JP6690836B2 - Monitoring device, user terminal, communication system, communication method and program - Google Patents

Description

  The present invention relates to a monitoring device, a user terminal, a communication system, a communication method and a program.

  When a failure occurs in a maintenance target device (server device, network device, etc.) that has a maintenance contract with a customer, the worker who performs the failure recovery work goes to the installation location of the failed device and Recovery work may be performed. However, due to factors such as the worker's schedule and / or circumstances such as the travel time required for the worker to arrive at the site (the installation location of the device where the failure occurred), after the failure occurred, the worker was promptly on-site. There is a case that you cannot go to the disaster recovery work.

  Therefore, when the device to be maintained is connected to the network, the worker who performs the failure recovery work uses the user terminal (PC (Personal Computer), tablet terminal, etc.) that he or she uses to connect to the device. Connection (remote connection) may be performed, and failure recovery work may be performed.

  However, if the device to be maintained permits connection via networks such as the Internet, public wireless LAN (Local Area Network), and mobile phone communication networks, any person can connect (access) to the device to be maintained. May become. Therefore, if the device to be maintained permits connection via networks such as the Internet, public wireless LAN, and mobile phone communication network, an unintended (malicious) third party may connect to the device. . In addition, when an unintended (malicious) third party connects to the maintenance target device, the user terminal used by the worker who performs the failure recovery work may be refused the connection from the maintenance target device. is there.

  In Patent Document 1, a connection-destination device (monitoring communication terminal) is a user terminal (security communication terminal) that permits access as access information for accessing the connection-destination device (monitoring communication terminal). , A technology for notifying a telephone number, etc. is described. In the technique described in Patent Document 1, a user terminal (security communication terminal) that has received access information accesses a connection destination device (monitoring communication terminal) based on the received access information (telephone number, etc.). To do.

Japanese Patent Laid-Open No. 2004-062444

  The disclosure of the above-mentioned prior art documents is incorporated herein by reference. The following analysis has been made in view of the present invention.

  As described above, when the device to be maintained permits remote connection via the Internet, public wireless LAN, mobile phone communication network, or the like, an unintended (malicious) third party remotely connects to the device. There is a fear.

  Therefore, for example, by using a Group-VPN (Virtual Private Network) line or a dedicated line for remotely connecting to a device to be maintained, an unintended (malicious) third party remotely connects to the device. Can be prevented. However, in that case, the worker who performs the failure recovery work needs to perform the recovery work or the like at a place that can be remotely connected to the Group-VPN line or the dedicated line. That is, when using the Group-VPN line or the dedicated line for remote connection to the maintenance target device, the worker cannot perform the failure recovery work from any place. As a result, when a failure occurs in the maintenance target device, the worker's schedule and / or circumstances such as the travel time until the worker arrives at the site (a place where the failure can be remotely connected to the device) As a result, the workers may not be able to quickly perform the failure recovery work.

  In addition, when the worker who performs the disaster recovery work manually makes the settings for remote connection to the device requiring maintenance, if the worker makes an error in the settings, the user terminal used by the worker will not be connected to the device to be connected. May connect remotely to a different device.

  In Patent Document 1, it is premised that the connection destination device (monitoring communication terminal) operates normally, and a case where a failure occurs in the connection destination device (monitoring communication terminal) is described. Not not.

  Further, Patent Document 1 does not describe remote connection. Therefore, the technique described in Patent Document 1 cannot prevent an unintended (malicious) third party from making a remote connection to the connection destination device.

  Therefore, the present invention provides a monitoring device, a user terminal, a communication system, a communication method, and a program that contribute to preventing unauthorized access to a device to be monitored and contribute to preventing unnecessary access. With the goal.

According to a first aspect of the present invention, a monitoring device is provided. The monitoring device includes a storage unit that includes at least a part of the monitoring target device and that stores first authentication information that is necessary when connecting to a predetermined connection target.
Furthermore, the monitoring device includes a monitoring unit that monitors the state of one or more of the monitoring target devices via a network.
Further, the monitoring device, when the monitoring unit detects a failure of the monitoring target device, a port used for connection with the monitoring target device in which the failure is detected, and a port used for connection with a user terminal. Is opened for a predetermined connection permission time.
Furthermore, when the monitoring unit detects the failure of the monitoring target device, the monitoring device generates second authentication information, authenticates the user terminal based on the second authentication information, and authenticates the user terminal. A connection management unit is provided that permits connection from the user terminal to the self-monitoring device and connects to the connection target using the first authentication information.

According to a second aspect of the present invention, a user terminal is provided. The user terminal includes a terminal connection unit that connects to a monitoring device via a network.
Further, the user terminal includes a notification receiving unit that responds to the monitoring device with the received second authentication information when receiving a failure notification and second authentication information from the monitoring device.
Further, the user terminal connects to the monitoring target device corresponding to the failure notification via the monitoring device when the monitoring device permits the connection between the own user terminal and the monitoring device, terminal connection management Section.

According to a third aspect of the present invention, a communication system is provided. The communication system is configured to include one or more monitoring target devices, a monitoring device, and a user terminal including a terminal connection unit that connects to the monitoring target device via the monitoring device. .
The monitoring device includes a storage unit that includes at least a part of the monitoring target device and that stores first authentication information that is necessary when connecting to a predetermined connection target.
Furthermore, the monitoring device includes a monitoring unit that monitors the state of one or more of the monitoring target devices via a network.
Further, the monitoring device, when the monitoring unit detects a failure of the monitoring target device, a port used for connection with the monitoring target device in which the failure is detected, and a port used for connection with a user terminal. Is opened for a predetermined connection permission time.
Furthermore, when the monitoring unit detects the failure of the monitoring target device, the monitoring device generates second authentication information, authenticates the user terminal based on the second authentication information, and authenticates the user terminal. A connection management unit is provided that permits connection from the user terminal to the self-monitoring device and connects to the connection target using the first authentication information.
The user terminal includes a notification receiving unit that receives a failure notification and the second authentication information from the monitoring device.
Further, the user terminal includes a terminal connection management unit that responds to the monitoring device with the received authentication information when the notification receiving unit receives a failure notification and the second authentication information.
Further, when the monitoring device permits the connection between the own user terminal and the monitoring device, the terminal connection management unit connects to the monitoring target device corresponding to the failure notification via the monitoring device.

