WO2017073030A1

WO2017073030A1 - Gateway device, communication control method, communication control system, and program storage medium

Info

Publication number: WO2017073030A1
Application number: PCT/JP2016/004598
Authority: WO
Inventors: 雅一清水
Original assignee: 日本電気株式会社
Priority date: 2015-10-27
Filing date: 2016-10-17
Publication date: 2017-05-04
Also published as: JP2017085323A; JP6766337B2

Abstract

Provided is art capable of easily setting, in a gateway device, information required for controlling the communication of a communication device via the gateway device. A gateway device 4 is provided with a determination unit 22 and a communication control unit 24. On the basis of predetermined information corresponding to the type of communication device for which communication is to be controlled, the determination unit 22 determines the content of communication settings related to the communication of the communication device 2 via said device 4. The communication control unit 24 controls the communication of the communication device 2 via said device 4 in accordance with the determined communication settings.

Description

Gateway device, communication control method, communication control system, and program storage medium

The present invention relates to a technique for setting information necessary for controlling a communication operation performed by a communication device via a gateway device in the gateway device.

In some cases, a plurality of communication devices having communication functions such as a personal computer (PC: Personal Computer), a printer, and a game machine in a home are connected to each other via a local area network (LAN). In some cases, these communication devices are connected to an external server or the like via a LAN, a gateway device such as a home router, and a wide area network (WAN). In this way, in order for a communication device to connect to another communication device or an external server, the user confirms the performance of each communication device and then transmits information (setting information) necessary for the communication operation to each communication. You need to manually configure the communication settings for the device.

Patent Document 1 describes a technique in which an information processing apparatus performs communication settings suitable for a network to which the information processing apparatus belongs based on setting information transmitted from a server.

Patent Document 2 describes a technique in which setting of each field device is performed via a network by registering setting information of a large number of field devices in a supply server.

Furthermore, Patent Document 3 describes a technique in which network device receives communication setting information for performing communication setting from a setting terminal, and the network device performs communication setting based on the received communication setting information.

Further, Patent Document 4 describes a gateway device that automatically acquires a device identifier for allowing a device to participate in a network by analyzing a transmission radio wave of the device.

JP 2012-199838 A JP 2009-284183 A JP 2007-306239 A JP 2014-007668 A

When the user sets information on individual communication devices in the gateway device, the user acquires information on each communication device by referring to a manual, for example. Based on the acquired information, the user manually sets communication device information in the gateway device. This setting work takes time and effort, and inappropriate information may be set.

The techniques described in Patent Documents 1 to 3 are all techniques for setting communication in the communication device itself. Patent Documents 1 to 3 do not disclose a technique for setting communication in the gateway device.

In the technique described in Patent Document 4, in order to acquire a device identifier associated with a communication device, the gateway device needs to analyze a radio wave transmitted by the communication device. Therefore, the gateway device must be equipped with a radio wave analysis device such as a packet analyzer or a sniffer. Such a device configuration is redundant and complicated. Further, when the radio wave analysis fails, the gateway device cannot acquire the device identifier, and cannot connect the communication device that cannot acquire the device identifier to the network or another communication device.

The present invention has been devised to solve the above problems. That is, a main object of the present invention is to provide a technology that can easily set information necessary for controlling communication of a communication device via a gateway device in the gateway device.

In order to achieve the above object, the gateway device of the present invention provides:
Determining means for determining the content of communication settings related to communication of the communication device via its own device based on predetermined information corresponding to the type of communication device to be controlled;
Communication control means for controlling communication of the communication device via the own apparatus according to the determined communication setting;
Is provided.

The communication control method of the present invention includes:
Based on predetermined information according to the type of communication device to be controlled, determine the content of communication settings related to communication of the communication device through its own device,
Control communication of the communication device via the own apparatus according to the determined communication setting.

The communication control system of the present invention
A database server that associates and holds an identifier of a communication device and predetermined information corresponding to the type of the communication device;
A gateway device connected to the communication device and the database server,
The gateway apparatus determines a communication setting content related to the communication device based on the predetermined information;
A communication control unit for controlling communication via the gateway device by the communication device according to the determined communication setting;
Have

The program storage medium of the present invention includes:
Based on predetermined information corresponding to the type of communication device to be controlled for communication, processing for determining the content of communication settings related to communication of the communication device via its own device;
A process for controlling communication of the communication device via the own apparatus according to the determined communication setting;
A computer program for causing a computer to execute is stored.

According to the present invention, information necessary for controlling communication of the communication device via the gateway device can be easily set in the gateway device.

It is a block diagram showing the example of 1 structure of the gateway apparatus concerning this invention. It is a figure which illustrates the structure of the communication control system of 1st Embodiment which concerns on this invention. It is a block diagram which illustrates the composition of the gateway device in a 1st embodiment. It is a table | surface which illustrates the information which the database of the gateway apparatus in 1st Embodiment hold | maintains. It is a block diagram which illustrates the composition of the database server in a 1st embodiment. It is a table | surface which illustrates the information which the information database of the database server in 1st Embodiment hold | maintains. It is a sequence diagram explaining operation | movement of the communication control system which concerns on 1st Embodiment. It is a figure which illustrates the structure of the communication control system of 2nd Embodiment which concerns on this invention. It is a table | surface which illustrates the information which the information database of the database server in 2nd Embodiment hold | maintains. It is a sequence diagram which illustrates operation | movement of the communication control system of 2nd Embodiment.

