JP2003124957A - Registering equipment, and network managing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide registering equipment and a network managing system wherein the MAC addresses of user terminals can be registered simply. SOLUTION: A network managing system 1 has a registration managing equipment 10 connected with a utilization registering network 3 for registering MAC addresses and with a utilization objecting network 7 coupled to an Internet 5, which are constructed independently of each other, and has a DHCP server 20 connected with the utilization objecting network. The registration managing equipment so acquires the MAC addresses of user terminals 40 connected with the utilization registering network as to register the MAC addresses in a registered-information DB 15 integrated into it. Then, the registration managing equipment transmits the registered informations to the DHCP server. The DHCP server records additionally in its own MAC-address registering file the registered-informations transmitted from the registration managing equipment. Then, the DHCP server leases IP addresses only to the user terminals registered in the MAC-address registering file.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network management system which authenticates a network device based on a MAC address and enables the network device to be connected to a predetermined network, and a MAC address of the network device is registered in this network management system. The present invention relates to a registration device suitable for doing.

[0002]

2. Description of the Related Art In recent years, with the spread of portable terminals (notebook personal computers (personal computers) equipped with communication means), networks for portable terminals are being prepared. For example, in a university campus or the like, a network system for premises network connection is built, which includes a DHCP server that automatically assigns an IP address to a terminal that has requested an IP address based on the dynamic host setting protocol (DHCP). , Users can connect their mobile terminals to the information outlets for network connection installed in each room without having to manually enter the IP address using the terminal setting screen. It is possible to easily connect to the local area network (that is, bring its own terminal into a state capable of TCP / IP communication with the terminal in the network).

[0003]

However, in the system configured as described above, anyone can access the network unless access is restricted.
In order to connect only a specific user's personal computer to the network, have the legitimate user declare the MAC (Media Access Control) address written in the LAN (local area network) interface attached to the personal computer. It was necessary for the administrator to manually enter this as the user's MAC address in the registration database.

As a result, in the conventional system, the registered personal computer may not be able to be connected to the network even though the registration work is completed because the MAC address entered by the administrator is wrong. there were. Further, since the MAC address has to be registered manually, it takes some time to register the MAC address. In other words, the user may feel frustrated because he or she cannot connect his or her personal computer to the network for a long time until the registration work is completed.

The present invention has been made in view of these problems, and a registration device capable of easily registering a MAC address in a system for managing connection to a network based on a MAC address, and network management to which the technique is applied. The purpose is to provide a system.

[0006]

SUMMARY OF THE INVENTION The invention according to claim 1 made in order to achieve the above object includes only a database storing a MAC address of a network device and a network device storing the MAC address in the database. A registration device connected to a network management system including a connection management device capable of connecting to a predetermined network is provided with connection means, address acquisition means, and address registration means.

That is, in the registration device according to the first aspect, when the network device is connected to the connection means for connecting the network device to the device in a data communicable manner, the registration device operates the address obtaining means to operate the MAC of the network device. The address is acquired from the network device via the connection means, and the M of the network device acquired by the address acquisition means
The AC address is registered in the database by the address registration means.

Therefore, according to this registration device, the network administrator can connect the network device to the connection means without having the user declare the MAC address or manually register the MAC address in the database. The MAC address can be easily registered in the database simply by connecting.

As a result, in the registration device of the present invention,
It is possible to solve the problem such as an input error that occurs when the administrator manually inputs the MAC address in the database, and further, by manually registering the MAC address in the database, it is spent. The time required for registration can be greatly reduced.

Further, in the registration device according to claim 2, wherein the connecting means is configured to connect a plurality of network devices to the device, M of the plurality of network devices is provided.
The AC address can be efficiently registered in the database. In addition, in the registration device according to claim 1 or 2, as described in claim 3, the time information acquisition means allows the connection management device to connect the network device to a predetermined network for a predetermined period only. Connection time information for obtaining the connection time information from the outside, and the address registration means registers the acquired connection time information of the network device in the database in association with the MAC address of the network device stored in the database. Is good.