According to a fourth aspect of the present invention, a communication method is provided. The communication method includes a step of storing first authentication information, which is necessary when connecting to a predetermined connection target including at least a part of a monitored device.
Furthermore, the communication method includes a step of monitoring the status of one or more of the monitoring target devices via a network.
Further, in the communication method, when a failure of the monitoring target device is detected, a port used for connecting the monitoring target device in which the failure is detected and the monitoring device, and a connection between the user terminal and the monitoring device. And the step of opening the port used for the predetermined connection permission time.
Further, the communication method includes a step of generating second authentication information when a failure of the monitored device is detected.
Further, the communication method includes a step of authenticating the user terminal based on the second authentication information.
Further, the communication method includes a step of permitting connection from the authenticated user terminal to the monitoring device.
Further, the communication method includes a step of connecting to the connection target using the first authentication information.
It should be noted that the method is tied to a specific machine, a monitoring device that monitors the status of one or more devices.

According to a fifth aspect of the present invention, a method for controlling a user terminal is provided. The control method includes a step of connecting to a monitoring device via a network.
Further, the control method includes a step of receiving a fault notification and the second authentication information.
Further, the control method includes a step of responding the received authentication information to the monitoring device when a failure notification and the second authentication information are received.
Further, the control method includes a step of connecting to the monitoring target device corresponding to the failure notification via the monitoring device when the connection with the monitoring device is permitted.
It should be noted that the method is tied to a specific machine, which is a user terminal connected to the monitoring device via a network.

According to a sixth aspect of the present invention, a program is provided. The program causes a computer controlling the monitoring device to perform a process of storing the first authentication information, which is necessary when connecting to a predetermined connection target, including at least a part of the monitoring target device.
Further, the program causes a computer controlling the monitoring device to execute a process of monitoring the state of one or more of the monitoring target devices via a network.
Further, when a failure of the monitored device is detected, the program sets a port used for connection with the monitored device in which the failure is detected and a port used for connection with a user terminal to a predetermined value. The computer controlling the monitoring device is caused to execute the processing of releasing the connection permission time.
Further, the program causes a computer controlling the monitoring device to execute a process of generating second authentication information when a failure of the monitoring target device is detected.
Further, the program causes a computer controlling the monitoring device to execute a process of authenticating the user terminal based on the second authentication information.
Further, the program causes a computer controlling the monitoring device to execute a process of permitting connection from the authenticated user terminal to the monitoring device.
Further, the program causes a computer that controls the monitoring device to execute a process of connecting to the connection target using the first authentication information.

According to a seventh aspect of the present invention, a program is provided. The program causes a computer controlling a user terminal to execute a process of connecting to a monitoring device via a network.
Further, the program causes a computer that controls the user terminal to execute a process of receiving a failure notification and the second authentication information.
Further, when the fault notification and the second authentication information are received, the program causes the computer controlling the user terminal to execute a process of responding the received authentication information to the monitoring device.
Further, when the connection with the monitoring device is permitted, the program causes a computer controlling a user terminal to execute a process of connecting to the monitoring target device corresponding to the failure notification via the monitoring device. .
Note that these programs can be recorded in a computer-readable storage medium. The storage medium may be a non-transient one such as a semiconductor memory, a hard disk, a magnetic recording medium, an optical recording medium, or the like. The present invention can also be embodied as a computer program product.

  According to each of the aspects of the present invention, a monitoring device, a user terminal, a communication system, a communication method, and a program that contribute to preventing unauthorized access to a device to be monitored and contribute to preventing unnecessary access are provided. Provided.

It is a figure for explaining the outline of one embodiment. It is a block diagram showing an example of the whole composition of communication system 1. 6 is a flowchart showing an example of the operation of the communication system 1. 6 is a flowchart showing an example of the operation of the communication system 1.

  First, the outline of one embodiment will be described with reference to FIG. Note that the reference numerals attached to the outline are added to the respective elements for convenience as an example for facilitating understanding, and the description of the outline is not intended to limit the invention. Further, the connecting lines between blocks in each block diagram include both bidirectional and unidirectional.

  As described above, there is a demand for a monitoring device that contributes to preventing unauthorized access to the device to be monitored and contributes to preventing unnecessary access.

  Therefore, as an example, the monitoring apparatus 1000 shown in FIG. 1 is provided. The monitoring device 1000 includes a storage unit 1001, a monitoring unit 1002, a port management unit 1003, and a connection management unit 1004.

  The storage unit 1001 stores the first authentication information including at least a part of the monitoring target device and required when connecting to a predetermined connection target.

  The monitoring unit 1002 monitors the state of one or more monitoring target devices via the network. Here, the network may be the Internet, an intranet, a public wireless LAN, a mobile phone communication network, or the like, and the details thereof are not limited. In other words, the network does not have to be, for example, a Group-VPN line or a dedicated line for connecting to the device to be monitored.

  When the monitoring unit 1002 detects a failure in the monitoring target device, the port management unit 1003 determines a port used for connection with the monitoring target device in which the failure has been detected and a port used for connection with the user terminal as predetermined. Time (hereinafter referred to as connection permission time) is released. That is, when the monitoring unit 1002 detects a failure in the monitored device, the port management unit 1003 enables connection (remote connection) with the monitored device in which the failure is detected and the user terminal.

  Here, the remote connection means a function that a predetermined device (computer) operates a device (computer) connected via a network. The remote connection can be realized by using various means such as a program, a command, and a protocol, but the details of the realizing means are not limited.

  The connection management unit 1004 generates second authentication information when the monitoring unit 1002 detects a failure in the monitored device. Then, the connection management unit 1004 authenticates the user terminal based on the second authentication information, and permits the authenticated user terminal to connect to the own monitoring device 1000. Then, the connection management unit 1004 uses the first authentication information to connect to the connection target including at least a part of the monitoring target device. It is assumed that the storage unit 1001 stores in advance the first authentication information corresponding to the monitoring target device before the monitoring unit 1002 detects the failure of the monitoring target device.

  Therefore, when a failure occurs in the monitored device, the monitored device 1000 allows the authenticated user terminal to connect to the monitored device via the monitored device 1000. That is, the monitoring device 1000 can limit the user terminals that can be connected to the monitored device. Further, since the monitoring device 1000 holds the first authentication information that is necessary when connecting to a predetermined connection target including at least a part of the monitoring target device, the user terminal can monitor the monitoring target device. , Can be prevented from connecting directly.

  In addition, the monitoring apparatus 1000 limits the port used for connection with the monitored apparatus and the port used for connection with the user terminal to a predetermined connection permission time and opens the port, thereby opening the monitored apparatus. Limit the connectable time. Furthermore, the first authentication information for connecting from the monitoring device 1000 to the monitoring target device is information used when connecting to the above-mentioned predetermined connection target. Therefore, the monitoring device 1000 can limit the range of devices to be monitored to which the user terminal can be connected.

  As described above, the monitoring device 1000 contributes to preventing unauthorized access to the device to be monitored and also contributes to preventing unnecessary access.

[First Embodiment]
The first embodiment will be described in more detail with reference to the drawings.