First, an outline of an embodiment of the present invention will be described.

FIG. 1 is a block diagram illustrating the configuration of a gateway device 4 according to an embodiment of the invention. FIG. 2 is a diagram illustrating the configuration of a communication control system including the gateway device 4. Referring to FIG. 1, the gateway device 4 includes a determination unit 22 and a communication control unit 24. Referring to FIG. 2, gateway device 4 is connected to a communication device (for example, devices 2A to 2C in FIG. 2).

The determination unit 22 determines the content of communication settings related to communication of the communication device via the own device (gateway device 4) based on predetermined information corresponding to the type of communication device. Examples of communication device types include PCs (Personal Computers), home appliances, game machines, and surveillance cameras. In addition, examples of predetermined information according to the type of communication device include product category, usage, communication function, security function / performance, (product) related information, recommended communication settings, etc. as shown in FIG. There is. Further, examples of communication setting contents regarding the communication device include network separation, QoS (Quality of Service), effective port, encryption processing, access restriction / notification to the user, etc. as shown in FIG.

Further, the communication control unit 24 communicates with the communication device via the gateway device 4 according to the determined communication settings (for example, communication within the LAN (Local Area Network) 8 in FIG. 2, WAN (Wide Area Network) 10 side). Communication).

The gateway device 4 can set communication settings relating to communication of the communication device via the own device by the gateway device 4 itself. This is because the gateway device 4 determines the contents of communication settings related to the communication device (network separation, QoS, effective port, effective address, encryption processing, access restriction, notification to the user, etc.) based on information according to the type of the communication device. This is because it can be determined by the device itself.

<First Embodiment>
Next, a communication control system according to a first embodiment of the present invention will be described with reference to the drawings.

(Constitution)
FIG. 2 is a diagram illustrating a connection configuration of the communication control system according to the first embodiment. Referring to FIG. 2, the communication control system of the first embodiment includes a gateway device 4 and a database server 6. The gateway device 4 and the database server 6 are connected via a WAN (Wide Area Network) 10. Communication devices 2A to 2C are connected to the gateway device 4 via a LAN (Local Area Network) 8 such as Ethernet (registered trademark) or Wi-Fi (Wireless Fidelity) (registered trademark). The communication devices 2A to 2C are, for example, surveillance cameras, game machines, home appliances (TVs, air conditioners, refrigerators, etc.), PCs (Personal Computers), and the like. Hereinafter, the communication devices 2A to 2C are collectively referred to as the communication device 2 as appropriate.

FIG. 3 is a block diagram illustrating the configuration of the gateway device 4. Referring to FIG. 3, the gateway device 4 includes a communication unit 12, a request transmission unit 14, a database 16, a search unit 18, a reception unit 20, a determination unit 22, a communication control unit 24, a fraud report unit 26, an alarm generation unit 28, A reporting database 30 is provided.

The communication unit 12 sends information to the communication device 2 and the database server 6 connected to the gateway device 4. In addition, the communication unit 12 receives information from the communication device 2 and the database server 6.

When the communication unit 12 receives a communication request including the identifier (for example, MAC (Media Access Control) address) of the communication device 2 from the communication device 2, the search unit 18 executes the following search operation. That is, the search unit 18 confirms whether or not “predetermined information” regarding the communication device 2 associated with the received identifier of the communication device 2 is stored in the database 16.

FIG. 4 is a table illustrating information held in the database 16 of the gateway device 4. Referring to FIG. 4, the database 16 holds communication device identifiers, “predetermined information”, and communication settings determined by the determination unit 22 in association with each other. Here, the “predetermined information” is information corresponding to the type of the communication device 2 as shown in FIG. 4, for example, “product category”, “use”, “communication function”, “security function”. , Performance "," related information "and" recommended communication settings ". “Recommended communication settings” are recommended communication settings based on at least one of “Product category”, “Usage”, “Communication function”, “Security function / performance”, and “Related information”. Including. The recommended communication setting may be, for example, a communication setting recommended by a vendor of the communication device 2 or a vendor of an application operating on the communication device 2. Further, “recommended communication settings” regarding “related information” may include “designation / restriction of transmission IP (Internet protocol) address and reception IP address”. Such a communication setting permits, for example, access to a server used for service provision by the communication device 2 and a server used when updating firmware (these servers have specific IP addresses). Can be used for.

When the database 16 does not hold the “predetermined information” regarding the communication device 2, the request transmission unit 14 inquires the database server 6 about the “predetermined information” regarding the communication device 2 (requests information). At this time, the request transmission unit 14 uses all or part of the identifier (MAC address) of the communication device 2 received from the communication device 2.

The receiving unit 20 receives “predetermined information” regarding the communication device 2 from the database server 6 via the communication unit 12. The receiving unit 20 stores the received “predetermined information” in the database 16 in association with the identifier (MAC address) of the communication device 2.