By using the registration device according to the third aspect of the invention configured as described above, when the administrator permits the connection of the network device to the predetermined network only for a fixed period, the administrator permits the network device. The network device can be brought into a state in which it can be connected to the network only for a certain period of time by simply inputting the connection time information regarding the connection time to the network to the time information acquisition means.

Particularly, in the registration device according to the third aspect, since the connection time can be set for each network device, it is convenient when trying to control the connection time of each network device. The time information acquisition means in the registration device according to claim 3 transmits display data for displaying a setting screen for inputting connection time information to the display device of the corresponding network device, and according to the setting screen, The user may be configured to acquire the connection time information transmitted by inputting the connection time, or by controlling the display device connected to the registration device to display the setting screen, The connection time information input by the administrator according to the setting screen may be acquired.

The connection time information may be composed of a connection start time as a time for permitting connection to the network and a connection end time as a time for prohibiting connection to the network, or the current time. The information may be information that specifies a period (for example, 60 minutes) during which the connection from the computer to the network is permitted.

By the way, each means of the registration device does not necessarily have to be incorporated in one device, each means of the registration device, and connection management means for performing the same function as the connection management device, By constructing a network management system including a database, the same effects as the effects of the above invention can be obtained.

That is, as described in claim 4, a database for storing the MAC address of the network device,
A connection management means for connecting only a network device whose MAC address is stored in the database to a predetermined network, a connection means for connecting the network device to the system in a data communication manner, and a connection means When a network device is connected, an address registration unit that acquires the MAC address of the network device from the network device via the connection unit and a MAC address of the network device acquired by the address acquisition unit are registered in a database. Means and
By constructing a network management system equipped with, the network administrator can easily register the MAC address in the database simply by connecting the network device to the connection means, and the user can use the database of the system. If you ask to register the MAC address of your own terminal, you can immediately connect your own terminal to the specified network.

Further, as described in claim 5, the connection means is for registering a MAC address, which is constructed independently of the above-mentioned predetermined network capable of data communication between the system and a plurality of network devices. If the network management system is constructed so that the connection means connects the network device to the address acquisition means via the network for MAC address registration by connecting to the network, the registration work of the network device can be performed for MAC address registration. It is convenient because it can be done by the administrator via the network.

That is, for example, if a network for MAC address registration is built in a university premises or a plurality of buildings built in-house, the system can perform network device registration work in each building. The configuration can be made possible, and the registration work can be further simplified.

In addition, as described in claim 6, a time information acquisition means is provided in the network management system,
The time information acquisition means externally acquires connection time information for allowing the connection management means to connect the network device to the predetermined network only for a predetermined period, and the address registration means is stored in the database. Associated with the MAC address of the network device
When the system is constructed so that the connection time information of the network device can be registered in the database, the above-mentioned claim 3
It is possible to obtain the same effect as that of the registration device described in.

Further, as described in claim 7, the connection management means assigns the IP address based on the dynamic host setting protocol (DHCP) only to the network device having the MAC address of the network device stored in the database. If a network management system is constructed so that the network device can be connected to the Internet as the above-mentioned predetermined network by giving it, user registration when providing the Internet connection service to the user using the system. Can be done easily,
Furthermore, customer management can be performed easily. In addition, the terminal can be easily connected to the Internet without causing the user to make a troublesome setting (IP address setting or the like).

In the network management system according to the seventh aspect, if a correct IP address is set for the network device (that is, one of the IP addresses that the connection management means can give to the network device based on DHCP), Since a network device can be connected to the above-mentioned predetermined network, a malicious person can
I once assigned to a network device based on DHCP
There is a possibility that the same IP address will be manually set and the network device will be illegally connected to the network by remembering the P address. Therefore, in the network management system according to claim 7, in consideration of the possibility that an unauthorized user of the IP address may appear, claim 8
As described in (4), it is preferable to provide a monitoring means and an unauthorized use information transmitting means.

In the network management system according to claim 8, the connection management means is a dynamic host setting protocol (DH).
Based on CP), the monitoring means determines whether the network equipment that uses the IP address that can be assigned to the network equipment is the network equipment registered in the database, and the monitoring means determines that the network equipment that uses the IP address. When it is determined that the network device is not a network device registered in the database, it is determined that the network device is illegally using the IP address, and the illegal use information transmitting means transmits the illegal use information to the external device.