  FIG. 2 is a block diagram showing an example of the overall configuration of the communication system 1 according to this embodiment. The communication system 1 is configured to include a monitoring device 100, a user terminal 200, and one or more monitoring target devices (410a to 410d).

  The monitoring device 100, the user terminal 200, and the monitoring target device 410 are connected via the network 600, respectively. The network 600 may be the Internet, an intranet, a public wireless LAN, a mobile phone communication network, or the like, and the details are not limited.

  In the communication system 1 shown in FIG. 2, the monitoring target device 410a connects to the network 600 via the network device 510a. The monitored device 410b connects to the network 600 via the network device 510b. The monitored device 410c and the monitored device 410d are connected to the network 600 via the network device 510b and the network device 510c. Further, the monitoring device 100 and the user terminal 200 are connected to the network 600 via the network device 510d.

  2 shows the monitored devices 410a to 410d, this does not mean that the number of monitored devices is limited to four. The communication system 1 may be configured to include three or less or five or more monitored devices. Similarly, although FIG. 2 shows one user terminal 200, this does not mean that the number of user terminals 200 is limited to one. The communication system 1 may be configured to include two or more user terminals 200. In the following description, the monitoring target devices 410a to 410d are referred to as the monitoring target device 410 when it is not necessary to distinguish them. Similarly, in the following description, the network devices 510a to 510d will be referred to as the network device 510 unless it is necessary to distinguish them.

  In the communication system 1 according to this embodiment, the number of monitored devices 410, the number of network devices 510, and the number of user terminals 200 are not limited. FIG. 2 is an example of the communication system 1 according to the present embodiment, and is not intended to limit the communication system 1 according to the present embodiment to the configuration shown in FIG.

  In the following description, it is assumed that the monitoring device 100 and the user terminal 200 have the access right to the monitoring target device 410 and the network device 510 as a precondition. The network device 510 includes a router, a layer 3 switch, a firewall, etc., and details thereof are not limited. Here, the access right includes at least the right to refer to the information stored in the device to be accessed (connection target).

  The monitoring target device 410 is an information processing device (computer) that is a target to be monitored by the monitoring device 100. The monitoring target device 410 may be a PC, a mobile information terminal (for example, a tablet terminal, a smartphone), or the like. The monitored device 410 may be a device that realizes a network function such as a router function. The details of the monitoring target device 410 are not limited as long as the functions described below can be realized.

  Further, the monitored device 410 may include a virtual machine. That is, the monitoring device 100 may be remotely connected to the virtual machine and / or the storage area accessed by the virtual machine.

  The user terminal 200 is an information processing device (computer) operated by a user (for example, a worker who performs maintenance work or the like of the monitoring target device 410). For example, the user terminal 200 may be a PC, a mobile information terminal (for example, a tablet terminal, a smartphone), or the like, and the details thereof are not limited as long as the functions described below can be realized.

  The monitoring device 100 is an information processing device (computer) that is connected to the network 600 and monitors one or more monitoring target devices 410. Specifically, the monitoring device 100 performs life-and-death monitoring and status monitoring on the monitoring target device 410 and determines whether there is a failure in the monitoring target device 410.

  The monitoring device 100, the user terminal 200, and the monitoring target device 410 realize an IP (Internet Protocol) address, a Ping command, an SNMP (Simple Network Management Protocol) polling function, a remote connection, a connection permission function, and an authentication (Authentication) function ( Execution) shall be possible.

  Here, the Ping command uses an echo command of ICMP (Internet Control Message Protocol), and the device sends a character string to a specified destination (IP address or host name) ) Is a command that confirms the network connection based on the presence or absence of.

  The connection permission function means a function of designating a TCP (Transmission Control Protocol) port number and an IP address, blocking unauthorized access from the outside (blocking the port), and permitting a specific connection from the outside (opening the port). To do.

  The authentication function means a function of confirming whether or not the connection request source user is a legitimate user when the device receives the connection request. For example, when the device receives the connection request, the device that receives the connection request checks whether or not the connection request source user is a legitimate user based on the combination of the user name and the password. Good.

  When no failure has occurred in the monitored device 410, it is assumed that, of the ports of the monitored device 100, the port used for remote connection from the monitored device 100 to the monitored device 410 is in the closed state. That is, when no failure has occurred in the monitored device 410, the monitoring device 100 is in a state in which remote connection to the monitored device 410 is impossible.

  Similarly, when there is no failure in the monitored device 410, among the ports of the monitoring device 100, the port used for remote connection from the user terminal 200 to the monitoring device 100 is assumed to be in the closed state. . That is, when no failure has occurred in the monitored device 410, the user terminal 200 is in a state in which it cannot be remotely connected to the monitoring device 100. Details of the process of opening the port of the monitoring device 100 will be described later.

[Configuration of monitored device]
Next, the monitoring target device 410 will be described in detail with reference to FIG.

  The monitoring target device 410 includes a target device storage unit 411. The monitored device 410 includes hardware necessary for operating the monitored device 410, such as a communication unit (not shown) that controls communication and a control unit (not shown) that controls the entire monitored device 410. It is configured to include ware and / or software. It should be noted that the monitoring target devices (410a to 410d) may have any details as long as they can realize the functions described below. For example, each of the monitored devices (410a to 410d) may be configured to include different hardware and / or software.

  The target device storage unit 411 stores information necessary for operating the monitoring target device 410. The target device storage unit 411 is realized by a magnetic disk device, an optical disk device, or a semiconductor memory. The semiconductor memory is, for example, an SSD (Solid State Drive), and may be a flash memory or a DRAM (Dynamic Random Access Memory).

  Specifically, the target device storage unit 411 stores at least a notification unit 412, a notification record 413, an IP address 414, and a MAC (Media Access Control) address 415.

  The IP address 414 and the MAC address 415 are the IP address and MAC address assigned to each managed device 410.

  The notification unit 412 monitors the state of the self-monitoring target device 410. When a failure occurs in the monitored device 410, the notification unit 412 generates failure information including a failure occurrence date and a failure message. Then, the notification unit 412 notifies the monitoring device 100 of the failure information including the failure occurrence date and time and the failure message, the IP address 414, and the MAC address 415.

  The monitoring target device 410 may notify the monitoring device 100 of the failure information including the failure occurrence date and time and the failure message, and the MAC address 415. When the notification from the monitored device 410 does not include the IP address 414, the monitoring device 100 may treat the source IP address used for communication as the IP address 414.

  Then, the notification unit 412 stores the failure information including the failure date and time and the failure message as the notification record 413 in the target device storage unit 411.

