JP2005333229A - Terminal start apparatus, terminal start system, and terminal start program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To start a terminal via a router apparatus without degrading the security. <P>SOLUTION: A start request terminal 6 generates start request information for requesting start of the terminal 2 and unicasts the information to the terminal start apparatus 7. A start request information reception section being a component of the terminal start apparatus 7 receives unicast start request information via a network interface. Upon the receipt of the start request information, a packet generating section generates a packet including a start request sequence on the basis of the received start request information, and a packet transmission section broadcasts the packet to each apparatus connected to a LAN 3 via the network interface. A network interface apparatus 4 receives the broadcast packet including the start request sequence, and the network interface apparatus 4 starts the terminal 2 in response to the reception of the packet including the start request sequence. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a terminal activation device, a terminal activation system, and a terminal activation program, and more particularly to a terminal activation device, a terminal activation system, and a terminal activation program for remotely activating a personal computer connected to a network.

  Conventionally, a magic packet technique is known as a method for remotely starting a personal computer connected to a network (see, for example, Non-Patent Document 1). In this magic packet technology, a terminal device connected to a local area network (hereinafter simply referred to as “LAN”) is provided with a network interface device for starting the terminal device, and connected to the LAN. An activation request included in the magic packet is broadcast by broadcasting a packet including an activation request sequence for requesting activation of the terminal device from the terminal activation device (hereinafter referred to as “magic packet”) to each device connected to the LAN. The sequence is detected by the network interface device, and the terminal device is activated by the network interface device that has detected the activation request sequence.

In such a technique, in order to start a terminal device from a wide area network such as the Internet via a router device, a magic packet generated to be broadcast to each device connected to the LAN is transmitted to the router device. To do.
Magic Packet Technical White Paper (AMD)

  However, if a packet transmitted from outside the LAN is allowed to be broadcast to each device connected to the LAN, a test packet for checking whether a specific device can be reached is transmitted to each device connected to the LAN. By continuously broadcasting to the terminal, there is a problem that security is lowered due to an easy attack such as a Smurf attack that places a heavy load on the LAN.

  The present invention has been made to solve such a problem, and provides a terminal activation device, a terminal activation system, and a terminal activation program that can activate a terminal device via a router device without reducing security. The purpose is to provide.

  A terminal activation device according to the present invention includes a network interface device that activates a terminal device when a packet received via a local information communication network includes an activation request sequence for requesting activation of the terminal device. A terminal activation device provided in the activation system, which represents an activation request to the terminal device, a activation request information receiving unit that receives unicast activation request information, and a packet including an activation request sequence based on the activation request information A packet generation unit that broadcasts the packet generated by the packet generation unit to each device connected to the local information communication network.

  With this configuration, a packet including an activation request sequence is broadcast inside the local information communication network based on the activation request information unicast from the outside of the local information communication network. The terminal device can be activated.

  According to the embodiment of the present invention, the activation request information includes the MAC address assigned to the network interface device, and the packet generator generates a packet including the activation request sequence including the MAC address. It is configured.

  With this configuration, since a packet including an activation request sequence based on the MAC address included in the activation request information unicast from the outside of the local information communication network is broadcast inside the local information communication network, security is not lowered. The terminal device can be activated via the router device.

  According to the embodiment of the present invention, the activation request information includes a terminal identifier for identifying the terminal device, and stores a MAC address assigned to the network interface device in association with the terminal identifier. A storage unit is provided, and the packet generation unit is configured to generate a packet including an activation request sequence including a MAC address stored in the MAC address storage unit in correspondence with a terminal identifier included in the activation request information. .

  With this configuration, a packet including an activation request sequence based on the MAC address corresponding to the terminal identifier included in the activation request information unicast from outside the local information communication network is broadcast inside the local information communication network. The terminal device can be activated via the router device without lowering the network.

  According to the embodiment of the present invention, the packet generation unit is configured to generate a packet including an activation request sequence in accordance with the Wake On LAN standard.

