JPH09214542A - Method and system for permitting connection of terminal equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce a rate that a terminal equipment moving in a network is connection-denied by a moving destination. SOLUTION: A moving terminal equipment 2 designates the type of an application to be used, and a request the allocation of an address. An address management device 3 adds the designated type of the application and inquires the propriety of connection. A network management device 4 judges whether the use of the designated application in the sub-network of the moving destination of the moving terminal equipment 2 adversely affects the network or not based on application use history 41a and a network use situation history 41b for respective terminal equipments, which are managed by a communication history management part 41, in an influence management part 42. A connection propriety notice part 43 decides whether connection is permitted or not based on the judged result and gives a notice to the address management device 3.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a terminal device connection permission method for deciding whether or not to connect a terminal device moving on a network composed of a plurality of sub-networks to a destination sub-network. And its system.

[0002]

2. Description of the Related Art In the conventional method and system for permitting connection of a terminal device of this type, an address allocation request is issued from one terminal device that has moved on a network, and the address management device that receives the request requests the network management device. On the other hand, when an inquiry is made as to whether or not the one terminal device can move to the destination sub-network, the network management device uses the communication history as the total communication amount such as the total number of transmitted and received packets before the one terminal device moves. , Predicting the traffic that occurs when the one terminal device is connected to the destination sub-network, predicting whether the network will be adversely affected based on this predicted traffic, and it is predicted that adverse effects will occur In this case, a notification of refusing the connection was returned to the address management device.

[0003]

However, in the above-mentioned conventional method and system, it is determined whether or not there is an adverse effect due to the connection of the terminal device to the destination sub-network based on the communication history as the total communication amount of the communication device. Since it was predicted, even if the terminal device connected to the movement destination sub-network does not actually generate the same traffic as predicted by the communication history in the movement destination sub-network, the network is adversely affected. If it is predicted that the terminal device will be given, the connection is always refused, and there is a problem that the terminal device cannot be used in many cases.

It is an object of the present invention to more specifically determine the traffic that actually occurs due to the connection of the terminal device to the destination sub-network, and to reduce the ratio of connection refusal and unavailability. A method and system thereof.

[0005]

In order to solve the above-mentioned problems, according to claim 1 of the present invention, when one terminal device moving on a network composed of a plurality of sub-networks requests address allocation, the terminal device is The address management device that dynamically assigns an address to the network management device that manages the communication history of the terminal device inquires whether or not the one terminal device may be connected to the destination subnetwork, and performs network management. The device determines whether or not the connection of the one terminal device to the destination sub-network has an adverse effect on the network, determines whether or not to permit the connection of the one terminal device, and manages this. When the address management device is notified of the connection permission, the address management device allocates an address to the one terminal device and rejects the connection. In the terminal device connection permission method of denying the address allocation to the one terminal device when receiving the notification, the terminal device requests the address allocation by designating the type of application to be used, and the address management device designates the designation. The network management device collects in advance whether or not the use of the specified application in the subnetwork to which the terminal device moves will adversely affect the network by adding the type of the specified application and inquiring whether the connection is possible. A terminal device connection permission method for determining whether or not to permit connection of the terminal device by making a judgment based on the usage history of the application before the movement of the terminal device.

According to the above-mentioned method, the network management device, for one terminal device that has moved on the network, based on the application usage history of the one terminal device that has been collected in advance and has not been moved. It is possible to judge whether the use of the application specified by the terminal device adversely affects the network, thereby determining whether or not the connection of the one terminal device is permitted, and whether or not the connection to the address management device is possible. Can be notified.