  In addition, the monitored device 410, when the monitoring device 100 does not detect the failure of the monitored device 410, the first authentication information for connecting to a predetermined connection target including at least a part of the monitored device 410. The information including is transmitted to the monitoring device 100 based on a predetermined condition. For example, the monitoring target device 410 transmits information including first authentication information for connecting to a predetermined connection target including at least a part of the monitoring target device 410 at a predetermined time interval (second time interval). , To the monitoring device 100.

  Here, the first authentication information is information including a combination of an account and a password, which is necessary when connecting to a predetermined connection target including at least a part of the monitoring target device 410.

  For example, the first authentication information may be a combination of an account and a password, which is necessary when remotely connecting to the monitored device 410.

  Alternatively, the first authentication information may be a combination of an account and a password, which is required when remotely connecting to the predetermined storage area with respect to the monitored device 410 that is the transmission source of the first authentication information. Note that the predetermined storage area may be, for example, a virtual machine storage area of a hard disk of the monitoring target device 410, an image storage area of an OS (Operating System) for network boot, or the like.

  The reporting unit 412 may be stored in the target device storage unit 411 as a program that causes the monitoring target device 410 to execute the above processing.

[Configuration of monitoring device]
Next, the monitoring device 100 will be described in detail with reference to FIG.

  The monitoring device 100 includes a monitoring device connection unit 101, a monitoring device input unit 102, a monitoring device output unit 103, a monitoring device control unit 104, and a monitoring device storage unit (storage unit) 105.

  The monitoring device connection unit 101 controls processing for connecting to the user terminal 200, the monitoring target device 410, and the network device 510 via the network 600. The monitoring device connection unit 101 is realized by using, for example, a NIC (Network Interface Card).

  The monitoring device input unit 102 is a device, an interface, or the like that receives input of information, signals, and the like from the outside. The monitoring device input unit 102 may be a keyboard, a touch panel, a mouse, or the like. The monitoring device input unit 102 only needs to be able to receive input of information or the like from the outside, and the details thereof are not limited.

  The monitoring device output unit 103 outputs information to the outside. The monitoring device output unit 103 may output information to a display device (not shown), a printing device (not shown) or the like connected to the monitoring device 100.

  The monitoring device control unit 104 controls a process for operating the monitoring device 100. The monitoring device control unit 104 is realized by using a CPU (Central Processing Unit) or the like. The monitoring device control unit 104 calls a program stored in the monitoring device storage unit 105, and controls the monitoring device connection unit 101, the monitoring device input unit 102, the monitoring device output unit 103, and the monitoring device storage unit 105.

  The monitoring device storage unit 105 stores information necessary for operating the monitoring device 100. The monitoring device storage unit 105 is realized by a magnetic disk device, an optical disk device, and a semiconductor memory. It should be noted that the semiconductor memory is, for example, an SSD, and may use a flash memory or may include a DRAM.

  Specifically, the monitoring device storage unit 105 stores at least a monitoring target device DB (Database) (monitoring target device database) 106, a monitoring unit 107, a port management unit 108, and a connection management unit 109.

  The monitoring target device DB 106 stores device information including the first authentication information of the monitoring target device 410. Specifically, the monitoring target device DB 106 stores device information including first authentication information corresponding to each monitoring target device 410, an IP address, a MAC address, and information indicating whether or not a failure has occurred. To do. In the following description, the information indicating the presence / absence of a failure will be referred to as a failure occurrence flag.

  For example, the device information 111 illustrated in FIG. 2 corresponds to the monitoring target device 410a. The device information 112 illustrated in FIG. 2 corresponds to the monitoring target device 410b. The device information 113 illustrated in FIG. 2 corresponds to the monitoring target device 410c. The device information 114 illustrated in FIG. 2 corresponds to the monitoring target device 410d. Although not shown, the device information 112 to 114 shown in FIG. 2 is configured to include an IP address, a MAC address, a failure occurrence flag, and first authentication information, like the device information 111. Shall be.

  In that case, the device information 111 includes the IP address of the monitored device 410a, the MAC address of the monitored device 410a, the failure occurrence flag corresponding to the monitored device 410a, and the first authentication information corresponding to the monitored device 410a. It is configured to include and. The device information 112 includes the IP address of the monitored device 410b, the MAC address of the monitored device 410b, the failure occurrence flag corresponding to the monitored device 410b, and the first authentication information corresponding to the monitored device 410b. It is configured to include. The same applies to the device information 113 and the device information 114, but detailed description will be omitted.

  The monitoring unit 107 monitors one or more monitoring target devices 410 via the network 600.

  When a failure occurs in the monitored device 410, the monitoring unit 107, from the failed monitored device 410, failure information including a failure occurrence date and a failure message, an IP address 414 of the monitored device 410, The MAC address 415 is received. As described above, the monitoring apparatus 100 may treat the source IP address used for communication when receiving the failure notification as the IP address 414 of the failed monitoring target apparatus 410.

  For example, when the monitoring unit 107 receives failure information including a failure occurrence date and a failure message from the monitoring target device 410, the monitoring unit 107 may determine that a failure has occurred in the monitoring target device 410.

  Alternatively, the monitoring unit 107 may execute an inquiry (that is, polling) to each of the monitoring target devices 410 at predetermined time intervals using SNMP and ICMP. Then, the monitoring unit 107 may acquire standard MIB (Management Information Base) information from each of the monitoring target devices 410.

  The monitoring unit 107 may determine whether or not a failure has occurred in the monitored device 410, based on the response result of the inquiry and / or the notification (for example, SNMP trap) from the monitored device 410. . When the monitoring unit 107 determines that a failure has occurred in the monitoring target device 410, the monitoring target device 410 has failure information including a failure occurrence date and time, a failure message, an IP address 414, and a MAC. Address 415 may be requested.

  When no failure has occurred in the monitoring target device 410, the monitoring unit 107 sets the first authentication information to the monitoring target at a predetermined time interval (second time interval) (for example, once a day). The first authentication information acquired from the device 410 is stored in the monitoring device storage unit 105.

  Specifically, when no failure has occurred in the monitored device 410, the monitoring unit 107, at a predetermined time interval (second time interval), the IP address of the monitored device 410 and the first authentication information. And are associated with each other and acquired from the monitoring target device 410. Then, the monitoring unit 107 stores the acquired first authentication information and the IP address of the monitoring target device 410 in the monitoring target device DB 106, and updates the device information corresponding to the monitoring target device 410.

  When the monitoring unit 107 detects a failure of the monitored device 410, the port management unit 108 determines the port used for connection with the monitored device 410 in which the failure has been detected and the port used for connection with the user terminal 200. , Release for a predetermined time (connection permission time).

  Specifically, the port management unit 108 opens the port of the monitoring device 100, which is used for remote connection to the monitoring target device 410 in which the failure is detected, for a predetermined connection permission time. Further, the port management unit 108 opens the port of the monitoring device 100 used for remote connection from the user terminal 200 to the monitoring device 100 for a predetermined connection permission time.