Therefore, according to such a network management system, the administrator can confirm the illegal use of the IP address from the illegal use information,
Subsequent actions can be taken immediately. The unauthorized use information transmitting means may be configured to transmit the unauthorized use information to the external device by e-mail, or may transmit the unauthorized use information to a monitor (display device) as the external device and display it on the monitor. The information may be displayed. In addition, the unauthorized use information transmitting means may be configured to transmit the unauthorized use information to a printer (printing device) as an external device and have the printer print the information.

[0023]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below.
A description will be given with reference to the drawings. FIG. 1 is a block diagram showing the configuration of a network management system 1 to which the present invention is applied.

As shown in FIG. 1, the network management system 1 is connected to a utilization registration network 3 as a MAC address registration network and an Internet 5 as an external wide area network, which are constructed independently of each other. A registration management device 10 connected to both the target network 7 and the network, a DHCP server 20 connected to the use target network 7, and a gateway device 30 connecting the use target network 7 and the Internet 5. ing.

More specifically, the registration management device 10 includes a LAN interface (I / F) 11 for performing data communication with each terminal in the usage registration network 3, and each terminal in the usage target network 7. A LAN interface (I / F) 13 for performing data communication between the LAN I / F 11 and the LAN I / F 11 is a LAN cable L1 connected to a registration outlet 4 installed at each place in the building. Are connected. On the other hand, the LAN I / F 13
L connected to the Internet connection outlet 8 (hereinafter referred to as "information outlet 8") installed in the building
The AN cable L2 is connected.

Further, this registration management device 10 uses HTTP.
It is configured to execute a daemon program and a DHCP daemon program, and can operate as a DHCP server and a WWW server. In addition to this, the registration management device 10 uses the MA of the user terminal 40 connected to the usage registration network 3 via the registration outlet 4 in the building.
A registration management DHCP service process for acquiring a C address and registering the MAC address in a registration information database (DB) 15 built in itself, and to the Internet 5 input by the user or the administrator operating the user terminal 40. Registration management WWW service that obtains information about the connection period of the user terminal 40 from the user terminal 40, and registration that updates the registration information in the registration information DB 15 in order to prohibit the connection of the user terminal 40 that has passed the connection period to the Internet 5. The information update process and the unauthorized use monitoring process for monitoring the unauthorized use of the IP address are executed.

The DHCP server 20 has a registration information DB 21.
And registration information of the user is transmitted from the registration management device 10 through the usage target network 7,
Executes DHCP main processing to register its own registration information DB2
The MAC address registration file stored in No. 1 is updated. Also, this DHCP server 20
When an IP address lease request is issued from the user terminal 40 connected to the information outlet 8 in the network 7 to be used, the DHCP service processing is executed, and the IP address is given only to the user terminal 40 that has been registered in advance. It is configured to lease (rent).

[0028] More specifically, the network management system 1 having the above-mentioned configuration is adapted to connect the user terminal 40 to the Internet 5 by the procedure shown in FIG. However, if the user terminal 40 connected to the network management system 1 is connected to the DHCP server 20,
By the communication procedure based on P (Dynamic Host Setting Protocol), IP address lease request (DHCPDISCOVER, DHCPREQ
It is assumed that the function as a DHCP client that performs the UEST) and uses the leased IP address within the lease period is added. Other user terminal 40
Is provided with a so-called browser for displaying HTML format data on the screen. In addition, in various processes described below, well-known DHCP
Because the IP address is leased by the communication procedure based on
I will briefly explain these techniques.

First, the registration management device 10 receives a lease request for an IP address transmitted when the user terminal 40 connected to the usage registration network 3 starts connection with each terminal of the usage registration network 3. Then, the registration management D
The HCP service process is executed and the IP address is leased according to the procedure shown in FIG. Note that FIG. 3A is a flowchart showing the registration management DHCP service process executed by the registration management device 10.