According to a second aspect of the present invention, a network composed of a plurality of sub-networks, a terminal device that moves on the network, an address management device that dynamically assigns an address to the terminal device, and communication between the terminal devices. A network management device that manages a history is provided, and when one terminal device that has moved on the network requests address allocation, the address management device connects the one terminal device to the destination subnetwork to the network management device. The network management device permits the connection of the one terminal device by determining whether the connection of the one terminal device to the movement destination sub-network adversely affects the network. The address management device, and the address management device receives the notification of connection permission. In this case, the type of the application to be used is specified in the terminal device connection permission system in which the address is assigned to the one terminal device, and when the notification of the connection refusal is received, the address assignment is denied to the one terminal device. Terminal device for requesting address allocation, an address management device for inquiring connection availability by adding the type of the specified application, and traffic generated on the network is collected from the network monitor device or the like, and each terminal device is collected. Communication history management means for classifying each application used for each application and managing it as an application usage history, and whether the use of the specified application in the subnetwork to which the terminal device is moved adversely affects the network. Using the application A network management device having an influence prediction means for making a judgment based on the history and a connection availability notifying means for making a decision on whether or not to permit the connection based on the result of the judgment and notifying the address management device of this. We propose a terminal device connection permission system.

According to the above system, the impact predicting means in the network management device, for one terminal device that has moved on the network, based on the application usage history corresponding to the application designated by the one terminal device, It is possible to determine whether or not the use of the application in the sub-network to which the one terminal device moves will adversely affect the network.

[0009]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described in detail below with reference to the drawings.

FIG. 1 shows an example of the system configuration of the present invention. In the figure, 1 is a subnetwork 1a, 1b, 1c.
2 is a mobile terminal device, 3 is an address management device, 4 is a network management device, 5a, 5b,
Reference numeral 5c is a network monitor device provided corresponding to each of the sub-networks 1a, 1b and 1c, and 6a and 6b.
Is a router provided between the sub-networks 1a-1b and 1b-1c.

When the mobile terminal device 2 moves on the network 1, the mobile terminal device 2 requests the address management device 3 to assign an address by designating the type of application to be used. When the address management device 3 receives the address allocation request from one mobile terminal device, the network management device 4 inquires whether the connection is possible by adding the designated application type, and the network management device 4 permits the connection. When the notification of the connection refusal is received, an address is assigned to the one mobile terminal device, and when the connection refusal notification is received, the address assignment to the one mobile terminal device is refused.

FIG. 2 shows a main part of the network management apparatus 4, in which 41 is a communication history management unit, 42 is an influence prediction unit, and 43 is a connection availability notification unit.

The communication history management unit 41 collects the traffic generated on the network 1 from the network monitor devices 5a to 5a.
5c, etc., classify each application type used for each mobile terminal device and manage as an application usage history 41a, and classify each sub-network and each router as a network usage status history 41b. to manage. The impact predicting unit 42 determines whether or not the use of the designated application in the sub-network of the moving destination of the mobile terminal device adversely affects the network 1 based on the application usage history 41a and the network usage status history 41b. .
The connection permission / prohibition notifying unit 43 determines whether or not to permit the connection based on the determination result, and notifies the address management device 3 of this.

FIG. 3 shows a flow of operations in this system. 4 shows an example of the application usage history 41a for each mobile terminal device managed by the communication history management unit 41 of the network management device 4. Further, FIG. 5 shows the network usage history 41 for each sub-network and each router managed by the communication history management unit 41 of the network management device 4.
It shows an example of b.

Next, the operation of this system will be described.

In FIG. 1, the mobile terminal device 2 is usually
It is assumed that the subnetwork 1a is being used (hereinafter, the subnetwork to be used is usually called a home subnetwork), but now the subnetwork 1c has been moved. The mobile terminal device 2 notifies the address management device 3 of an address allocation request including a terminal device identifier that can uniquely identify itself and an application identifier that can uniquely identify the application to be used (step s).
1).

When the address management device 3 receives the address allocation request, the address management device 3 checks whether or not there is an unused address held therein (step s2), and if not, returns an address allocation rejection to the mobile terminal device 2. In this case, whether or not the terminal device (mobile terminal device 2) having the identifier may be connected to the sub-network 1c is notified to the network management device 4 by adding the application identifier designated by the address allocation request ( Step s3).

In this example, a TCP / IP network is taken as an example, and the terminal device identifier M is used as the terminal device identifier.
It is assumed that the AC address is used and the port number assigned to the application layer service is used as the application identifier.