  With this configuration, a terminal device compliant with the Wake On LAN standard can be activated.

  Also, the router device of the present invention connects the local information communication network and another communication network to constitute one of the above-described terminal activation devices.

  With this configuration, the local information communication network is connected to another communication network, and a packet including an activation request sequence is broadcast inside the local information communication network based on the activation request information unicast from the outside of the local information communication network. Thus, the terminal device can be activated without reducing security.

  The terminal activation system according to the present invention includes a terminal device and an activation request sequence that is provided in the terminal device and connected to a local information communication network, and requests activation of the terminal device for a packet received via the local information communication network. A network interface device that activates the terminal device if included, and an activation request terminal that is connected to a communication network outside the local information communication network and that unicasts activation request information that requests activation of the terminal device. A startup request information receiving unit that receives unicast startup request information, a packet generation unit that generates a packet including a startup request sequence based on the startup request information, and a packet generated by the packet generation unit is connected to the local information communication network And a packet transmission unit that broadcasts to each device.

  With this configuration, since the packet including the activation request sequence is broadcasted by the terminal activation device inside the local information communication network based on the activation request information unicast from the outside of the local information communication network, the router is not reduced in security. The terminal device can be activated via the device.

  The terminal activation program of the present invention is a terminal activation having a network interface device that activates the terminal device when an activation request sequence for requesting activation of the terminal device is included in a packet received via the local information communication network. In the system, a start request for the terminal device is represented, a step of receiving unicast start request information, a packet generation step for generating a packet including a start request sequence based on the start request information, and a packet generation step Broadcasting the received packet to each device connected to the local information communication network, and causing the computer to execute.

  This program broadcasts a packet including an activation request sequence based on activation request information unicast from the outside of the local information communication network inside the local information communication network. The terminal device can be activated.

  The present invention can start a terminal device via a router device without reducing security.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a terminal activation system 1 according to an embodiment of the present invention.

  The terminal activation system 1 is connected to a terminal device 2 and a local information network (hereinafter simply referred to as “LAN”) 3 provided in the terminal device 2 and installed in a home or office. When the packet received via the LAN 3 includes an activation request sequence for requesting activation of the terminal device 2, the network interface device 4 that activates the terminal device 2 and the Internet (hereinafter simply referred to as “IP”) .) Connected to a communication network external to the LAN 3 such as the network 5, the activation request terminal 6 for unicasting the activation request information for requesting activation of the terminal device 2, and the activation request information unicast by the activation request terminal 6 And a terminal activation device 7 that broadcasts a packet including an activation request sequence to each device connected to the LAN 3.

  The terminal device 2 is configured by a computer device such as a personal computer. The terminal device 2 is equipped with a network interface device 4, and the terminal device 2 communicates with each device connected to the LAN 3 via the network interface device 4.

  The network interface device 4 is configured by a LAN card or a LAN board. In the present embodiment, an activation request sequence conforming to the Wake On LAN standard is applied. For example, a synchronization stream having 6 bytes of 0xFF and a network interface device 4 provided in the terminal device 2 to be activated. And a MAC (Media Access Control) address assigned to.

  The network interface device 4 is configured to activate the terminal device 2 when the activation request sequence including the MAC address assigned to the network interface device 4 is included in the received packet.

  The activation request terminal 6 is configured by a computer device such as a personal computer, and performs communication via the IP network 5. When activation of the terminal device 2 is requested by a user of the activation request terminal 6, activation of the terminal device 2 is performed by a user of the activation request terminal 6 via software installed in the activation request terminal 6. Required.

  In response to the activation request from the terminal device 2, the activation request terminal 6 uses an IP packet in which activation request information including the MAC address of the terminal device 2 is set with a predetermined reception port number (for example, 7777 number). And unicast toward the terminal activation device 7.