The determination unit 22 performs communication settings regarding the communication device 2 (for example, network separation, QoS, security measures, communication rejection, etc.) based on the “predetermined information” acquired from the database server 6 or the database 16. For example, the determination unit 22 performs communication setting for separating a network accessible by the communication device 2 from other networks according to “product category” included in “predetermined information”. In addition, the determination unit 22 performs communication settings related to the bandwidth and priority of communication by the communication device 2 according to the “use” included in the “predetermined information”. Furthermore, the determination unit 22 performs communication settings related to an effective port for communication by the communication device 2 according to the “communication function” included in the “predetermined information”. Further, the determination unit 22 substitutes the gateway device 4 for encryption processing (encryption processing, decryption processing, etc.) for the communication device 2 in accordance with the “security function / performance” included in the “predetermined information”. Make communication settings as follows. Furthermore, the determination unit 22 blocks access to at least some ports and addresses by the communication device 2 or rejects communication by the communication device 2 according to “related information” included in the “predetermined information”. Set the communication settings to be performed. Alternatively, the determination unit 22 notifies the user of related information using a predetermined notification method. Further, when the communication setting as described above is completed, the determination unit 22 registers the completed communication setting content in the database 16 in association with the identifier of the communication device 2. Furthermore, the determination unit 22 displays the contents of the set communication settings and the like together with the acquired identifier (MAC address) of the communication device 2 on the screen that displays the internal information of the gateway device 4.

The communication control unit 24 controls communication of the communication device 2 via its own device (gateway device 4) according to the communication setting determined by the determination unit 22. Further, the communication control unit 24 notifies the fraud report unit 26 of information related to the fraudulent communication when communication (illegal communication) that violates the product category, usage, or the like is detected.

The fraud report unit 26 notifies the user and the database server 6 of information related to fraudulent communication. Specifically, the fraud report unit 26 uses the alarm generation unit 28 to notify the user of the occurrence of unauthorized communication. Further, the fraud report unit 26 accumulates information related to fraudulent communication in the report database 30. Further, the fraud report unit 26 reports information related to unauthorized communication to the database server 6 via the communication unit 12.

FIG. 5 is a block diagram illustrating the configuration of the database server 6. Referring to FIG. 5, the database server 6 includes a communication unit 32, a request reception unit 34, an information database 36, a search unit 38, a transmission unit 40, a report reception unit 42, and a report database 44.

The communication unit 32 sends information to the gateway device 4 and receives information from the gateway device 4.

When the request receiving unit 34 receives an information request for “predetermined information” from the gateway device 4 together with the identifier of the communication device 2 via the communication unit 32, the request receiving unit 34 transfers the received information request to the search unit 38.

Upon receiving the information request, the search unit 38 refers to the information database 36 and searches for “predetermined information” associated with the identifier (MAC address) of the communication device 2 received from the gateway device 4.

FIG. 6 is a table illustrating information stored in the information database 36 of the database server 6. Referring to FIG. 6, the information database 36 holds the identifier of the communication device 2 and “predetermined information” in association with each other. Here, “predetermined information” means “product category”, “use”, “communication function”, “security function, performance”, “related information”, and “related information” of the communication device 2, as shown in FIG. "Recommended communication settings". “Recommended communication settings” are recommended communication based on at least one of “product category”, “use”, “communication function”, “security function / performance”, and “related information”. Includes settings. The “recommended communication setting” may be a communication setting recommended by the vendor of the communication device 2 or the vendor of the application operating on the communication device 2, for example.

The transmission unit 40 transmits the searched “predetermined information” to the gateway device 4 via the communication unit 32.

The report receiving unit 42 stores information on the unauthorized communication from the gateway device 4 via the communication unit 32 and stores it in the report database 44.

(Operation)
Next, an operation example of the communication control system of the first embodiment including the communication device 2, the gateway device 4 directly connected to the communication device 2, and the cloud database server 6 that manages device information will be described. FIG. 7 is a sequence diagram illustrating the operation of the communication control system.

(1) Automatic Acquisition of Device Information Referring to FIG. 7, the communication device 2 transmits a communication request together with the identifier of the communication device 2 to the gateway device 4 (step A1). Here, as an identifier of the communication device 2 exchanged when the communication device 2 starts communication, for example, there is a MAC (Media Access Control) address. Here, in principle, the MAC address is individually assigned to the communication device 2 and is information unique to the communication device 2. In the first embodiment, the case where the identifier of the communication device 2 is a MAC address will be described. However, the identifier of the communication device 2 is not limited to the MAC address, and can uniquely identify the communication device 2 (or a product) As long as it can identify the type).

The communication unit 12 of the gateway device 4 receives the communication request including the identifier (MAC address) transmitted from the communication device 2. Then, the search unit 18 of the gateway device 4 refers to the database 16 and confirms whether or not information related to the communication device 2 is held in association with the received MAC address (step A2). If the database 16 holds the information, the process proceeds to step A7. On the other hand, when the database 16 does not hold the information, the request transmission unit 14 uses the information of all or a part of the MAC address received from the communication device 2 to transmit the information on the communication device 2 to the database server 6. Is requested (step A3).

The request receiving unit 34 of the database server 6 accepts a request from the gateway device 4 via the communication unit 32 and transfers the request to the search unit 38. The search unit 38 refers to the information database 36 in response to the received request, and searches for “predetermined information” associated with the MAC address received from the gateway device 4 (step A4). The transmission unit 40 transmits (replies) the searched “predetermined information” to the gateway device 4 via the communication unit 32 (step A5).

