JP2002027132A - Method and unit for detecting abnormity communication, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method and a unit for detecting abnormity communication that can surely find out abnormity communication and inform a user about the occurrence of it. SOLUTION: The abnormity detecting communication unit is provided with communication terminals 101, 102 that make transmission through a communication line to access a remote unit, a CPU 105 that sets an abnormity communication monitor range being a detection range to allow the remote unit and a local unit to detect automatic repetitive communication independently of the consciousness of a user, a setting value table 107 to which a condition of notifying abnormity communication is set, an abnormity communication monitor button 109 that starts monitoring abnormity communication, a log file 106 that logs the communication and a notification section 108 that notifies the abnormity communication.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and apparatus for detecting abnormal communication and a storage medium storing a control program for controlling the abnormal communication detecting apparatus.

[0002]

2. Description of the Related Art Generally, when a remote facility (hereinafter, referred to as a center) is used, a connection method by dial-up connection may be used. This function is currently provided in communication devices such as terminal adapters. In the dial-up connection, billing is generated when a call connection with the center is established, so it does not matter whether or not billing occurs in communication processing other than the call connection processing between the center and the local terminal. In other words, if the call connection is successful, the center and the local terminal will succeed or fail, but will be charged.

[0003] A communication device performs a connection with the center in response to a request from a local terminal, a process at the center fails at a certain time, and thereafter, the communication device automatically connects to the center at regular intervals. When a request is issued from a local terminal (hereinafter, such automatic repetitive communication is referred to as abnormal communication), a communication fee irrespective of the communication amount used by the user is generated.

Conventionally, a user receives a bill for billing from a telecommunications carrier, and suspects the possibility of abnormal communication when the user notices an abnormal charge.

Therefore, in order to notify the user of the abnormal communication, information for specifying the abnormal communication, designation of a connection interval range, conditions for notifying the user, means for accumulating a communication log, and notifying means are described. , It may be possible to notify the user of the presence of abnormal communication.

[0006]

However, as described above, the information for specifying the abnormal communication, the range designation of the connection interval, the condition for notifying the user, the means for accumulating the communication log, and the notifying means are described. In the case of notifying the user of the presence of abnormal communication by providing the communication, setting of the connection time for judging abnormal communication or when a plurality of abnormal protocols occur, the abnormal communication may not be detected. . For example, if the connection range of abnormal communication is set to 10 seconds to 20 seconds, abnormal communication with a connection time of less than 10 seconds and longer than 20 seconds cannot be found. On the other hand, if all time ranges are set, inconvenience occurs in the algorithm. Also,
Even when a plurality of abnormal communications occur, the abnormal communications may not be found due to the algorithm.

SUMMARY OF THE INVENTION The present invention has been made in view of the above-mentioned problems of the prior art, and a first object of the present invention is to make it possible to reliably detect and notify abnormal communication. An object of the present invention is to provide an abnormal communication detection method and apparatus.

It is a second object of the present invention to provide a storage medium storing a control program for controlling the above-described abnormal communication detecting device of the present invention.

[0009]

According to a first aspect of the present invention, there is provided a method for detecting an abnormal communication, comprising the steps of: transmitting a signal from a communication line to access a remote device; Setting step for setting an abnormal communication monitoring range that is a detection range for detecting automatic repetitive communication unrelated to the user's consciousness with the local device, and condition setting step for setting conditions for notifying abnormal communication And a monitoring start step for starting abnormal communication monitoring, a log step for logging communication, and a notifying step for notifying abnormal communication.

According to a second aspect of the present invention, there is provided an abnormal communication detecting method according to the first aspect, wherein the remote device is a server. And

According to a third aspect of the present invention, there is provided an abnormal communication detecting method according to the first aspect, wherein the communication line is a public line. Features.

According to a fourth aspect of the present invention, there is provided an abnormal communication detecting method according to the first aspect, wherein the notifying step includes a visual notifying step. An audible notification step is provided, and a selecting step is provided for selectively selecting the visual notification step and the audible notification step.