  The terminal activation system 1 further includes a router device 8 that connects the LAN 3 and the IP network 5, and the router device 8 is unicast activation request information (for example, No. 7777) toward the terminal activation device 7. (IP packet in which the receiving port number is set) is forwarded to the terminal activation device 7 via the LAN 3.

  FIG. 2 is a block diagram showing the configuration of the terminal activation device 7.

  The terminal activation device 7 includes a network interface 10 that communicates with each device connected to the LAN 3, and an activation request information reception unit 11 that receives activation request information forwarded by the router device 8 via the network interface 10. A packet generator 12 for generating a packet including an activation request sequence based on the activation request information, and a packet for broadcasting the packet generated by the packet generator 12 to each device connected to the LAN 3 via the network interface 10 And a transmission unit 13.

  The terminal activation device 7 is configured by, for example, a computer that configures a server device in the LAN 3. Note that the terminal activation device 7 may be configured by an adapter device that can be connected to the LAN 3, or may be configured integrally with the router device 8.

  The activation request information receiving unit 11 receives an IP packet in which a predetermined reception port number (for example, No. 7777) is set. When the activation request information is received by the activation request information receiving unit 11, the packet generation unit 12 generates a packet including an activation request sequence including the MAC address included in the activation request information.

  The packet transmission unit 13 uses the IP address (for example, “255.255.255.255”) for broadcasting the packet generated by the packet generation unit 12 to each device connected to the LAN 3 as a transmission destination. 10 is transmitted.

  FIG. 3 is a sequence diagram illustrating a terminal device activation operation of the terminal activation system 1. The terminal device activation operation described below starts when the activation of the terminal device 2 is requested by the user of the activation request terminal 6.

  First, activation request information for requesting activation of the terminal device 2 is generated by the activation request terminal 6 (step 101), and the generated activation request information is unicast toward the terminal activation device 7 (step 102).

  The activation request information unicast by the activation request terminal 6 is forwarded by the router device 8 (step 103), and is received via the network interface 10 by the activation request information receiving unit 11 constituting the terminal activation device 7 ( Step 104).

  When the activation request information is received by the activation request information receiving unit 11, a packet including the activation request sequence is generated by the packet generation unit 12 based on the received activation request information (step 105), and the generated packet is a packet. The transmission unit 13 broadcasts to each device connected to the LAN 3 via the network interface 10 (step 106).

  The packet including the activation request sequence broadcast by the packet transmission unit 13 is received by the network interface device 4 (step 107), and the terminal device 2 receives the packet including the activation request sequence by the network interface device 4 in response to reception of the packet. It is activated (step 108).

  In the above description, the terminal activation system 1 has been described as having one terminal device 2. However, in the present invention, even when the terminal activation system 1 has a plurality of terminal devices, the terminal activation device 7 has the activation request information. It is possible to cope with this by broadcasting a packet including an activation request sequence including the MAC address of each terminal device.

  Furthermore, it is assumed that one activation request information includes MAC addresses of a plurality of terminal devices, and the terminal activation device 7 broadcasts a packet including an activation request sequence including the MAC addresses of the terminal devices. Good.

  In addition, the activation request terminal 6 includes user authentication information and an authenticator in the activation request information, and the terminal activation device 7 authenticates this, and it is authenticated that the user of the activation request terminal 6 is a valid user. Only in some cases, packet generation by the packet generator 12 may be permitted.

  As described above, according to the present embodiment, since a packet including an activation request sequence is broadcasted inside the LAN 3 by the terminal activation device 7 based on the activation request information unicast from outside the LAN 3, the security is lowered. The terminal device 2 can be started up via the router device 8 without causing it.

  In the present embodiment, the packet generation unit 12 generates a packet including the activation request sequence based on the MAC address included in the activation request information transmitted by the activation request terminal 6, but FIG. As shown, a MAC address storage unit 14 is provided in the terminal activation device 7 for storing the MAC address corresponding to the terminal identifier for identifying the terminal device, and stores the MAC address corresponding to the terminal identifier included in the activation request information. The packet generation unit 12 may generate a packet including the MAC address stored in the unit 14. Here, the terminal identifier is represented by a character string or a number that is unique among devices connected to the LAN 3.