When the processing is executed, the registration management device 10
First, in S110, the MAC address of the user terminal 40 transmitted from the user terminal 40 as the source address together with the lease request is extracted from the packet storing the lease request and acquired. Then, in order to determine whether the acquired MAC address is a registered MAC address in the registration information DB, a MAC address matching the MAC address acquired in S110 from the registered MAC address list in the registration information DB is set. Search (S120). still,
FIG. 4A shows the registered MA stored in the registration information DB.
It is explanatory drawing showing the data structure of a C address list.

After that, the registration management device 10 judges whether or not the acquired MAC address is unregistered in S130 based on the search result, and the MA whose MAC address is registered is registered.
If it is the C address (No in S130), the process is terminated as it is, and if the MAC address is not registered (Yes in S130), in S140, it is used from the range of IP addresses that can be leased by itself. The IP address to be leased to the person terminal 40 is determined, and the IP address is
It is registered in the registered MAC address list together with the MAC address of the user terminal 40.

Then, as a response to the lease request from the user terminal 40, a packet (DHCPACK) containing the information of the IP address to be leased is transmitted (S150), and the process ends. When the user terminal 40 receives the packet transmitted by this processing, it executes various programs for functioning as a DHCP client, and thus the leased IP address
It is automatically set as a P address, and the registration management device 10 itself is set.
And TCP / IP method enable bidirectional communication.

Subsequently, the user operates the user terminal 40 to specify a URL (Uniform) for designating the lease period registration page.
When there is an access request from the user terminal 40 to the lease period registration page by inputting (Resource Locator) information or the like, the registration management device 10 executes the registration management WWW service process shown in FIG. 3B. Incidentally, FIG. 3 (b)
Is a flowchart showing a registration management WWW service process.

When the processing is executed, the registration management device 10 first transmits an IP packet storing the lease period registration page display data to the IP address which has requested the access in S210. In response to this operation, when the user terminal 40 receives the lease period registration page display data, the user terminal 40 displays the lease period registration page, and the user or administrator uses the lease period registration page. When the use start time and use end time of the Internet connection service are input, a packet storing the input information (use start time, use end time) is transmitted to the registration management device 10.

When the packet including the input information is transmitted from the user terminal 40 after the lease period registration page display data is transmitted in S210, the registration management device 10 inputs the packet from the packet in S220. Information is extracted and acquired, and in S230, the registration information DB 15 is accessed, and the user terminal that matches the IP address and the MAC address of the user terminal 40 that has transmitted the packet including the input information is the registered MAC address. Search from the list.

Then, in S240, the user terminal 40 that has transmitted the packet has registered M based on the search result.
If it is determined that the packet does not match the user terminal 40 registered in the AC address list, the process is terminated because an illegal packet has been transmitted, and if it is determined that the user can be authenticated, the process is moved to S250. The registered input information is registered by writing it in the registered MAC address list.

That is, as shown in FIG. 4A, the registration management device 10 stores the MAC address of the user terminal 40 registered in the registered MAC address list in the previous processing (registration management DHCP service processing). , The IP address of the user terminal 40 registered in association with the MAC address, and the use specified by the user or the administrator as the time when the user terminal 40 starts the connection to the Internet 5. The start time and the use end time designated as the time to end the connection are stored. Incidentally, FIG.
As shown in (a), in this system, the authority level can be designated, and thereby, the operation restriction in various lists can be performed.

At the same time as registration, the registration management device 10
Transmits an IP packet storing information indicating that registration is completed to the user terminal 40 in S255,
Notify the user that registration is complete. After this, the registration management device 1
In S260, 0 transmits the packet storing the MAC address, the use start time, and the use end time as the registration information to the DHCP server 20 to notify the registration information, and the process ends.

Upon receipt of the notification of the registration information (hereinafter referred to as "registration notification"), the DHCP server 20 receives the notification of FIG.
The DHCP main process shown in is executed. Figure 5 shows DHC
It is a flow chart showing P main processing. When the process is executed, the DHCP server 20 determines in S310 whether the received packet is the packet transmitted from the registration management device 10, and the received packet is the packet transmitted from the registration management device 10. If it is determined (Yes in S310), the notification type is determined in S320, and if the notification is a registration notification, in S330, the notified registration information is stored in the registration information DB 21 of its own M.
It is additionally registered in the AC address registration file.