According to a fifth aspect of the present invention, there is provided an abnormal communication detecting method according to any one of the first to fourth aspects, wherein an abnormal monitoring operation is started. An operation start step, a calculation step of calculating a start time, an end time, and a communication interval from communication generated after starting the abnormality monitoring by starting the abnormality monitoring operation by the operation start step; and And an increment step of incrementing by one.

According to a sixth aspect of the present invention, there is provided an abnormal communication detecting apparatus for transmitting a signal from a communication line for accessing a remote device, and a transmitting device for transmitting a signal to the remote device and the local device. Range setting means for setting an abnormal communication monitoring range which is a detection range for detecting automatic repetitive communication unrelated to the user's consciousness; condition setting means for setting conditions for notifying abnormal communication; and abnormal communication. It is characterized by having monitoring start means for starting monitoring, log means for logging communication, and notification means for notifying abnormal communication.

According to a seventh aspect of the present invention, in order to achieve the first object, the abnormal communication detecting apparatus according to the sixth aspect is characterized in that the remote device is a server. And

According to another aspect of the present invention, there is provided an abnormal communication detecting device according to the present invention, wherein the communication line is a public line. Features.

In order to achieve the first object, the abnormal communication detecting device according to the ninth aspect of the present invention is the abnormal communication detecting device according to the sixth aspect, wherein the monitoring start means is a switch. Features.

According to a tenth aspect of the present invention, in order to achieve the first object, the abnormal communication detecting device according to the sixth or ninth aspect is further characterized in that the monitoring start means is implemented by hardware. When a hard switch to be set and a soft switch to be set in a software manner are stored in a set value table, and the start of abnormal communication monitoring is expressed by ON and OFF, when the hard switch is OFF and the soft switch is ON, the switch of the SOTO switch is turned ON. The value of the hard switch when the hard switch is on and the soft switch is on, and the value of the hard switch when the hard switch is on and the soft switch is off, When the hard switch is off and the soft switch is off, the value of the hard switch is given priority. To.

In order to achieve the first object, an abnormal communication detecting device according to claim 11 is the abnormal communication detecting device according to claim 6, wherein the notifying means includes a visual notifying unit and an auditory detecting unit. And a selection unit for selectively selecting one of the visual notification unit and the auditory notification unit.

In order to achieve the first object, the abnormal communication detecting device according to claim 12 is provided.
In the abnormal communication detection device according to any one of the first to third aspects, an operation start means for starting an abnormality monitoring operation, and a start time and an end time based on a communication generated after the abnormality monitoring operation is started by the operation start means and the abnormality monitoring is started. It is characterized by comprising arithmetic means for calculating the time and the communication interval, and increment means for incrementing the communication count by one each time the communication is completed.

In order to achieve the second object, a storage medium according to a thirteenth aspect is a storage medium storing a control program for controlling an abnormal communication detection device, wherein the control program comprises: A transmitting module for transmitting from a communication line to access a remote device, and an abnormal communication monitoring range which is a detection range for detecting automatic repetitive communication unrelated to the user's consciousness between the remote device and the local device is set. It has a range setting module, condition setting means for setting conditions for notifying abnormal communication, monitoring start means for starting abnormal communication monitoring, log means for logging communication, and notifying means for notifying abnormal communication. It is characterized by the following.

In order to achieve the second object, the storage medium according to claim 14 is the storage medium according to claim 13, wherein the remote device is a server.

In order to achieve the second object, a storage medium according to a fifteenth aspect is the storage medium according to the thirteenth aspect, wherein the communication line is a public line.

In order to achieve the second object, the storage medium according to claim 16 is the storage medium according to claim 13, wherein the monitoring start module is a switch.

In order to attain the second object, the storage medium according to claim 17 is the storage medium according to claim 13 or 16, wherein the monitoring start module comprises:
When a hard switch to be set in hardware and a soft switch to be set in software are stored in a set value table, and the start of abnormal communication monitoring is expressed by ON and OFF, when the hard switch is OFF and the soft switch is ON, The value of the soot switch, the value of the hard switch when the hard switch is on and the soft switch is on, and the value of the hard switch when the hard switch is on and the soft switch is off And when the hard switch is off and the soft switch is off, the value of the hard switch is given priority.