  In addition to the function of the terminal activation device 7 realized by dedicated hardware, a program for realizing the function is recorded on a computer-readable recording medium, and the program recorded on the recording medium is recorded. May be read by a computer system and executed. The computer-readable recording medium refers to a recording medium such as a floppy disk, a magneto-optical disk, a CD-ROM, or a storage device such as a hard disk device built in the computer system. Furthermore, a computer-readable recording medium is a server that dynamically holds a program (transmission medium or transmission wave) for a short period of time, as in the case of transmitting a program via the Internet, and a server in that case. Some of them hold programs for a certain period of time, such as volatile memory inside computer systems.

It is a block diagram which shows the structure of the terminal starting system which concerns on one embodiment of this invention. It is a block diagram which shows the structure of the terminal starting device in FIG. It is a sequence diagram which shows the terminal device starting operation | movement of the terminal starting system of FIG. It is a block diagram which shows the structure of the terminal starting apparatus which concerns on other embodiment of this invention.

Explanation of symbols

1 Terminal Activation System 2 Terminal Device 3 Local Information Communication Network (LAN)
4 Network interface device 5 Internet network (IP network)
6 start request terminal 7 terminal start device 8 router device 10 network interface 11 start request information receiving unit 12 packet generating unit 13 packet transmitting unit 14 MAC address storage unit 101 to 108 steps

Claims (8)

Terminal activation provided in a terminal activation system having a network interface device, which activates the terminal device when the activation request sequence for requesting activation of the terminal device is included in a packet received via the local information communication network A device,
Representing an activation request for the terminal device, an activation request information receiving unit for receiving unicast activation request information;
A packet generator that generates a packet including the activation request sequence based on the activation request information;
A packet transmitter that broadcasts the packet generated by the packet generator to each device connected to the local information communication network;
A terminal activation device.   The activation request information includes a MAC address assigned to the network interface device, and the packet generator generates a packet including an activation request sequence including the MAC address. Terminal activation device. The activation request information includes a terminal identifier for identifying the terminal device,
A MAC address storage unit that stores a MAC address assigned to the network interface device in association with the terminal identifier;
The packet generation unit generates a packet including an activation request sequence including a MAC address stored in the MAC address storage unit corresponding to a terminal identifier included in the activation request information;
The terminal activation device according to claim 2.   4. The terminal activation device according to claim 1, wherein the packet generation unit generates a packet including the activation request sequence in accordance with a Wake On LAN standard. 5.   The router apparatus which connects the said local information communication network and another communication network, and comprises the terminal activation apparatus in any one of Claims 1-4. A terminal device;
The terminal device is activated when the packet is provided in the terminal device and connected to the local information communication network, and a packet received via the local information communication network includes an activation request sequence for requesting activation of the terminal device. A network interface device to
An activation request information receiving unit for receiving activation request information unicast by an activation request terminal connected to a communication network outside the local information communication network and unicasting activation request information for requesting activation of the terminal device; A packet generation unit that generates a packet including the activation request sequence based on the activation request information; a packet transmission unit that broadcasts the packet generated by the packet generation unit to each device connected to the local information communication network; A terminal activation system comprising: a terminal activation device including: In the terminal activation system having a network interface device that activates the terminal device when the activation request sequence for requesting activation of the terminal device is included in the packet received via the local information communication network,
Representing an activation request for the terminal device, receiving unicast activation request information;
A packet generation step of generating a packet including the activation request sequence based on the activation request information;
Broadcasting the packet generated in the packet generation step to each device connected to the local information communication network;
Terminal startup program for causing a computer to execute   The recording medium which recorded the terminal starting program of Claim 7.

Images