Here, “predetermined information” means “product category”, “use”, “communication function”, “security function, performance”, “related information”, and “recommended communication setting” of the communication device 2. is there. “Recommended communication settings” are recommended communication based on at least one of “product category”, “use”, “communication function”, “security function / performance”, and “related information”. Includes settings.

The receiving unit 20 of the gateway device 4 receives “predetermined information” regarding the communication device 2 from the database server 6 via the communication unit 12. The receiving unit 20 registers the received “predetermined information” in the database 16 in association with the MAC address of the communication device 2 (step A6). The database 16 in the gateway device 4 is updated regularly.
(2) Automatic setting of communication connection The determination unit 22 of the gateway device 4 is based on “predetermined information” received from the database server 6 or “predetermined information” registered in the database 16. The communication setting is performed (step A7). The communication settings performed by the determination unit 22 may include the following settings (2.1) to (2.5), for example.

(2.1) “Network separation” setting according to “product category” The determination unit 22 determines according to “product category”, that is, according to categories such as home appliances and OA (Office Automation) devices. Perform network separation (for example, access restriction). For example, when the “product category” of the communication device 2 is “game machine”, the determination unit 22 unconditionally disables connection to the LAN. At this time, even if a Wi-Fi (Wireless Fidelity) SSID (Service Set Identifier) and a password are set, the communication device 2 corresponding to the game machine cannot be connected to the LAN 8. As another example, when the “product category” of the communication device 2 is “home appliance”, the determination unit 22 can disable communication with the WAN 10 side. The user sets these “policies” (for example, “game machine cannot be connected”, “home appliances only for home connection”, etc.) in the gateway device 4. The policies related to these communication settings are merely examples, and the policies used by the determination unit 22 are not limited to these.
(2.2) “QoS” Setting According to “Use” The determination unit 22 performs settings related to the QoS of communication (for example, traffic limit or priority setting) according to “use”. For example, the determination unit 22 can give high priority to communication with real-time requirement and give low priority to other communication. For example, when the communication device 2 is a monitoring camera, an image captured by the monitoring camera is transferred to an external storage device or a personal computer via the gateway device 4, and the captured image is monitored on a personal computer in real time (use ). In such a case, since the real-time property is required as the “use” of communication performed by the communication device 2, the determination unit 22 sets the priority of communication by the communication device 2 to a high priority.

(2.3) “Effective Port” Setting According to “Communication Function (Protocol)” The determination unit 22 performs effective port setting according to “Communication Function (Protocol to be Used)”. Generally, since a port to be used is determined in advance according to the type of the communication device 2, the determination unit 22 blocks inappropriate communication by discarding (dropping) a packet addressed to an unused port.

(2.4) “Security Function Substitution” Setting According to “Security Function / Performance” The determination unit 22 performs encryption processing (encryption, encryption, etc.) when performing communication through the network according to “security function / performance”. Communication settings that support decoding, etc.). Some communication devices 2 do not have a cryptographic processing function (or do not have sufficient processing capability). In such a case, the determination unit 22 sets the gateway device 4 to substitute processing related to the security function (for example, communication encryption).

(2.5) “Access restriction, user notification” setting according to “(Product) related information” The determination unit 22 determines at least some ports and addresses by the communication device 2 according to “(Product) related information”. The communication setting for blocking the access to the communication device 2 or rejecting the communication by the communication device 2 is performed. Moreover, the determination part 22 may notify a user of related information. Here, “(product) related information” is information related to a product, and indicates information updated as needed. For example, for the communication device 2 in which “vulnerability information” exists as “related information”, the determination unit 22 performs communication settings such as blocking access to some ports and addresses, or performing full communication rejection. . Furthermore, the determination unit 22 notifies the user of alarm information as necessary. Although the alarm information notification method is not particularly limited, for example, the gateway device 4 transmits a mail including the alarm information to a user terminal connected to the gateway device 4. Alternatively, the gateway device 4 may light or blink a warning LED (Light Emitting Diode) provided in the gateway device 4. On the other hand, for the communication device 2 in which less urgent information such as “firmware update information” and “notification” exists as “related information”, the determination unit 22 notifies the user terminal by e-mail. May be.

The determination unit 22 registers the determined communication setting in the database 16 when the communication setting (step A7) is completed. In addition, the determination unit 22 determines on the screen (for example, the display of a user terminal (such as a PC) connected to the gateway device 4) the internal information of the gateway device 4 together with the acquired MAC address of the communication device 2. The communication settings determined by the unit 22 are displayed. For example, based on the acquired information, the determination unit 22 displays information such as the device name, model number, and network distinction of the communication device 2 on the display of the user terminal connected to the gateway device 4 together with the MAC address. May be. Thereby, the user can confirm whether or not the communication setting intended by the user is made by referring to the communication setting automatically set by the gateway device 4.