The impact predicting unit 42 of the network management device 4
When receiving the notification of the inquiry of connection availability from the address management device 3, the device uses the corresponding port number of the terminal device (mobile terminal device 2) of the corresponding MAC address in the application usage history 41a managed by the communication history management unit 41. Based on the usage history of the indicated application, the traffic volume generated by the terminal device (mobile terminal device 2) of the corresponding MAC address using the application indicated by the corresponding port number is predicted, and what kind of traffic is added to the network 1 It is predicted whether or not there will be fluctuations (step s4).

In this example, traffic fluctuations are predicted as follows. That is, the network management device 4 observes and collects the traffic in each of the sub-networks 1a to 1c by the network monitoring devices 5a to 5c. The collected traffic data is first sent to the terminal device M
It is classified according to the AC address, further classified according to the sub-network to which the communication partner terminal device is connected, and finally classified according to the port number included in the UDP or TCP header for management.

When collecting traffic, the application whose history is to be collected may be determined by the network administrator in accordance with the actual conditions of the network, and it is not necessary to collect history for all applications. As an example, FTP (well-known port number 20/21), S
It is conceivable to collect the communication history of an application that uses MTP (well-known port number 25), HTTP (default port number 80), or the like.

The classified traffic data is totaled by calculating an average value and a maximum value when using the application, and finally managed as an application usage history 41a in the home sub-network for each terminal device shown in FIG.

Now, the mobile terminal device 2 having the MAC address address 1 is the home sub-network from the sub-network 1a (subnetwork1) to the sub-network 1
If the user moves to c (subnetwork 3) and uses the application indicated by application 1, assuming that the same communication as when he / she was in the home subnetwork is performed, in the case of the network configuration shown in FIG. Application applicat in 1a
Sub-network 1 compared to the case of using ion 1
The average traffic of a, 1b, and 1c is (-av
erage 21-average 31), (average 11-averag
e 31), (average 11 + average 21), and the average traffic of routers 6a and 6b is (aver)
age 11-average 21-average 31), (average
11 + average 21-average 31) It can be predicted to increase (decrease if the total is negative). The maximum value can be similarly predicted.

Traffic fluctuations are predicted as described above, and the movement is performed by adding / subtracting to / from the maximum traffic amount of the network usage history 41b for each sub-network and each router managed by the communication history management unit 41. It is possible to obtain the expected usage status of each part of the network later.

In this way, the impact predicting unit 42 obtains the network usage status predicted by the usage of the application application 1 in the sub-network 1c of the mobile terminal device 2, and the network manager detects the traffic abnormality of the network. By checking whether the threshold or capacity set in each sub-network and each router is exceeded, as shown in FIG.
Determine whether there is a possibility of adverse effects (step s
5).

In this example, the following four cases will be considered as adverse effects. (1) The traffic fluctuation predicted by the average traffic of the application usage history 41a for each terminal device exceeds the capacity of a certain part of the network. (2) The traffic fluctuation predicted by the average communication volume of the application usage history 41a for each terminal device exceeds the threshold of a certain part of the network, but does not exceed the capacity. (3) The traffic fluctuation predicted by the maximum traffic of the application usage history 41a for each terminal device exceeds the capacity of a certain part of the network. (4) The traffic fluctuation predicted by the maximum communication amount of the application usage history 41a for each terminal device exceeds the threshold of a certain part of the network, but does not exceed the capacity.

The degree of adverse effect is greatest in case (1) and smallest in case (4). Depending on the way of thinking about network management, for example, in the case of (4), the degree of the adverse effect may be small, so
It can also be determined that there is no adverse effect, and the determination is based on the guideline for the impact determination in the impact prediction unit 42. In this example, it is determined that there is an adverse effect in all of the above cases.

If none of the above (1) to (4) applies, the influence predicting unit 42 judges that there is no adverse effect and permits connection (step s6), and any of the above (1) to (4). If the above condition applies, it is determined that there is an adverse effect and the connection is rejected (step s7).

The connection propriety notifying section 43 is responsive to the connection propriety determination result of the influence predicting section 42, and the address management device 3
Is notified of connection availability (step s8). According to the notification from the network management device 4, the address management device 3 permits the use by assigning an address to the mobile terminal device 2 (step s10), or rejects the use by rejecting the assignment of the address (step s10). Step s11).