  The connection management unit 109 generates second authentication information when the monitoring unit 107 detects a failure in the monitored device 410. Then, the connection management unit 109 authenticates the user terminal 200 based on the second authentication information, and permits the authenticated user terminal 200 to connect to the own monitoring device 100. Then, the connection management unit 109 uses the first authentication information to connect to a predetermined connection target including at least a part of the monitoring target device 410.

  Here, the second authentication information is information including a password, which is necessary when the user terminal 200 remotely connects to the monitoring device 100. Here, the second authentication information is temporarily valid and may be different information each time it is created. For example, the second authentication information may be information including a disposable password (so-called one-time password).

  Specifically, when the monitoring unit 107 detects a failure in the monitored device 410, the connection management unit 109 generates the second authentication information based on the failure occurrence date and the like. Then, the connection management unit 109 sets an expiration date in the generated second authentication information.

  Then, when the monitoring unit 107 detects a failure of the monitoring target device 410, the connection management unit 109 transmits the failure notification and the generated second authentication information to the user terminal 200. Here, the failure notification is information that notifies the user terminal 200 that a failure has occurred in the monitored device 410.

  For example, when the monitoring unit 107 detects a failure in the monitoring target device 410, the connection management unit 109 includes a failure notification including the device information of the monitoring target device 410 in which the failure is detected, and the second authentication information, It may be transmitted to the user terminal 200. In this case, the connection management unit 109 refers to the monitoring target device DB 106 and extracts device information corresponding to the monitoring target device 410 in which the failure is detected from the monitoring target device DB 106. The connection management unit 109 generates a fault notification including the extracted device information. Then, the connection management unit 109 transmits the generated failure notification and the generated second authentication information to the user terminal 200.

  Alternatively, the connection management unit 109 may generate a failure notification including the generated second authentication information. In that case, the connection management unit 109 may transmit a failure notification including the generated second authentication information to the user terminal 200.

  The connection management unit 109 authenticates the user terminal 200 when receiving the authentication information that matches the generated second authentication information from the user terminal 200. Then, the connection management unit 109 permits the authenticated user terminal 200 to connect to the monitoring target device 410 corresponding to the failure notification.

  The connection management unit 109 specifies the monitoring target device 410 corresponding to the transmitted failure notification as the connection target monitoring target device 410. Alternatively, when the connection management unit 109 receives the device information and the second authentication information from the user terminal 200, the connection management unit 109 may specify the monitoring target device 410 to be connected based on the received device information.

  Then, the connection management unit 109 refers to the monitoring target device DB 106 and extracts the first authentication information corresponding to the monitoring target device 410 that is the connection target.

  Furthermore, the connection management unit 109 sets the self-monitoring apparatus 100 so as to allow the connection from the user terminal 200 to the self-monitoring apparatus 100 by using the received second authentication information. Then, the connection management unit 109 uses the extracted first authentication information to connect to a predetermined connection target including at least a part of the monitoring target device 410. That is, the connection management unit 109 uses the extracted first authentication information to make a remote connection to the monitoring target device 410 to be connected or a predetermined storage area of the monitoring target device 410.

  The monitoring unit 107, the port management unit 108, and the connection management unit 109 may be stored in the monitoring device storage unit 105 as programs that cause the monitoring device control unit 104 to execute the above processing.

[User terminal configuration]
Next, the user terminal 200 will be described in detail with reference to FIG.

  The user terminal 200 includes a terminal connection unit 201, a terminal input unit 202, a terminal output unit 203, a terminal control unit 204, and a terminal storage unit 205.

  The terminal connection unit 201 controls processing for connecting to the monitoring device 100, the monitoring target device 410, and the network device 510 via the network 600. The terminal connection unit 201 is realized using, for example, a NIC.

  The terminal input unit 202 is a device, an interface, or the like that receives input of information, signals, and the like from the outside. The terminal input unit 202 may be a keyboard, a touch panel, a mouse, or the like. The terminal input unit 202 only needs to be able to receive input of information or the like from the outside, and the details thereof are not limited.

  The terminal output unit 203 outputs information to the outside. The terminal output unit 203 may output information to a display device (not shown), a printing device (not shown) or the like connected to the user terminal 200.

  The terminal control unit 204 controls processing for operating the user terminal 200. The terminal control unit 204 is realized by using a CPU or the like. The terminal control unit 204 calls a program stored in the terminal storage unit 205 and controls the terminal connection unit 201, the terminal input unit 202, the terminal output unit 203, and the terminal storage unit 205.

  The terminal storage unit 205 stores information necessary for operating the user terminal 200. The terminal storage unit 205 is realized by a magnetic disk device, an optical disk device, and a semiconductor memory. It should be noted that the semiconductor memory is, for example, an SSD, and may use a flash memory or may include a DRAM. Specifically, the terminal storage unit 205 stores at least the notification reception unit 206 and the terminal connection management unit 207.

  When receiving the failure notification and the authentication information (second authentication information) from the monitoring device 100, the notification receiving unit 206 responds to the monitoring device 100 with the received authentication information (second authentication information).

  Alternatively, when the notification receiving unit 206 receives the failure notification including the device information of the monitored device 410 in which the failure is detected and the second authentication information, the received device information and the received second authentication. The information may be returned to the monitoring device 100.

  When the monitoring device 100 permits the connection between the own user terminal 200 and the monitoring device 100, the terminal connection management unit 207 connects to the monitoring target device 410 corresponding to the failure notification via the monitoring device 100. Specifically, when the monitoring device 100 permits remote connection between the own user terminal 200 and the monitoring device 100, the terminal connection management unit 207, via the monitoring device 100, monitors the device to be monitored 410 that responds to a failure notification. Alternatively, it is remotely connected to a predetermined storage area of the monitored device 410.

  The notification reception unit 206 and the terminal connection management unit 207 may be stored in the terminal storage unit 205 as programs that cause the terminal control unit 204 to execute the above processing.

[Operation of communication system]
Next, the operation of the communication system 1 will be described in detail.

  3 and 4 are flowcharts showing an example of the operation of the communication system 1. 3 and 4 show the operation of the communication system 1 as an example, and the operation of the communication system 1 is not limited to the operation shown in FIGS. 3 and 4.

  First, a case where no failure has occurred in the monitored device 410 will be described with reference to FIG.

  The monitoring unit 107 of the monitoring device 100 executes alive monitoring and status monitoring of one or more monitoring target devices 410 (step A1). For example, the monitoring unit 107 of the monitoring device 100 uses SNMP and ICMP to make an inquiry (that is, polling) to each of the monitoring target devices 410 at a predetermined time interval (first time interval). May be.