(3) Report of Unauthorized Communication The communication control unit 24 of the gateway device 4 controls communication of the communication device 2 using the gateway device 4 according to the communication setting determined in step A7 (steps A8 and A9). Further, when communication (illegal communication) that violates the product category, usage, or the like is detected, the communication control unit 24 includes information on unauthorized communication (for example, the identifier of the communication device 2 that performed unauthorized communication, the content of unauthorized communication, etc. ) To the fraud report unit 26. The fraud report unit 26 notifies the user and the database server 6 of information related to fraudulent communication. Specifically, the alarm generation unit 28 notifies the user of the occurrence of unauthorized communication. Although the notification method is not particularly limited, for example, methods such as lighting or blinking of a lamp, generation of an alarm sound, and mailing to a user terminal are used. In addition, the fraud report unit 26 accumulates information related to fraudulent communication in the report database 30 so that registration information in the report database 30 can be referred to from a user terminal. Further, the fraud report unit 26 reports information related to the fraudulent communication to the database server 6 via the communication unit 12 (step A10). When the report receiving unit 42 of the database server 6 receives information related to unauthorized communication via the communication unit 32, the report receiving unit 42 registers it in the report database 44 (step A11).

Furthermore, the information held in the database 16 of the gateway device 4 and the information database 36 of the database server 6 are appropriately updated and synchronized (steps A12 and A13).

(effect)
In the first embodiment, the gateway device 4 acquires predetermined information corresponding to the type of the communication device 2 from the database server 6 and performs communication settings of the communication device 2 based on the acquired information. Therefore, in the communication control system according to the first embodiment, the communication setting in the gateway device 4 necessary for the communication device 2 to communicate via the gateway device 4 is set by the gateway device 4 instead of manually by a user or the like. Is done.

Also, according to the first embodiment, communication setting is performed by the gateway device 4 without the user himself investigating and setting information of the communication device 2. Therefore, the communication using the gateway device 4 is appropriately controlled by the gateway device 4 without being adversely affected by the information input error to the gateway device 4. Therefore, the user only needs to set the communication policy and the update frequency of the internal database to the gateway device 4. Furthermore, in the communication control system according to the first embodiment, since the communication device 2 does not need to notify the gateway device 4 of information related to the own device, the user first selects a number of communication devices 2 including the existing communication device 2. It can be applied to the communication control system of the embodiment.
Second Embodiment
Next, a communication control system according to a second embodiment of the present invention will be described with reference to the drawings. In the communication control system of the second embodiment, the communication settings determined by the gateway device 4 are also stored in the database server 6 in addition to information according to the type of the communication device 2 and information related to unauthorized communication. In addition, a plurality of gateway devices 4 can be connected to the database server 6 and these gateway devices 4 can share communication settings.

(Constitution)
FIG. 8 is a diagram illustrating a configuration of a communication control system according to the second embodiment. Referring to FIG. 8, the communication control system includes

gateway devices

4P and 4Q and a database server 6. The

gateway devices

4P and 4Q and the database server 6 are connected via the WAN 10. Communication devices 2A to 2C are connected to the gateway apparatus 4P via a LAN 8P such as Ethernet (registered trademark) or Wi-Fi. The gateway device 4Q is connected to the communication device 2 (for example, the communication device 2C) via the LAN 8Q. Hereinafter, the

gateway devices

4P and 4Q are also collectively referred to as the gateway device 4 as appropriate.

As a case where communication settings are shared among a plurality of

gateway devices

4P, 4Q, for example, it is conceivable to share communication settings between a gateway device 4P at home and a gateway device 4Q at a separate house (villa, etc.). In addition, when the old and new gateway devices 4 are replaced, the communication settings of the gateway device 4P before the replacement may be transferred to the gateway device 4Q after the replacement. Furthermore, a case where communication settings are collectively performed (synchronized) for a plurality of access points (gateway devices 4) provided on each of a plurality of floors of an office building is conceivable. Note that these cases are merely examples, and cases where the communication control system of the second embodiment is effective are not limited thereto. Further, the connection configuration shown in FIG. 8 and the number of gateway devices 4 and communication devices 2 are merely examples.

Hereinafter, the communication control system according to the second embodiment will be described focusing on differences from the first embodiment. The

gateway devices

4P and 4Q in the second embodiment also have the same configuration as the gateway device 4 (see FIG. 3) in the first embodiment. However, in the second embodiment, the determination unit 22 of the gateway device 4 also sends the determined communication settings to the database server 6.

The database server 6 in the second embodiment also has the same configuration as the database server 6 (see FIG. 5) in the first embodiment. However, in the second embodiment, the information database 36 of the database server 6 also holds the communication settings sent from the gateway device 4. Here, as an example, the information database 36 holds the communication settings acquired from the gateway device 4, but the database server 6 may hold the acquired communication settings in a separate database.

FIG. 9 is a table illustrating information stored in the information database 36 of the database server 6 in the second embodiment. Referring to FIG. 9, the information database 36 holds the identifier of the gateway device 4, the identifier of the communication device 2, “predetermined information”, and the “communication setting” determined by the gateway device 4. To do. If there is no need to identify the gateway device 4 that has determined the communication setting, the identifier of the gateway device 4 in FIG. 9 may be omitted.

In the second embodiment, when the search unit 38 receives an information request from the gateway device 4, the search unit 38 refers to the information database 36 in response to the information request. Then, the search unit 38 searches the information database 36 for “predetermined information” and “communication setting” regarding the communication device 2 having the MAC address (the identifier of the communication device 2) received from the gateway device 4. The transmission unit 40 transmits the searched “predetermined information” and “communication setting” to the gateway device 4. On the other hand, when the “communication setting” associated with the MAC address included in the information request is not registered in the information database 36, the transmission unit 40 transmits only “predetermined information” to the gateway device 4.