In order to achieve the second object, the storage medium according to claim 18 is the storage medium according to claim 13, wherein the notification module is a visual notification module unit and an audible notification module. And the control program includes a selection module for selectively selecting the visual notification module and the audible notification module.

Further, in order to achieve the second object, the storage medium according to claim 19 is the storage medium according to any one of claims 13 to 18, wherein the control program starts an abnormality monitoring operation. An operation start module to be executed,
An operation module for calculating a start time, an end time, and a communication interval from communication generated after the abnormality monitoring operation is started by starting the abnormality monitoring operation by the operation start module, and an increment module for incrementing a communication count by one each time communication ends. And characterized in that:

[0028]

DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of a communication device provided with the abnormal communication detection device according to the present embodiment. In FIG. 1, reference numeral 100 denotes a communication device;
Is a terminal device, 103 is an interface (I / F) for a public network line such as ISDN (Integrated Services Digital Network),
104 is an interface (I / F) for a LAN (local area network) such as Ethernet (registered trademark) (Ethernet: a multipoint computer network using a coaxial cable), and 105 is a C
PU (Central Processing Unit), 106 is a log file for logging communication status, 107 is a set value table, 108 is a notification unit, and 109 is an abnormal communication monitoring button.

In FIG. 1, first, the user sets the abnormal communication monitoring button 109 or monitors the abnormal communication monitoring button 109 in order to monitor abnormal communication when not in use.
If is not set, the monitoring start soft switch of the set value table 107 is set. The setting value table 107 can set a monitoring time range, an abnormal communication occurrence notification condition, a notification method, and a monitoring start timing.

When the abnormal communication occurrence notification condition is an initial value 0,
Override this condition. In that case, the notification of abnormal communication is
When the value of the communication counter on the log file 106 is larger than 0, a notification is made. If the abnormal communication occurrence notification condition is 1
If it is set to 0, when the value of the communication counter exceeds 10, notification of abnormal communication is made.

For setting the monitoring time range, monitoring is performed for a specified range from when the abnormal communication monitoring button 109 is set. When the value exceeds the designated monitoring range, the value of the communication counter is reset to 0, and the designated range time is monitored from there.

Some kind of automatic communication occurs from one terminal device 102 to the other terminal device 101, and the public network I
When the call connection is completed through the / F 103, the communication start time is logged in the log file 106. Incidentally, the logging items of the log file 106 include a communication start time, a communication end time, a communication time, a communication interval, and a communication counter.

FIG. 2 is a diagram showing an abnormal communication occurrence situation. In FIG. 2, when the communication start time S1 is first logged and the call connection is terminated, the first communication end time E1 is logged. The first communication time is calculated by E1-S1. The communication counter is now incremented by one.

First, referring to the upper part of FIG. 2, when the next communication is started, the communication start time S2 is logged. At this time, the communication interval is calculated from S2-E1 using the second communication end time E2, and is logged in the log file 106. When the communication log is accumulated in such a procedure and the communication counter is incremented when the communication log exceeds a predetermined monitoring time range, the notification unit 108 notifies the user. The notification method by the notification unit 108 is the communication device 10
It is already selected when using 0. For the selection, a visual notification (lighting, blinking, extinguishing, or the like with an optical element or the like) or an auditory notification (peep sound, tone sound, or the like at regular intervals) is performed based on the situation of the installation location of the communication device.

Next, the lower part of FIG. 2 will be described. The lower part of FIG. 2 indicates that another automatic repetition communication having a different interval from that of the upper part occurs in combination with the automatic repetition communication of the upper part.

When the communication in the upper part and the communication in the lower part of FIG. 2 occur simultaneously, abnormal communication may not be found in some cases. However, in the abnormal communication detection device according to the present embodiment, since the counter counted at the end of the call connection recognizes the occurrence of abnormal communication, some abnormal communication occurs even if the interval between the communication is not always constant. Can be notified. For example, in FIG. 2, after the end of the first communication in the upper stage, the first communication in the lower stage occurs. The first communication end time in the upper row is E1, and the start time of the first communication in the lower row is S1. The interval between these two communications is S1-E
Since the communication time and the communication interval calculated by 1 and accumulated in the log file 106 are not constant, it can be inferred that abnormal communication is not one type.