[0030]

As described above, according to the method of the present invention, the network management device collects in advance, for one terminal device that has moved on the network, an application of the one terminal device before the movement. Based on the usage history, it is possible to determine whether or not the use of the application specified by the one terminal device adversely affects the network, and thereby determine whether or not the connection of the one terminal device is permitted. Since it is possible to determine and notify the address management device whether or not connection is possible, it is possible to more specifically determine the traffic that actually occurs due to the connection of the terminal device to the destination sub-network, and to determine the percentage that cannot be used due to connection rejection. Can be reduced.

Further, according to the system of the present invention, the influence predicting means in the network management device is based on the application usage history corresponding to the application designated by the one terminal device, for the one terminal device which has moved on the network. Therefore, it is possible to determine whether or not the use of the application in the subnetwork of the moving destination of the one terminal device adversely affects the network. Therefore, it is actually generated by the connection of the terminal device to the subnetwork of the moving destination. It is possible to more specifically determine the traffic to be used, and reduce the ratio of connection refusal that cannot be used.

[Brief description of drawings]

FIG. 1 is a configuration diagram showing an example of a system of the present invention.

FIG. 2 is a configuration diagram showing a main part of a network management device

FIG. 3 is a flowchart showing a flow of operations in this system.

FIG. 4 is an explanatory diagram showing an example of an application usage history.

FIG. 5 is an explanatory diagram showing an example of a network usage status history.

[Explanation of symbols]

1 ... Network, 1a, 1b, 1c ... Subnetwork, 2 ... Mobile terminal device, 3 ... Address management device, 4 ... Network management device, 5a, 5b, 5c ... Network monitoring device, 6a, 6b ... Router, 41 ... Communication History management unit, 41a ... Application usage history, 41b ... Network usage status history, 42 ... Impact prediction unit, 43 ... Connection availability notification unit.

Continuation of front page (51) Int.Cl. ⁶ Identification code Office reference number FI Technical display area H04L 12/66

Claims (2)

[Claims] 1. An address management device that dynamically allocates an address to a terminal device when one terminal device that has moved on a network composed of a plurality of sub-networks requests address allocation, manages the communication history of the terminal device. The network management device inquires whether or not the one terminal device may be connected to the movement destination sub-network, and the network management device connects the one terminal device to the movement destination sub-network to the network. When it is determined whether or not to have a bad influence, whether or not to permit the connection of the one terminal device is determined, and this is notified to the address management device, and the address management device is notified of the connection permission. Assigns an address to the one terminal device, and when receiving a connection refusal notification, assigns an address to the one terminal device. In the terminal device connection permission method of rejecting, the terminal device specifies the type of application to be used and requests address allocation, and the address management device adds the specified type of application to inquire whether connection is possible, and manages the network. The device determines whether or not the use of the designated application in the subnetwork to which the terminal device moves has an adverse effect on the network, based on the previously collected use history of the application before the terminal device moves. According to the method, it is determined whether or not to permit the connection of the terminal device. 2. A network comprising a plurality of sub-networks, a terminal device that moves on the network, an address management device that dynamically assigns an address to the terminal device, and a network management device that manages the communication history of the terminal device. When one terminal device moving on the network requests address allocation, the address management device determines whether the network management device may connect the one terminal device to the destination subnetwork. Inquiry, the network management device determines whether or not the connection of the one terminal device to the sub-network of the movement destination adversely affects the network, and determines whether or not to permit the connection of the one terminal device, This is notified to the address management device, and when the address management device is notified of the connection permission, the address management device is notified to the one terminal device. In the terminal device connection permission system that assigns an address to the terminal device and refuses the address assignment to the one terminal device when a connection rejection notification is received, a terminal that requests the address assignment by specifying the type of application to be used. A device, an address management device that inquires whether the connection is possible by adding the type of the specified application, and the traffic generated on the network is collected from the network monitor device, etc., and the type of the application used for each terminal device A communication history management unit that classifies the management information into application history and classifies the application usage history, and whether or not the use of the specified application in the subnetwork to which the terminal device is moved adversely affects the network based on the application usage history. Impact of judgment And a network management device having a connection permission / prohibition notifying means for deciding whether or not to permit the connection based on the judgment result and notifying the address management device of the determination. Terminal device connection permission system.