That is, as shown in FIG. 4B, DHCP
The server 20 writes the MAC address acquired as the registration information, the use start time, and the use end time in the MAC address registration file in association with each other, so that the user terminal 40 having the MAC address receives the I address.
When there is a P address lease request, the IP address can be leased, after which the registration management device 10 is notified of the processing completion, and the processing ends.

On the other hand, when it is determined in S320 that the notification type is a registration deletion notification (a notification transmitted from the registration management device 10 in S540 of the registration information update processing described later), the DHCP server 20 in S340. After deleting the corresponding MAC address and the IP address as its related information, the use start time, the use end time, the number of lease approvals, the authority level, etc., the processing is ended.
The IP address is the IP leased to the user terminal 40 by the DHCP server 20 in the DHCP service processing described later.
The number of lease approvals is the number of leases of IP addresses that can be leased to the user terminal 40.

The registration management device 10 and the DH described above
By the operation of the CP server 20, the MAC of the user terminal 40
The address is registered as the MAC address of the legitimate user, and after that, the user moves his or her own user terminal 40 from the usage registration network 3 to the usage target network 7, and the IP address is registered from the user terminal 40. When the lease request is made, the DHCP server 20 determines in S310 of the DHCP main process that the notification is not from the registration management device 10, moves the process to S390, and determines in S390 that the received packet is a lease request. And process S40
In step S400, the DHCP service process is executed. Incidentally, FIG. 5B is a flowchart showing the DHCP service processing executed by the DHCP server 20.

When the processing is executed, the DHCP server 20
Is the MAC stored in the received packet in S410.
The address is extracted and acquired, and further, the MAC address registration file is searched for a MAC address that matches the acquired MAC address, and based on the search result, S
At 430, it is determined whether the user terminal 40 is a registered terminal. Here, when the DHCP server 20 determines that the user terminal 40 that has made the lease request is not a registered terminal, the DHCP server 20 ends the process and the DHCP main process without leasing the IP address.

On the other hand, when the DHCP server 20 determines that the user terminal 40 that has made the lease request is a registered terminal, the process proceeds to step S440 and the lease request type is
It is determined whether it is a new request or an update request. When it is determined that the request is a new request, based on the registration information of the user terminal 40, in S450, it is determined whether or not the current time has passed the use start time of the Internet connection service. , The process is terminated without leasing the IP address, and if the time has passed, in S460, the lease permission number n is calculated based on the following equation.
Is set and the set number of times of lease approval is associated with the MAC address of the user terminal 40, as shown in FIG.
Register in the AC address registration file.

Lease permission number n = (use end time-current time) / unit lease period The unit lease period here is the DHCP server 2
0 is the effective use period of the IP address leased at each lease request. The network management system 1
In this way, by setting the number of lease approvals in this way, the problem that it was not possible to set the lease period for each terminal simply by setting the unit lease period as in the past was solved, and The lease period of is configurable.

After the processing of S460, the DHCP server 20 leases the IP address to the user terminal 40 by transmitting the packet storing the leased IP address to the user terminal 40 in S470. Then, the process ends. On the other hand, in S440, the request type is IP
If it is determined that the request is for an address lease renewal, DHC
In S443, the P server 20 determines that the number of lease approvals n is 1
If the number of lease approvals is 0 (No in S443), the process is terminated without leasing the IP address and the number of lease approvals is 1 or more. If there is (Yes in S443), the lease permission count n is decremented by 1 in S447, and then in S470, the IP address is leased and the process ends.

By the above procedure, the system assigns an IP address to the user terminal 40 and the user terminal 40
In a state in which TCP / IP communication is possible with the gateway device 30 in the usage target network, and the gateway device 3
It is possible to connect to the external Internet 5 from 0.

Further, the network management system 1
In addition to limiting the lease of the IP address by the number of times the lease is permitted, the registration management device 10 executes registration information update processing to delete the registration information of the user terminal 40 whose use end time has passed. , Are restricted to use the Internet connection service. Incidentally, FIG.
(A) is a flowchart showing a registration information update process executed by the registration management device 10.