  The monitoring target device 410 includes the first authentication information and the IP address of the monitoring target device 410, which are necessary when remotely connecting to a predetermined connection target including at least a part of the monitoring target device 410, as a monitoring device. 100 (step A2). For example, the monitoring target device 410 may transmit the first authentication information and the IP address of the monitoring target device 410 to the monitoring device 100 once a day.

  The monitoring unit 107 of the monitoring device 100 stores the first authentication information transmitted from the monitoring target device 410 and the IP address of the monitoring target device 410 in the monitoring target device DB 106, and updates the monitoring target device DB 106. (Step A3).

  The monitoring device 100 and the monitoring target device 410 repeat the processes of steps A1 to A3 described above until the monitoring device 100 detects a failure of the monitoring target device 410.

  Next, a case where a failure occurs in the monitored device 410 will be described with reference to FIG. Specifically, a case where a failure occurs in the monitored device 410a shown in FIG. 2 will be described with reference to FIG. Even when a failure occurs in at least one monitoring target device 410, the monitoring device 100 and the monitoring target device 410 in which no failure has occurred repeat the above-described steps A1 to A3. For example, when no failure has occurred in the monitoring target devices 410b to 410d illustrated in FIG. 2, the monitoring device 100 repeats the process of step A1 and the process of A3 described above for the monitoring target devices 410b to 410d. .

  It is assumed that a failure has occurred in the monitored device 410a (step A11). In that case, the monitoring unit 107 of the monitoring device 100 detects that a failure has occurred in the monitoring target device 410a (step A12).

  In step A13, the port management unit 108 of the monitoring apparatus 100 opens the port required for remote connection for a predetermined connection permission time. Specifically, the port management unit 108 of the monitoring device 100 opens the port of the monitoring device 100 used for remote connection to the monitored device 410 for a predetermined connection permission time. Further, the port management unit 108 of the monitoring device 100 opens the port of the monitoring device 100 used for remote connection from the user terminal 200 to the monitoring device 100 for a predetermined connection permission time. Note that the IP address, port number, and time for opening the port (connection permission time) of the monitoring device 100 may be set by the user of the monitoring device 100 using the monitoring device input unit 102.

  In step A14, the connection management unit 109 of the monitoring device 100 extracts the device information 111 corresponding to the failed monitoring target device 410a from the monitoring target device DB 106.

  In step A15, the connection management unit 109 of the monitoring device 100 extracts the first authentication information from the extracted device information 111.

  In step A16, the connection management unit 109 of the monitoring device 100 generates the second authentication information necessary for making a remote connection to the monitoring device 100.

  In step A17, the connection management unit 109 of the monitoring device 100 sets an expiration date in the generated second authentication information.

  In step A18, the connection management unit 109 of the monitoring apparatus 100 uses the second authentication information to set the authority of remote connection to the monitoring apparatus 100 so that the monitoring apparatus 100 can be remotely connected.

  In step A19, the connection management unit 109 of the monitoring device 100 transmits the generated second authentication information and failure notification to the user terminal 200.

  In step A20, the notification receiving unit 206 of the user terminal 200 receives the second authentication information and the failure notification.

  In step A21, the terminal connection management unit 207 of the user terminal 200 makes a remote connection to the monitoring apparatus 100 by returning the second authentication information. That is, when the user terminal 200 receives the second authentication information and the failure notification, the user terminal 200 automatically executes the remote connection to the monitoring device 100 without the operation of the user of the user terminal 200.

  In step A22, the connection management unit 109 of the monitoring apparatus 100 uses the first authentication information to perform remote connection to the monitored device 410a in which the failure has occurred. As a result, the user terminal 200 can establish a session by making a remote connection between the user terminal 200 and the monitoring target device 410a via the monitoring device 100.

  As described above, in the monitoring device 100 according to the present embodiment, when a failure occurs in the monitored device 410, the authenticated user terminal 200 monitors the monitored device 410 by limiting the time to a predetermined time. Allow remote connection via device 100. Therefore, the monitoring device 100 according to the present embodiment can prevent devices other than the authenticated user terminal 200 from remotely connecting to the monitoring device 100 and the monitored device 410.

  Further, the monitoring device 100 according to the present embodiment disables remote connection from the monitoring device 100 to the monitoring target device 410 when the monitoring target device 410 is operating normally.

  Furthermore, the monitoring device 100 according to the present embodiment generates authentication information for authenticating the user terminal 200 when detecting a failure in the monitored device 410. Then, the monitoring device 100 according to the present embodiment authenticates the user terminal 200 based on the generated authentication information. Therefore, the monitoring device 100 according to the present embodiment can authenticate the user terminal 200 using different authentication information each time a failure in the monitored device 410 is detected.

  Further, the monitoring device 100 according to the present embodiment limits functions and / or storage areas that can be remotely connected, among the functions and / or storage areas of the monitored device 410.

  Therefore, the monitoring device 100 according to the present embodiment contributes to prevent unauthorized access to the device to be monitored and also helps prevent unnecessary access.

[Modification 1]
As a first modification of the communication system 1 according to the present embodiment, the monitored device 410 may notify the monitoring device 100 that a pseudo failure has occurred.

  Specifically, the terminal connection management unit 207 of the user terminal 200 may transmit a predetermined command via the monitoring device 100 to the monitored device 410 to which the user terminal 200 wants to make a remote connection. When the monitoring target device 410 receives a predetermined command from the user terminal 200, the monitoring target device 410 transmits the pseudo fault information to the monitoring device 100. Here, the pseudo fault information is information indicating that a pseudo fault has occurred in the monitored device 410.

  When the self-monitoring device 100 receives the pseudo fault information, the monitoring unit 107 of the monitoring device 100 determines that a fault has been detected in the monitored device 410 that is the transmission source of the pseudo fault information. That is, when the self-monitoring device 100 receives the pseudo failure information, the monitoring unit 107 of the monitoring device 100 determines that a failure has occurred in the monitoring target device that is the transmission source of the pseudo failure information.

  Then, the monitoring device 100 and the user terminal 200 perform the above processing (the processing of steps A13 to A22 shown in FIG. 4). As a result, the user terminal 200 can remotely connect to the monitoring target device 410 via the monitoring device 100 for a predetermined connection permission time even if the monitoring target device 410 has no failure.

[Modification 2]
As a second modification of the communication system 1 according to the present embodiment, when the user terminal 200 makes a remote connection with the monitoring target device 410 via the monitoring device 100 within a predetermined connection permission time, the monitoring device 100 is remote. The port may be opened until the connection is closed. Specifically, the port management unit 108 causes the monitored device 410 in which a failure is detected and the user terminal 200 to pass through the self-monitoring device 100 within a predetermined connection permission time after opening the port. Suppose you have made a remote connection. In that case, the port management unit 108 may open the port used for remote connection until the remote connection ends even after the predetermined connection permission time has elapsed after opening the port. .

