storage device 103 Memory device 104 CPU
105 Interface device B Bus N1 Internet N2 Mobile carrier network N3 Virtual mobile carrier network

Claims (8)

A receiving unit that receives log information generated in a process of displaying a web page on a plurality of terminals;
Each of the plurality of log information received by the receiving unit satisfies the condition determination for the time required for each of the plurality of stages in the display process and the radio quality condition for the radio quality data in the display process. And an estimation unit that estimates a suspected location of a factor of quality deterioration related to the display of the web page, based on both determination results,
A suspected place estimation apparatus characterized by comprising: The estimation unit includes
The plurality of log information is classified into a first set for each identification information of the terminal included in the log information, and a DNS response of the DNS response included in the log information for each first set. The first condition for the first required time from the reception to the sending of the SYN packet, and the second required time from the completion of the three-way handshake to the sending of the HTTP GET message included in the log information Determining a second condition for
In any one of the first sets, when at least one of the first condition and the second condition is satisfied, the terminal is estimated to be the suspected place.
The suspected place estimation apparatus according to claim 1. The estimation unit includes
When both of the first condition and the second condition are not satisfied for all the first sets, the plurality of log information is included for each base station identification information included in the log information. And determining a third condition for the third required time from the transmission of the DNS query to the reception of the DNS response included in the log information for each of the second sets. And
When the third condition is satisfied in any of the second sets, the wireless quality data included in the log information for the second set that satisfies the third condition is further included. Determine the radio quality condition for the value,
When the wireless quality condition is satisfied, the base station estimates that the suspected location is satisfied, and when the wireless quality condition is not satisfied, the virtual mobile carrier network is estimated to be the suspected location. To
The suspected place estimation apparatus according to claim 2, wherein: The estimation unit includes
If the third condition is not satisfied for all the second sets, the plurality of log information is classified into a third set for each Web server identification information included in the plurality of log information. For each of the third sets, the fourth condition for the fourth required time of the TCP three-way handshake included in the log information, and the HTTP GET included in the log information Determining a fifth condition for a fifth required time from sending the message to receiving the first response packet;
In any one of the third sets, when at least one of the fourth condition and the fifth condition is satisfied, the Web server is estimated to be the suspected place.
The suspected place estimation apparatus according to claim 3. The estimation unit estimates that the POI is the suspected place when both the fourth condition and the fifth condition are not satisfied for all the values of the third set,
The suspicious part estimation apparatus according to claim 4, wherein: The first condition, the second condition, the third condition, the fourth condition, the fifth condition, or the wireless quality condition is an index value used for determining the condition. , There is a distribution shape difference with the set value of the non-degraded value, and there is a difference exceeding the threshold for the average value and the variance value, and there is a significant difference.
The suspicious part estimation apparatus according to any one of claims 1 to 5, wherein: The suspected place estimation apparatus according to any one of claims 1 to 6, wherein the wireless quality data includes any one of RSRP, RSRQ, RSSI, and RSSNR. Computer
A reception procedure for receiving log information generated in the process of displaying web pages on a plurality of terminals;
Whether each of the plurality of log information received in the reception procedure satisfies the condition determination for the time required for each of the plurality of stages in the display process and the radio quality condition for the radio quality data in the display process And an estimation procedure for estimating a suspected location of a factor of quality deterioration related to the display of the Web page based on both determination results of
The suspicious part estimation method characterized by performing.

Images