When the processing is executed, the registration management device 10
First, in S510, the registered MAC address list is read, and S5 is read based on the registered MAC address list.
At 20, it is determined whether or not there is a user terminal 40 whose use end time has passed. Then, if it is determined that it does not exist (No in S520), the registration management device 10 terminates the processing, and determines that it exists (Yes in S520).
s), in S530, the corresponding MAC address and its related information (IP address, use start time, use end time, etc.) are deleted from the registered MAC address list of the registration information DB 15.

After that, the registration management device 10 deletes the same registration information (MAC address and its related information) as the registration information deleted from the registration information DB 15 in the DHCP server 20 from the MAC address registration file in S540. The DHCP server 2 by sending a packet
Deregistration notification is sent to 0 and the process ends.

In addition, the system is constructed so that the registration management device 10 executes the illegal use monitoring process in order to prevent the illegal use of the IP address. Incidentally, FIG.
(B) is a flowchart showing an unauthorized use monitoring process executed by the registration management device 10. When the process is executed, the registration management device 10 first reads the registered MAC address list from the registration information DB 15 in S610, and further,
In step S615, information regarding the lease status of the IP address (such as information regarding the leased IP address) is acquired from the DHCP server.

Further, in S620, a predetermined packet having an IP address within the range in which the DHCP server 20 can be leased (including an already-leased IP address) as a destination is created, and the packet is sequentially used in the target network. 7 to search for an IP address from which a response packet (that is, a packet indicating that the user terminal 40 using the IP address exists) is transmitted (that is, the IP address). Scan).

Then, the response packet is transmitted I
When the P address is found, the process proceeds to S630, and D
Based on the information such as the lease status acquired from the HCP server, it is determined whether the IP address in use is the IP address leased to the registered user terminal 40, and if so, the entire lease range is determined in S640. It is determined whether or not the process of S620 has been performed for the IP address of (that is, whether or not the scanning of the lease range is completed). If not completed, the process is returned to S620 and the unprocessed IP address is set. The same processing is performed again for the same.

When the registration management device 10 determines in S630 that the IP address in use is not the IP address used by the registered user terminal 40, the IP address is illegally used in S635. The relevant IP address is temporarily stored. Then, these processes are repeated until it is determined Yes in S640.

Then, if it is determined Yes in S640,
The registration management device 10 creates and outputs an IP address and a log file indicating the usage status of the IP address according to the processing results of S620 to S640, and further, S6.
At 60, the illegally used IP address temporarily stored (S63
5) It is determined whether or not there is, and if there is not, the process is ended as it is, and if there is an illegally used IP address (Yes in S660), an electronic mail storing information of the illegally used IP address is automatically created. Then, the created e-mail is sent to the e-mail address of the administrator registered in advance, and the process ends.

Although the embodiments of the present invention have been described above, the following effects can be obtained in this system.
In the network management system 1 of the present embodiment, the registration management device 10 sets the MAC address of the user terminal 40 connected to the usage registration network 3 without requiring the user operating the user terminal 40 to input the MAC address.
In order to transmit the registration information to the DHCP server 20 and store the registration information in the DHCP server 20, the user terminal can be simply and accurately and quickly, without forcing the user to perform a troublesome registration application. 40 MAC addresses can be registered in the database.

In the system, DHCP
The server 20 authenticates whether or not the user terminal 40 connected to the target network 7 is a terminal permitted to connect to the Internet 5, and only the authenticated user terminal 40 has an IP address. Since it is configured to lease, the user can obtain the DHCP of the personal computer (user terminal 40) if he / she receives the registration of the MAC address of the laptop computer (user terminal 40) carried by the user.
By setting the client function to the operable state and connecting the personal computer (user terminal 40) to the target network 7, the personal computer (user terminal 40) can be connected to the Internet 5. .

In addition, the network management system 1
In the above, the DHCP server 20 leases an IP address to the user terminal 40 only for the period based on the connection time information (use start time, use end time) regarding the use period of the Internet connection service, and when the period expires, the Since the configuration is such that the registration information of the user terminal 40 is deleted, the administrator can easily manage the Internet connection of the user terminal 40 without performing a troublesome operation regarding the usage period of the user. .