(Operation)
FIG. 10 is a sequence diagram illustrating the operation of the communication control system according to the second embodiment. Here, it is assumed that the communication settings regarding the

communication devices

2A and 2C determined by the gateway device 4P have been registered in the information database 36 of the database server 6. In this case, the operation when the

communication device

2A or 2B is connected to the gateway device 4Q will be described.

The operation in which the communication device 2 sends a communication request to the gateway device 4Q (step B1) and the operation in which the gateway device 4Q confirms the database 16 (step B2) are steps A1 and A2 in the first embodiment (FIG. 7). This is the same as the operation of (see).

In the second embodiment, the request receiving unit 34 of the database server 6 receives the information request from the gateway device 4 via the communication unit 32 and transfers the information request to the search unit 38. The search unit 38 refers to the information database 36 in response to the information request, and searches for “predetermined information” and “communication setting” information associated with the MAC address received from the gateway device 4 (step B4). . Here, it is assumed that “communication setting” associated with the MAC address exists (that is, the communication device 2A has accessed the gateway device 4Q). In this case, the transmission unit 40 transmits the searched “predetermined information” and “communication setting” to the gateway device 4 via the communication unit 32 (step B5). On the other hand, it is assumed that there is no “communication setting” associated with the MAC address (that is, the communication device 2B has accessed the gateway device 4Q). In this case, the transmission unit 40 transmits the searched “predetermined information” to the gateway device 4 via the communication unit 32 (step B5). The database server 6 may also perform processing such as user authentication if necessary when sharing communication settings among a plurality of gateway devices (for example, the

gateway devices

4P and 4Q). .

When “predetermined information” is received from the database server 6, the information registration operation (step B6) and communication setting operation (step B7) performed by the gateway device 4Q are the steps A6 and A7 of the first embodiment (see FIG. 7). It is the same. On the other hand, when both “predetermined information” and “communication setting” are received from the database server 6, the receiving unit 20 of the gateway device 4 </ b> Q stores the received “predetermined information” and “communication setting” information in the database 16. Store (step B6). At this time, the MAC address of the communication device 2 is associated with the stored “predetermined information” and “communication setting” information. Further, the determination unit 22 performs communication setting of the communication device 2 that has transmitted the communication request based on the “communication setting” received from the database server 6 (step B7).

(effect)
The communication control system of the second embodiment has the following effects in addition to the effects of the communication control system of the first embodiment. In the second embodiment, a plurality of gateway devices 4 can share communication setting information via the database server 6. Therefore, according to the second embodiment, the communication device 2 does not depend on the gateway device 4 to be connected (that is, does not depend on the LAN 8 to be accessed), and the same type of communication device 2 can enjoy the same communication setting. It becomes possible. Further, according to the second embodiment, the user only needs to set a policy related to communication setting in any one of the plurality of gateway devices 4, and set and manage the policy for each of the plurality of gateway devices 4. You are freed from the complexity. Therefore, when a plurality of gateway devices 4 are used in a home and a separate home, when the old and new gateway devices 4 are replaced, or when the gateway devices 4 are installed on each of a plurality of floors, management of the gateway devices is facilitated.

<Modification>
In the first and second embodiments, a case where a MAC address is used as the identifier of the communication device 2 is described. Here, a modified example when the MAC address “AB: CD: EF: ab: 12: 34” is given to the communication device 2 will be described as an example. Here, the “AB: CD: EF” portion of the MAC address can be used as information representing the manufacturer. The assignment of the product / individual number varies depending on the manufacturer, but here, as an example, it is assumed that “ab” is information representing a product (model number) and “12:34” is individual information.

At this time, the MAC address “AB: CD: EF: ab: 12: 34” can be used as the identifier of the communication device 2 in the database 16 (see FIG. 4) of the gateway device 4. On the other hand, unlike the gateway device 4, the identifier managed by the information database 36 (see FIG. 6) of the database server 6 only needs to identify the product (model number) of the communication device 2. Therefore, it is not necessary to hold “predetermined information” for each identifier of the communication device 2. That is, in the information database 36 of the database server 6, the identifier is given in a state associated with the identifier “AB: CD: EF: ab: **: **” (* is a symbol representing an arbitrary character). It is only necessary to hold “predetermined information” regarding the communication device 2. With this configuration, the amount of data held by the information database 36 can be significantly reduced. However, when the communication setting for each communication device 2 is held as in the information database 36 in the second embodiment, it is necessary to use an identifier that uniquely identifies the communication device as the identifier of the communication device.

