JP2008199675A5

JP2008199675A5 -

Info

Publication number: JP2008199675A5
Application number: JP2008130277A
Authority: JP
Filing date: 2008-05-19
Publication date: 2009-05-14
Anticipated expiration: 2024-03-12

Claims

When it is determined that it does not correspond to a receiving means for receiving information flowing through the network, a determining means for determining whether the information corresponds to a predetermined permitted terminal based on information transmitted for network connection, or not And a transmission means for sending information indicating that the address identifying the terminal that transmitted the information is used in the network to the network, and it is determined that the terminal that transmitted the information does not correspond to the permitted terminal In this case, there is means for determining whether the network address of the terminal that sent the information is being used by another terminal connected to the network, and the sending means has a network address of the terminal that sent the information. If it is determined that the terminal is used by the other terminal, an address for identifying the terminal that has transmitted the information is a network. As information indicating that used in the click, the network address of the terminal that sent the information, use information indicating that are used corresponding to the physical address of a different terminal from the terminal transmitting the information A network monitoring device.

The network address of the terminal that transmitted the information corresponds to the physical address of the monitoring device when it is determined that the network address of the terminal that transmitted the information is not used by the other terminal. A network monitoring device comprising means for flowing information indicating that it is used as a network to a network.

3. The means for registering information relating to whether or not connection to a network corresponding to a terminal is compared with the information relating to whether or not the registered connection is possible or not. A network monitoring device for determining whether permission is permitted.

4. The network monitoring apparatus according to claim 3 , wherein the information addressed to the receiving means and broadcast information or multicast information addressed to a plurality of terminals in the network are received, or substantially all information flowing through the network is received.

5. The network monitoring apparatus according to claim 4 , wherein the terminal is disconnected from the network regardless of whether or not a dedicated disconnecting unit is installed in the terminal that is determined not to be permitted.

In Claim 1, means for notifying an external terminal that a terminal that does not permit connection is detected in the network, or that a terminal that does not permit connection is disconnected from the network, and is connected to the network A means for receiving at least one of a terminal disconnection instruction or a connection instruction from an external terminal, and a means for generating information for generating a network address duplication state when the received instruction is a disconnection instruction. A characteristic network monitoring device.

7. The network monitoring apparatus according to claim 6 , further comprising means for generating information for eliminating a duplicated state of network addresses in the network when the received instruction is a connection instruction.

Oite to any one of claims 1 to 7, it monitors the address request information issued from the network terminal, means for extracting the network address and physical layer side address information from the address request information, all of the network Means for issuing information for inducing issuance of address request information to a terminal or one or more designated terminals, and means for extracting network address and physical layer side address information from address request information issued from each terminal , And a means for uniquely generating address information of a terminal connected to the network by combining the extracted network address and physical layer side address, and the generated unique address A means for rearranging from the outside in ascending or descending order according to the element classification of the address information, A means for enabling valid or invalid setting from the outside is provided for each element of the unique address information, and terminal address information is generated by these means, and this terminal is used as information on whether or not the terminal can be connected to the network. A network monitoring device using address information.

8. The address request response information in which a specific physical layer side address is set for address request information issued by a non-permitted terminal to detect a duplication state of a network address as a detaching unit according to any one of claims 1 to 7. A network monitoring device comprising means for generating

The means for generating address request response information in which a specific physical layer side address is set for address request information issued for address resolution by an unauthorized terminal as the detaching means according to any one of claims 1 to 7. A network monitoring apparatus comprising:

In any one of claims 1 to 7, as a means for connecting the corresponding terminal to the network, using the physical layer side address of the particular terminal obtained from the address request information and network address of the terminal, the address request response A network monitoring apparatus characterized by comprising means for generating information and directing the address request response information to each terminal in the network.