In particular, such a system is convenient for commercially providing an Internet connection service at an airport, a cafeteria, a hotel, etc. For example, by setting a use start time and a use end time, Terminal 4
The connection restriction of 0 can be easily performed, and the procedure for charging the user can be simplified.

Further, when commercially providing an Internet connection service or the like, there is a high possibility that a person who remembers the once leased IP address and uses the IP address illegally thereafter appears. Since the IP address that has been illegally used can be searched, it is possible to suppress the illegal use of the IP address.

The registration device of the present invention corresponds to the registration management device 10 of this embodiment, the connection management device of the present invention corresponds to the DHCP server 20 of this embodiment, and the connection management means is
When the DHCP server 20 processes the DHCP service, the MA
This is realized by the operation of leasing the IP address only to the user terminal 40 having the MAC address stored in the C address registration file. Further, the database of the present invention corresponds to the registration information DB 21 of the DHCP server 20 that stores the MAC address registration file, and the connecting means of the registration device is L incorporated in the registration management device 10 of the present embodiment.
It corresponds to ANI / F11.

The address acquisition means is realized by the registration management DHCP service processing executed by the registration management apparatus 10 of this embodiment, and the address registration means is registered registration DHCP service processing by the registration management apparatus 10 of this embodiment. It is realized by transmitting the MAC address of the user terminal 40 acquired in step S260 of the registration management WWW service processing as registration information to the DHCP server 20 and causing the DHCP server 20 to write the MAC address in the MAC address registration file. There is.

In the time information acquisition means of the present invention, the registration management device 10 of this embodiment acquires the input information (use start time, use end time) as connection time information in S220 of the registration management WWW service processing. Is realized by the action
In the operation of the address registration means registering the connection time information in association with the MAC address, the registration management apparatus 10 performs DH of the registration information including the MAC address and the use start time and the use end time in S260 of the registration management WWW service process.
It is realized by transmitting to the CP server 20 and having the DHCP server 20 write the registration information in the MAC address registration file.

In addition, the monitoring means of the present invention is S61 of the unauthorized use monitoring means executed by the registration management device 10 of the present embodiment.
0 to S660, the unauthorized use information transmitting means is
This is realized in S665 of the unauthorized use monitoring process. Further, the registration device and the network management system of the present invention are not limited to the above-mentioned embodiments, and various modes can be adopted.

For example, in the above-mentioned embodiment, the system is constructed so as to control the Internet connection of the user by the cooperation operation between the registration management device 10 and the DHCP server 20, but the registration management device 10 of the above-mentioned embodiment.
Alternatively, the network management system 1 having the above functions may be constructed by connecting one management device having both the functions of the DHCP server 20 and the usage registration network 3 and the usage target network 7.

In addition, in the network management system 1 of the above-described embodiment, the user terminal 40 and the registration management device 10 are connected via the usage registration network 3 for MAC address registration, and each processing such as acquisition of a MAC address is performed. However, for example, the registration management device 10 is provided with a dedicated connector for connecting the registration management device 10 and the single user terminal 40 in a one-to-one relationship. The registration management device 10 and the user terminal 40 may be connected by connecting.

In addition, the user terminal 4 is added to the registration management device 10.
0 is provided with a connection device to which a LAN card or the like can be attached, and the M stored in the LAN card using the connection device.
The AC address information may be directly extracted from the LAN card, and the registration management device 10 may be made to acquire the MAC address of the user terminal 40 by this.

In addition to the above, in the above-described embodiment, the lease period registration page is displayed on the user terminal 40. However, a lease terminal registration page is connected to the use registration network 3 by connecting a terminal dedicated to the administrator. The registration management device 10 may be configured so as to display on the dedicated terminal. Then, the system may be constructed so that the administrator can operate the dedicated terminal to set the use start time and the use end time of the Internet connection service.

Further, in the network management system in which it is assumed that many user terminals 40 are connected to the usage target network 7, a subnet is formed using a router below the user target network 7 and The user terminal 40 may be connected. In this way, the illegally used IP addresses can be narrowed down in units of network IDs, so that the illegal use can be effectively monitored.