Next, the operation of the abnormal communication detecting apparatus according to the present embodiment will be described with reference to the flowchart of FIG.

First, when communication occurs in step S301, the log writing start time is set in the next step S302, and the communication ends in the next step S303. Next, log writing (communication end time, communication time, etc.) is performed in step S304, and it is determined in the next step S305 whether or not communication has been performed for the second time or more. If it is determined that the communication has been performed for the second time or more, the process proceeds to step S306 to calculate an interval with the immediately preceding communication, and then proceeds to the next step S307.

On the other hand, if it is determined in step S305 that the communication is not the second or more, the process skips step S306 and proceeds to step S307.

In step S307, a communication end count is performed, and in the next step S308, it is determined whether or not the elapsed time is shorter than a predetermined abnormal communication monitoring time. If it is determined that the elapsed time is shorter than the predetermined abnormal communication monitoring time, the process proceeds to the next step S309 to determine whether the communication end count value is greater than zero. If it is determined that the communication end count value is greater than 0, the process proceeds to the next step S310 to notify the user that abnormal communication has occurred, and resets the communication end count value in the next step S311. The process returns to step S302.

On the other hand, if it is determined in step S308 that the elapsed time is not shorter than the predetermined abnormal communication monitoring time, the flow advances to step S312 to determine whether the communication end count value is larger than a predetermined set value. When it is determined that the communication end count value is larger than the predetermined set value, the process proceeds to step S310. When it is determined that the communication end count value is not larger than the predetermined set value, the process returns to step S302. .

As described above, the abnormal communication detection device according to the present embodiment uses the set values and the past information of the log file to investigate the communication status retroactively, and determines the occurrence status of the abnormal communication. Instead of making a determination, the abnormal communication other than the communication consciously used by the user is detected and performed when not in use, thereby notifying the abnormal communication.

Therefore, since it is determined whether or not abnormal communication has occurred since the start of monitoring of abnormal communication, the abnormal communication is notified, so that abnormal communication can be reliably found and notified.

In the abnormal communication detecting device according to the present embodiment, the functions of the above-described embodiment are realized by a computer reading and executing a control program stored in a storage medium. However, the present invention is not limited to this, and performs a part or all of actual processing such as an OS (Operating System) running on a computer based on the instruction of the control program, and performs the processing described above. Needless to say, a case where the function of the present embodiment is realized is also included.

As a storage medium for storing the control program, for example, a floppy (registered trademark) disk,
Hard disk, optical disk, magneto-optical disk, CD-
ROM (Compact Disk Read Onl)
y Memory), CD-R (Compact Di)
sk Recordable), a magnetic tape, a nonvolatile memory card, a ROM chip, or the like.

[0047]

As described in detail above, according to the abnormal communication detecting method and apparatus of the present invention, abnormal communication can be reliably found and notified.

According to the storage medium of the present invention, the abnormal communication detecting device of the present invention can be controlled smoothly.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of a communication device including an abnormal communication detection device according to a first embodiment of the present invention.

FIG. 2 is a diagram showing an abnormal communication occurrence situation in the abnormal communication detection device according to the first embodiment of the present invention.

FIG. 3 is a flowchart showing a flow of an operation of the abnormal communication detection device according to the first embodiment of the present invention.

[Explanation of symbols]

Reference Signs List 100 communication device 101 terminal device 102 terminal device 103 public network interface (I / F) 104 LAN (local area network) interface (I / F) 105 CPU (central processing unit) 106 log file 107 setting value file 108 notification unit 109 abnormality Communication monitoring button

Claims (19)