According to claim 9 or 10, as a means for generating an address request response information set certain physical layer side address, the network address of the terminal is not allowed to determine whether or not it is currently used in other terminals in the network If the network address is already used by another terminal, the source physical layer side address in the address request response information is used as the physical layer side address of the other terminal using the same network address as the terminal. If this network address is not used by another terminal, the source physical layer side address in the address request response information is the physical layer side address of the monitoring device or the physical layer side address that cannot exist on the network. A means for generating the set address request response information is provided, and the address request response information is The same network address at the same time that the unauthorized terminal recognizes that a duplicate network address has occurred by sending it to the network, and the unauthorized terminal cannot communicate with a terminal other than the unauthorized terminal on the network. A network monitoring device characterized in that communication can be continued between a terminal that has already used the terminal and a terminal other than an unauthorized terminal on the network.

In any one of claims 1 to 7, among all hosts numbers from the minimum value to the maximum value of the host number part of the network address system of the relevant network can take a range of host numbers of terminals to check the access authorization A means for setting timing information to be checked, a means for generating a network address for checking using a host number in this range, and a request information for which a response from the other terminal can be expected using this network address for checking And the request information is transmitted from the monitoring device at a timing based on the set timing information, and the presence or information content of the response information is compared with information on whether or not the terminal can be connected to the network. A network monitoring apparatus for determining whether or not connection is possible.

14. The network monitoring apparatus according to claim 13, wherein ICMP request information or address request information is generated as means for generating request information that can be expected to receive a response from a partner terminal.

In any one of claims 1 to 7, as the connection permission information to the network for the terminal, at least one of network addresses and physical layer address of the terminal, or of the connection permission time zone and connection disapproval time zone If at least one or an elapsed time equal to or greater than a certain threshold has elapsed since the last connection time, the time information used to reject the connection or the elapsed time greater than or equal to a certain threshold from the previous connection time If it is, the time information used to disconnect the currently connected terminal, the number of times that the connection has not been permitted so far, the threshold of allowable network traffic, or the terminal's Number of allowed connections, terminal owner information, or at least one of these Network monitoring apparatus characterized by a combination of uses.

Receives information flowing in the network, determines whether the information corresponds to a predetermined permitted terminal based on the information transmitted for network connection, and transmits the information when it is determined not to correspond to the permitted terminal and flow information indicating that the address for identifying the terminal is used in the network to the network, when the terminal that has transmitted the information is determined not to correspond to the permitted terminal, the network address of the terminal that sent the information Is used by another terminal connected to the network, and if the network address of the terminal that transmitted the information is determined to be used by the other terminal, the information is transmitted. As information indicating that the address for identifying the terminal that is used is used in the network, the network of the terminal that transmitted the information is used. Click address, a network monitoring method of using information indicating that are used corresponding to the physical address of a different terminal from the terminal transmitting the information.

Receives information flowing in the network, determines whether the information corresponds to a predetermined permitted terminal based on the information transmitted for network connection, and transmits the information when it is determined not to correspond to the permitted terminal and flow information indicating that the address for identifying the terminal is used in the network to the network, when the terminal that has transmitted the information is determined not to correspond to the permitted terminal, the network address of the terminal that sent the information Is used by another terminal connected to the network, and if the network address of the terminal that transmitted the information is determined to be used by the other terminal, the information is transmitted. As information indicating that an address for identifying the terminal that is used is used in the network, the network of the terminal that transmitted the information is used. Click address, program occupies made in an electronic computer that uses information indicating that are used corresponding to the physical address of a different terminal from the terminal transmitting the information.

Receives information flowing in the network, determines whether the information corresponds to a predetermined permitted terminal based on the information transmitted for network connection, and transmits the information when it is determined not to correspond to the permitted terminal and flow information indicating that the address for identifying the terminal is used in the network to the network, when the terminal that has transmitted the information is determined not to correspond to the permitted terminal, the network address of the terminal that sent the information , Determining whether it is used by another terminal connected to the network, and transmitting the information when it is determined that the network address of the terminal that transmitted the information is used by the other terminal As information indicating that the address for identifying the terminal is used in the network, the network of the terminal that transmitted the information is used. Address, said other recording medium storing a program that occupies made in an electronic computer to be used, information indicating that which is used in the physical address of the terminal.