In addition, although a part or all of said embodiment can be described also as the following additional remarks, it is not restricted to the following.
[Appendix 1]
A gateway device connected to a communication device,
A determination unit that determines communication settings for the communication device based on predetermined information according to a type of the communication device;
A communication control unit that controls communication by the communication device via the gateway device according to the determined communication setting.
[Appendix 2]
The predetermined information includes at least one of a product category, usage, communication function, security function / performance, related information, and recommended communication setting.
The gateway device according to attachment 1.
[Appendix 3]
The recommended communication setting is a communication setting recommended for at least one of product category, application, communication function, security function / performance, and related information,
The determining unit determines communication settings for the communication device according to the recommended communication settings.
The gateway device according to attachment 2.
[Appendix 4]
When the predetermined information includes a product category, the determination unit performs communication setting for separating a network accessible by the communication device and other networks according to the product category.
The gateway device according to attachment 2 or 3.
[Appendix 5]
The determining unit, when the predetermined information includes a use, performs communication settings related to the bandwidth and priority of communication by the communication device according to the use.
The gateway device according to any one of appendix 2 to appendix 4.
[Appendix 6]
The determining unit, when the predetermined information includes a communication function, performs communication setting related to an effective port of communication by the communication device according to the communication function.
The gateway device according to any one of appendix 2 to appendix 5.
[Appendix 7]
The determining unit, when the predetermined information includes a security function / performance, according to the security function / performance, performs communication settings to replace the encryption processing by the communication device by the gateway device,
The gateway device according to any one of appendix 2 to appendix 6.
[Appendix 8]
The determination unit, when the predetermined information includes related information, to block access to at least some ports and addresses by the communication device, or to perform communication settings to refuse communication by the communication device, or , Notifying the user of the related information,
The gateway device according to any one of appendices 2 to 7.
[Appendix 9]
A database that stores the identifier of the communication device and the predetermined information in association with each other;
A communication unit that receives a communication request including an identifier of the communication device from the communication device,
The determining unit refers to the database and determines communication settings for the communication device based on the predetermined information associated with an identifier included in the communication request.
The gateway device according to any one of supplementary notes 1 to 8.
[Appendix 10]
If the communication device identifier included in the communication request is associated with the predetermined information and is not held in the database, a request transmission unit that inquires the database server for the predetermined information using the identifier;
Receiving the predetermined information from the database server in response to the inquiry, and storing in the database in association with the identifier,
The gateway device according to attachment 9.
[Appendix 11]
The determination unit stores the determined communication setting for the communication device in the database in association with the identifier of the communication device and the predetermined information.
The gateway device according to attachment 10.
[Appendix 12]
The gateway device determining communication settings for the communication device based on predetermined information according to a type of the communication device; and
Controlling communication via the gateway device by the communication device in accordance with the determined communication settings.
A communication control method characterized by the above.
[Appendix 13]
The predetermined information includes at least one of a product category, usage, communication function, security function / performance, related information, and recommended communication setting.
The communication control method according to attachment 12.
[Appendix 14]
The recommended communication setting is a communication setting recommended for at least one of product category, application, communication function, security function / performance, and related information,
The gateway device determines communication settings for the communication device according to the recommended communication settings;
The communication control method according to attachment 13.
[Appendix 15]
When the predetermined information includes a product category, the gateway device performs communication setting for separating a network accessible by the communication device and a network other than the network according to the product category.
The communication control method according to Supplementary Note 13 or Supplementary Note 14.
[Appendix 16]
When the predetermined information includes a use, the gateway device performs communication settings related to the bandwidth and priority of communication by the communication device according to the use.
The communication control method according to any one of supplementary notes 13 to 15.
[Appendix 17]
When the predetermined information includes a communication function, the gateway device performs communication setting related to an effective port of communication by the communication device according to the communication function.
The communication control method according to any one of supplementary notes 13 to 16.
[Appendix 18]
When the predetermined information includes a security function / performance, the gateway device performs communication setting so that encryption processing by the communication device is replaced by the gateway device according to the security function / performance.
18. The communication control method according to any one of appendix 13 to appendix 17.
[Appendix 19]
The gateway device, when the predetermined information includes related information, performs a communication setting to block access to at least some ports and addresses by the communication device, or to refuse communication by the communication device, or , Notifying the user of the related information,
The communication control method according to any one of appendix 13 to appendix 18.
[Appendix 20]
The gateway device associating the identifier of the communication device and the predetermined information in a database,
Receiving a communication request including an identifier of the communication device from the communication device; and
The determination of the communication setting for the communication device is performed based on the predetermined information associated with the identifier included in the communication request with reference to the database.
The communication control method according to attachment 13.
[Appendix 21]
When the identifier of the communication device included in the communication request and the predetermined information are not associated with each other and stored in the database, the gateway device inquires the database server for the predetermined information using the identifier; ,
Obtaining the predetermined information from the database server in response to the inquiry and storing it in the database in association with the identifier.
The communication control method according to attachment 20.
[Appendix 22]
The gateway device includes storing the determined communication setting for the communication device in the database in association with the identifier of the communication device and the predetermined information.
The communication control method according to attachment 21.
[Appendix 23]
A database server that associates and holds an identifier of a communication device and predetermined information corresponding to the type of the communication device;
A gateway device connected to the communication device and the database server,
The gateway device determines a communication setting for the communication device based on the predetermined information;
A communication control unit for controlling communication via the gateway device by the communication device according to the determined communication setting,
A communication control system characterized by that.
[Appendix 24]
The determining unit notifies the database server of an identifier of the communication device and a communication setting determined for the communication device,
The database server stores the identifier of the gateway device, the identifier of the communication device, and the communication setting determined for the communication device in association with each other, and queries the predetermined information from the other gateway device to the communication device. In response to the communication setting determined by the gateway device,
The communication control system according to attachment 23.
[Appendix 25]
For the computer installed in the gateway device,
Processing for determining communication settings for the communication device based on predetermined information according to the type of the communication device;
Processing to control communication through the gateway device by the communication device according to the determined communication setting,
A program characterized by that.