[Claims] 1. A transmitting step for transmitting a signal from a communication line to access a remote device, and an abnormal communication serving as a detection range for detecting automatic repetitive communication irrespective of a user's consciousness between the remote device and the local device. A range setting step for setting a monitoring range, a condition setting step for setting conditions for notifying abnormal communication, a monitoring start step for starting abnormal communication monitoring, a log step for logging communication, and notifying abnormal communication. An abnormal communication detection method, comprising: a notification step. 2. The method according to claim 1, wherein the remote device is a server. 3. The abnormal communication detecting method according to claim 1, wherein the communication line is a public line. 4. The notifying step includes a visual notifying step and an audible notifying step, and has a selecting step of selecting one of the visual notifying step and the audible notifying step. The abnormal communication detection method according to claim 1, wherein 5. An operation start step for starting an abnormality monitoring operation, and a start time, an end time, and a communication interval are calculated from communication generated after starting the abnormality monitoring operation and starting abnormality monitoring in the operation start step. 5. The abnormal communication detecting method according to claim 1, further comprising: a calculating step; and an incrementing step of incrementing a communication count by one each time the communication is completed. 6. A transmitting means for transmitting from a communication line to access a remote device, and abnormal communication serving as a detection range for detecting automatic repetitive communication irrespective of a user's consciousness between the remote device and the local device. Range setting means for setting a monitoring range; condition setting means for setting conditions for notifying abnormal communication; monitoring starting means for starting abnormal communication monitoring; log means for logging communication; and notifying abnormal communication. An abnormal communication detection device comprising: a notification unit. 7. The abnormal communication detecting device according to claim 6, wherein the remote device is a server. 8. The abnormal communication detecting device according to claim 6, wherein the communication line is a public line. 9. The abnormal communication detecting device according to claim 6, wherein said monitoring start means is a switch. 10. The monitoring start means has a hard switch set in hardware and a soft switch set in software in a setting value table, and when the start of abnormal communication monitoring is expressed by on / off, the hard switch is When the soft switch is on when off, the value of the sot switch is used.When the hard switch is on and the soft switch is on, the value of the hard switch is used.
When the hard switch is on and the soft switch is off, the value of the hard switch is given priority, and when the hard switch is off and the soft switch is off, the value of the hard switch is given priority. The abnormal communication detection device according to claim 6 or 9, 11. The notifying unit includes a visual notifying unit and an audible notifying unit, and has a selecting unit that selects one of the visual notifying unit and the audible notifying unit. The abnormal communication detection device according to claim 6. 12. An operation start unit for starting an abnormality monitoring operation, and a start time, an end time, and a communication interval are calculated from communication generated after starting the abnormality monitoring by starting the abnormality monitoring operation by the operation start unit. 12. The abnormal communication detecting device according to claim 6, further comprising a calculating means, and an incrementing means for incrementing a communication count by one each time the communication is completed. 13. A storage medium storing a control program for controlling an abnormal communication detection device, the control program comprising: a transmission module for transmitting from a communication line to access a remote device; A range setting module for setting an abnormal communication monitoring range serving as a detection range for detecting automatic repetitive communication unrelated to the user's consciousness in the local device; and a condition setting means for setting conditions for notifying abnormal communication. An abnormal communication detection device comprising: a monitoring start unit for starting abnormal communication monitoring; a log unit for logging communication; and a notifying unit for notifying abnormal communication. 14. The storage medium according to claim 13, wherein said remote device is a server. 15. The storage medium according to claim 13, wherein said communication line is a public line. 16. The storage medium according to claim 13, wherein said monitoring start module is a switch. 17. The monitoring start module has a set value table of a hard switch set by hardware and a soft switch set by software, and when the start of abnormal communication monitoring is expressed by ON / OFF, the hard switch is When the soft switch is on and the soft switch is on, the value of the sot switch is used. When the hard switch is on and the soft switch is on, the value of the hard switch is used.
Further, when the hard switch is on and the soft switch is off, the value of the hard switch is given priority, and when the hard switch is off and the soft switch is off, the value of the hard switch is given priority. 17. The storage medium according to claim 13, wherein: 18. The notifying module includes a visual notifying module and an audible notifying module, and the control program selects one of the visual notifying module and the audible notifying module. 14. The storage medium according to claim 13, comprising a selection module for selecting. 19. The control program according to claim 1, further comprising: an operation start module for starting an abnormality monitoring operation; and a start time and an end time based on a communication generated after starting the abnormality monitoring by starting the abnormality monitoring operation by the operation start module. 19. The storage medium according to claim 13, further comprising: an operation module that calculates an interval; and an increment module that increments a communication count by one each time communication ends.