[Second Embodiment]
The second embodiment will be described in more detail with reference to the drawings.

  In this embodiment, when a user terminal remotely connects to a monitored device, the authority for the monitored device is changed according to the content of the failure. In the description of this embodiment, the description of the same parts as those in the above embodiment will be omitted. Further, in the description of the present embodiment, the same components as those in the above-described embodiment are designated by the same reference numerals, and the description thereof will be omitted. Further, in the description of this embodiment, the description of the same effects as those of the above embodiment will be omitted. Hereinafter, the same applies to other modes.

  The overall configuration of the communication system 1 according to the present embodiment is as shown in FIG.

  The monitoring device storage unit 105 according to the present embodiment stores, for each monitoring target device 410, information in which the content of the failure and the authority to the monitoring target device 410 are associated with each other. For example, the administrator or the like of the monitoring device 100 may input the authority for the monitoring target device 410 for each monitoring target device 410 to the monitoring device 100 according to the content of the failure.

  For example, an administrator or the like of the monitoring apparatus 100 may have administrator authority for each monitored apparatus 410, or general user authority that limits the accessible range to the administrator authority depending on the content of the failure. The authority given to the user terminal 200 may be input to the monitoring device 100. Here, it goes without saying that the monitored device 410 may preset and register two or more types of general user authority. In that case, the monitoring apparatus 100 inputs to the monitoring apparatus 100 the administrator authority or any general user authority for the monitoring target apparatus 410 as the authority to give the user terminal 200, depending on the content of the failure. Of course, you can do that.

  The monitoring device control unit 104 according to the present embodiment may generate information in which, for each monitoring target device 410, the content of the failure and the authority to the monitoring target device 410 are associated with each other, based on the input information. . Then, the monitoring device control unit 104 stores the generated information in the monitoring device storage unit 105.

  The connection management unit 109 according to the present embodiment determines the authority for the faulty monitoring target device 410 according to the content of the fault. Then, the connection management unit 109 grants the determined authority to the authenticated user terminal 200. When the user terminal 200 remotely connects to the monitoring target device 410 via the monitoring device 100, the function and / or the storage area of the monitoring target device 410 that is permitted to access the granted authority is accessed. Become accessible

  As described above, when the monitoring apparatus 100 according to the present embodiment remotely connects from the user terminal 200 to the monitoring target apparatus 410, the monitoring authority 100 sets the access authority according to the content of the failure of the connection target monitoring target apparatus 410. To 200. Therefore, the monitoring device 100 according to the present embodiment can limit the functions of the monitoring target device 410 that can be used by the user terminal 200, the accessible storage area, and the like according to the content of the failure. That is, in the monitoring device 100 according to the present embodiment, the user terminal 200 can access the functions of the monitored device 410 and the storage areas that are not related to the failure, the storage areas that are not related to the failure, and the like. Can be prevented. Therefore, the monitoring device 100 according to the present embodiment contributes to preventing unauthorized access to the device to be monitored and further preventing unnecessary access.

  The whole or part of the exemplary embodiments disclosed above can be described as, but not limited to, the following supplementary notes.

  (Supplementary Note 1) As in the monitoring device according to the first aspect.

  (Supplementary Note 2) The monitoring unit acquires the first authentication information from the monitoring target device at predetermined time intervals, and stores the acquired first authentication information in the storage unit. The monitoring device described in 1.

  (Supplementary Note 3) When the monitoring unit detects a failure of the monitored device, the connection management unit transmits a failure notification and the second authentication information to the user terminal, and the user terminal 3. The monitoring device according to appendix 1 or 2, which authenticates the user terminal when the second authentication information is received.

  (Supplementary Note 4) When the monitoring unit detects a failure of the monitoring target device, the connection management unit includes the failure notification including the device information of the monitoring target device in which the failure is detected, and the second The monitoring device according to appendix 3, which transmits authentication information to the user terminal.

(Supplementary Note 5) The storage unit stores a monitoring target device database that stores the device information, including the first authentication information,
When the connection management unit receives the device information and the second authentication information from the user terminal, the connection management unit identifies the monitoring target device to be connected based on the received device information, By referring to the device database, extracting the first authentication information corresponding to the monitoring target device to be connected, and using the received second authentication information, the user terminal is connected to the own monitoring device. The monitoring device according to appendix 4, which is set in the own monitoring device so as to be permitted.

  (Supplementary Note 6) The connection management unit determines the authority to the monitored device in which the failure has occurred in accordance with the content of the failure, and grants the determined authority to the authenticated user terminal. 5. The monitoring device according to any one of 5 to 5.

  (Supplementary Note 7) The connection management unit, when the monitoring unit detects a failure of the monitoring target device, generates the second authentication information based on a failure occurrence date and time, and generates the second authentication information. 7. The monitoring device according to any one of appendices 1 to 6, wherein the expiration date is set to.

  (Supplementary Note 8) The monitoring unit acquires the IP (Internet Protocol) address of the monitored device and the first authentication information at the predetermined time interval from the monitored device. The monitoring device according to any one of 1.

  (Supplementary Note 9) The port management unit connects the monitoring target device in which the failure is detected and the user terminal via the self-monitoring device within the connection permission time after opening the port. In that case, the monitoring device according to any one of appendices 1 to 8, wherein the port is opened until the connection is completed.

  (Supplementary note 10) As in the user terminal according to the second aspect.

  (Supplementary Note 11) As in the communication system according to the third aspect.

  (Supplementary Note 12) The connection management unit, when the monitoring unit detects a failure of the monitoring target device, a failure notification including device information of the monitoring target device in which the failure is detected, and the second authentication. Information is transmitted to the user terminal, and the terminal connection management unit receives the device information when the notification receiving unit receives the failure notification including the device information and the second authentication information. When the received second authentication information is received from the user terminal, the connection management unit authenticates the user terminal and authenticates the received second authentication information. 12. The communication system according to appendix 11, which permits connection from the user terminal to the monitoring target device corresponding to the device information via the monitoring device.

  (Supplementary Note 13) The terminal connection management unit transmits a predetermined command to the monitoring target device via the monitoring device, and the monitoring target device notifies the monitoring device when the predetermined command is received. The pseudo failure information is transmitted, and when the monitoring unit receives the pseudo failure information, the monitoring unit determines that a failure has been detected in the monitoring target apparatus that is the transmission source of the pseudo failure information. 12. The communication system according to item 12.

  (Supplementary Note 14) The monitoring target device transmits information including the first authentication information to the monitoring device at a predetermined time interval, and the storage unit stores the IP (Internet Protocol) address of the monitoring target device. And the first authentication information are stored in association with each other, and the communication system according to any one of appendices 11 to 13.