[Brief description of drawings]

FIG. 1 is a block diagram showing the configuration of a network management system 1 of this embodiment.

FIG. 2 is a sequence flow showing each terminal operation regarding the MAC address registration of the user terminal 40.

FIG. 3 is a registration management DHC executed by the registration management device 10.
It is a flow chart showing P service processing and registration management WWW service processing.

FIG. 4 Registered MAC address list and MAC
It is explanatory drawing showing the data structure of an address registration file.

FIG. 5 is a flowchart showing a DHCP main process and a DHCP service process executed by the DHCP server 20.

FIG. 6 is a flowchart showing a registration information update process and an unauthorized use monitoring process executed by the registration management device 10.

[Explanation of symbols]

1 ... Network management system, 3 ... Usage registration network, 4, 8 ... Outlet, 5 ... Internet, 7 ...
Network to be used, 10 ... Registration management device, 11, 1
3 ... LAN interface, 15, 21 ... Registration information D
B, 20 ... DHCP server, 30 ... Gateway device,
40 ... User terminal, L1, L2 ... LAN cable

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Takahiro Sato             1-3-13 Nishiki, Naka-ku, Nagoya-shi, Aichi Prefecture             Isei Nagoya Fushimi Building ARBE Co., Ltd.             In the dock (72) Inventor Takafumi Tamura             1-3-13 Nishiki, Naka-ku, Nagoya-shi, Aichi Prefecture             Isei Nagoya Fushimi Building ARBE Co., Ltd.             In the dock F-term (reference) 5K033 AA02 AA05 EC03

Claims (8)

[Claims] 1. A network management system comprising: a database for storing MAC addresses of network devices; and a connection management device for connecting only network devices whose MAC addresses are stored in the database to a predetermined network. And network equipment M
A registration device for registering an AC address in the database, the connection device connecting the network device to the device in a data communicable manner, and the network device connected to the connection device when the network device is connected to the connection device. An address acquisition unit for acquiring a MAC address from the network device via the connection unit; and an address registration unit for registering the MAC address of the network device acquired by the address acquisition unit in the database. A registration device characterized by. 2. The registration device according to claim 1, wherein the connection unit is configured to connect a plurality of network devices to the device. 3. The connection management device further comprises time information acquisition means for externally acquiring connection time information for allowing a network device to connect to the predetermined network for a predetermined period, and the address registration means comprises: 2. The connection time information of the network device acquired by the time information acquisition unit in association with the MAC address of the network device stored in the database can be registered in the database. The registration device according to claim 2. 4. A database for storing the MAC address of a network device, connection management means for connecting only the network device having the MAC address stored in the database to a predetermined network, and the network device for the system. Connection means for connecting to enable data communication; address acquisition means for acquiring a MAC address of the network equipment from the network equipment via the connection means when a network equipment is connected to the connection means; A network management system comprising: an address registration unit that registers the MAC address of the network device acquired by the address acquisition unit in the database. 5. The connection means is connected to a network for MAC address registration, which is constructed independently of the predetermined network capable of performing data communication between the system and a plurality of network devices, and connects the network devices. ,
The network management system according to claim 4, wherein the network management system is configured to be connected to the address acquisition unit via the MAC address registration network. 6. The connection management means comprises time information acquisition means for externally acquiring connection time information for allowing a network device to be connected to the predetermined network for a predetermined period, and the address registration means comprises: The connection time information of the network device acquired by the time information acquisition unit is associated with the MAC address of the network device stored in the database, and is configured to be registered in the database. The network management system according to claim 5. 7. The connection management means is a MAC address of the network device stored in the database,
5. An IP address is assigned to only the network device having the above-mentioned information based on the dynamic host setting protocol (DHCP) so that the network device can be connected to the Internet as the predetermined network. ~ The network management system according to claim 6. 8. The connection management means determines whether a network device that uses an IP address that can be assigned to the network device based on the dynamic host setting protocol (DHCP) is a network device registered in the database. And a monitoring unit that determines that the network device that uses the IP address is not a network device registered in the database.
8. The network management system according to claim 7, further comprising: unauthorized use information transmitting means for transmitting the unauthorized use information to an external device, assuming that the address is illegally used.