It should be noted that the entire disclosure of the above patent document is incorporated herein by reference. Within the scope of the entire disclosure (including claims) of the present invention, the embodiment can be changed and adjusted based on the basic technical concept. Further, various combinations or selections of various disclosed elements (including each element of each claim, each element of each embodiment, each element of each drawing, etc.) are possible within the framework of the entire disclosure of the present invention. is there. That is, the present invention of course includes various variations and modifications that can be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, with respect to the numerical ranges described in this document, any numerical value or small range included in the range should be construed as being specifically described even if there is no specific description.

This application claims priority based on Japanese Patent Application No. 2015-212173 filed on Oct. 27, 2015, the entire disclosure of which is incorporated herein.

2, 2A to

2C Communication device

4, 4P, 4Q Gateway device 6

Database server

8, 8P, 8Q LAN
10 WAN
12 communication unit 14 request transmission unit 16 database 18 search unit 20 reception unit 22 determination unit 24 communication control unit 26 fraud report unit 28 alarm generation unit 30 report database 32 communication unit 34 request reception unit 36 information database 38 search unit 40 transmission unit 42 Report receiver 44 Report database

Claims

Determining means for determining the content of communication settings related to communication of the communication device via its own device based on predetermined information corresponding to the type of communication device to be controlled;
Communication control means for controlling communication of the communication device via the own apparatus according to the determined communication setting;
A gateway device comprising:
The predetermined information includes at least one of a product category, usage, communication function, security function / performance, related information, and recommended communication setting.
The gateway device according to claim 1.
The recommended communication setting is a communication setting recommended for at least one of product category, application, communication function, security function / performance, and related information,
The determining means determines communication settings related to the communication device according to the recommended communication settings;
The gateway device according to claim 2.
When the predetermined information includes a product category, the determination unit performs communication setting for separating a network accessible by the communication device and another network according to the product category.
The gateway device according to claim 2 or claim 3.
When the predetermined information includes a use, the determination unit performs communication settings related to a communication band and priority of the communication device according to the use.
The gateway device according to any one of claims 2 to 4.
When the predetermined information includes a communication function, the determination unit performs communication setting related to an effective port of communication by the communication device according to the communication function.
The gateway device according to any one of claims 2 to 5.
When the predetermined information includes a security function / performance, the determination unit performs communication setting in which the own apparatus executes encryption processing on behalf of the communication device, according to the security function / performance.
The gateway device according to any one of claims 2 to 6.
The determining means, when the predetermined information includes related information, performing a communication setting to block access to at least some ports and addresses by the communication device, or to refuse communication by the communication device; or , Notifying the user of the related information,
The gateway device according to any one of claims 2 to 7.
A database that stores the identifier of the communication device and the predetermined information in association with each other;
Communication means for receiving a communication request including an identifier of the communication device from the communication device,
The determining unit refers to the database and determines communication settings related to the communication device based on the predetermined information associated with an identifier included in the communication request;
The gateway device according to any one of claims 1 to 8.
If the predetermined information associated with the identifier of the communication device included in the communication request is not held in the database, a request transmission unit that inquires the database server for the predetermined information using the identifier;
Receiving means for storing the predetermined information transmitted from the database server in response to the inquiry in the database in a state associated with the identifier;
The gateway device according to claim 9, further comprising:
The determining means stores the determined communication setting in the database in association with the identifier of the communication device and the predetermined information.
The gateway device according to claim 10.
Based on predetermined information according to the type of communication device to be controlled, determine the content of communication settings related to communication of the communication device through its own device,
Controlling communication of the communication device via the own apparatus according to the determined communication setting;
Communication control method.
The predetermined information includes at least one of a product category, usage, communication function, security function / performance, related information, and recommended communication setting.
The communication control method according to claim 12.
The recommended communication setting is a communication setting recommended for at least one of product category, application, communication function, security function / performance, and related information,
In accordance with the recommended communication settings, determine communication settings to be the communication device.
The communication control method according to claim 13.
A database server that associates and holds an identifier of a communication device and predetermined information corresponding to the type of the communication device;
A gateway device connected to the communication device and the database server,
The gateway device, based on the predetermined information, determining means for determining the content of communication settings related to the communication device;
Communication control means for controlling communication by the communication device via the gateway device in accordance with the determined communication setting.
The determination means notifies the database server in a state in which the determined communication setting is associated with the identifier of the communication device,
The database server associates and holds an identifier of the communication device and a communication setting related to the communication device, and when the predetermined information related to the communication device is requested, communication associated with the identifier of the communication device Answer settings,
The communication control system according to claim 15.
Based on predetermined information corresponding to the type of communication device to be controlled for communication, processing for determining the content of communication settings related to communication of the communication device via its own device;
A process for controlling communication of the communication device via the own apparatus according to the determined communication setting;
A program recording medium that holds a computer program that causes a computer to execute the program.