  (Supplementary Note 15) As in the communication method according to the fourth aspect.

  (Supplementary Note 16) The control method of the user terminal according to the fifth aspect is as described above.

  (Supplementary Note 17) As the program according to the sixth aspect.

  (Supplementary Note 18) The program is according to the seventh aspect.

  The forms shown in appendices 15 and 17 can be expanded to the forms shown in appendices 2 to 9 similarly to the form shown in appendix 1.

  The disclosures of the above patent documents are incorporated herein by reference. Modifications and adjustments of the exemplary embodiment are possible within the scope of the overall disclosure (including the claims) of the present invention and based on the basic technical concept thereof. Further, various combinations of various disclosed elements (including each element of each claim, each element of each embodiment, each element of each drawing, and the like) are possible or selected within the scope of the entire disclosure of the present invention. is there. That is, it goes without saying that the present invention includes various variations and modifications that can be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, regarding the numerical ranges described in this specification, any numerical values or small ranges included in the ranges should be construed as being specifically described even if not otherwise specified.

1 Communication Systems 100, 1000 Monitoring Device 101 Monitoring Device Connection Unit 102 Monitoring Device Input Unit 103 Monitoring Device Output Unit 104 Monitoring Device Control Unit 105 Monitoring Device Storage Unit 106 Monitoring Target Device DB
107, 1002 Monitoring unit 108, 1003 Port management unit 109, 1004 Connection management unit 111-114 Device information 200 User terminal 201 Terminal connection unit 202 Terminal input unit 203 Terminal output unit 204 Terminal control unit 205 Terminal storage unit 206 Notification receiving unit 207 Terminal connection management unit 410, 410a to 410d Monitoring target device 411 Target device storage unit 412 Notification unit 413 Notification record 414 IP address 415 MAC address 510, 510a to 510d Network device 600 Network 1001 Storage unit

Claims (9)

A storage unit that stores at least a part of the monitoring target device and that stores first authentication information that is necessary when connecting to a predetermined connection target;
A monitoring unit for monitoring the status of one or more of the monitored devices via a network;
When the monitoring unit detects a failure in the monitoring target device, the port used for connection with the monitoring target device in which the failure is detected and the port used for connection with the user terminal are set to a predetermined connection permission time. , Open, port management,
When the monitoring unit detects the failure of the device to be monitored, second authentication information is generated, the user terminal is authenticated based on the second authentication information, and the authenticated user terminal monitors its own monitoring device. A connection management unit that permits connection to the connection target and connects to the connection target using the first authentication information;
Monitoring device.   2. The monitoring unit according to claim 1, wherein the monitoring unit acquires the first authentication information from the monitoring target device at predetermined time intervals and stores the acquired first authentication information in the storage unit. Monitoring equipment.   When the monitoring unit detects a failure in the monitored device, the connection management unit transmits a failure notification and the second authentication information to the user terminal, and the user terminal sends the second authentication information to the second authentication information. The monitoring device according to claim 1, wherein when the authentication information is received, the user terminal is authenticated.   The connection management unit determines the authority for the monitored device in which the failure has occurred, according to the content of the failure, and grants the determined authority to the authenticated user terminal. The monitoring device according to any one. One or more monitored devices,
A monitoring device,
A user terminal, comprising a terminal connection unit, which is connected to the monitoring target device via the monitoring device,
A communication system comprising:
The monitoring device is
A storage unit that stores at least a part of the monitoring target device and stores first authentication information that is necessary when connecting to a predetermined connection target;
A monitoring unit for monitoring the status of one or more of the monitored devices via a network;
When the monitoring unit detects a failure in the monitoring target device, the port used for connection with the monitoring target device in which the failure is detected and the port used for connection with the user terminal are set to a predetermined connection permission time. , Open, port management,
When the monitoring unit detects the failure of the device to be monitored, second authentication information is generated, the user terminal is authenticated based on the second authentication information, and the authenticated user terminal monitors its own monitoring device. A connection management unit that permits connection to the connection target and connects to the connection target using the first authentication information;
Equipped with
The user terminal is
A notification receiving unit that receives a failure notification and the second authentication information from the monitoring device;
A terminal connection management unit that responds to the monitoring device with the second authentication information received by the notification receiving unit when the notification receiving unit receives the failure notification and the second authentication information;
Equipped with
A communication system in which the terminal connection management unit connects to a monitoring target device corresponding to the failure notification via the monitoring device when the monitoring device permits the connection between the own user terminal and the monitoring device. When the monitoring unit detects a failure of the monitoring target device, the connection management unit includes a failure notification including device information of the monitoring target device in which the failure is detected, and the second authentication information, Sent to the user terminal,
When the notification receiving unit receives the failure notification including the device information and the second authentication information, the terminal connection management unit determines the received device information and the received second authentication information. Responding to the monitoring device,
When the connection management unit receives the generated second authentication information from the user terminal, the connection management unit authenticates the user terminal, and from the authenticated user terminal to the monitoring target device corresponding to the device information, The communication system according to claim 5 , which permits connection via the monitoring device. The terminal connection management unit transmits a predetermined command to the monitoring target device via the monitoring device,
The monitoring target device, when receiving the predetermined command, transmits pseudo fault information to the monitoring device,
The monitoring unit, the self if the monitoring device receives the pseudo fault information, the it is determined that the error is detected in a monitored device that is the source of the pseudo error information, the communication system according to claim 5 or 6 . Storing the first authentication information, which is necessary when connecting to a predetermined connection target, including at least a part of the monitoring target device;
Monitoring the status of one or more of the monitored devices via a network;
When a failure of the monitoring target device is detected, a port used for connecting the monitoring target device where the failure is detected and the monitoring device, and a port used for connecting the user terminal and the monitoring device are predetermined. Connection permission time, opening process,
Generating a second authentication information when a failure of the monitored device is detected;
Authenticating the user terminal based on the second authentication information;
Allowing the authenticated user terminal to connect to the monitoring device;
Connecting to the connection target using the first authentication information;
Communication method including. A process of storing first authentication information, which is necessary when connecting to a predetermined connection target, including at least a part of the monitoring target device;
A process of monitoring the status of one or more of the monitored devices via a network;
When a failure of the monitored device is detected, the port used for connection with the monitored device where the failure is detected and the port used for connection with the user terminal are opened for a predetermined connection permission time. Processing and
A process of generating second authentication information when a failure of the monitored device is detected,
A process of authenticating the user terminal based on the second authentication information;
A process of permitting connection from the authenticated user terminal to the monitoring device;
Connecting to the connection target using the first authentication information;
A program that causes a computer that controls the monitoring device to execute.

Images