JP2016178389A - Information processing device, program, and service takeover method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system with availability capable of efficient operation.SOLUTION: An information processing device 90 for managing one or more devices that provide transmission terminals with communication services includes: fault detection means 94 for detecting a fault at the devices; device function determination means 93 for referring to first dependence relation information with which another device or a function which the devices depend on for operation is registered, and for determining the other device or function which a faulty device depends on; and control means 95 for performing control so that the other device or function determined by the device function determination means will take over as a takeover destination.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an information processing apparatus, a program, and a service takeover method.

  2. Description of the Related Art A conference system that performs a remote conference with a remote place via a communication network such as the Internet is known. In such a conference system, in a conference room where there is one party such as an attendee who conducts a remote conference, the transmission terminal of the remote conference system captures images of attendees and conference rooms and collects speech and other sounds. . The image or sound is transmitted to the transmission terminal in the conference room where the other attendee is present, and the transmission terminal that has received the image or sound displays the image on the display or outputs the sound from the speaker. Therefore, it is possible to hold a conference between remote locations in a state close to an actual conference.

  As one form of the remote conference system, there is a form in which each transmission terminal is provided with a remote conference service via a device on the network that performs call control and video relay (sometimes called an MCU: Multi point control unit).

  In such a remote conference system, it is required to ensure the availability of the above apparatus in order to always maintain communication between transmission terminals. For example, if there is only one device, communication between transmission terminals becomes difficult if only one device stops or if a region including the device is disconnected from the network due to a disaster or the like.

  In order to avoid service stoppage, a technique is known in which functions necessary for service are made redundant (see, for example, Patent Document 1). Patent Document 1 discloses a method in which a management center is constructed for each region, and monitoring is continued by delegating the role to another management center when a monitoring center in charge of one region fails. ing.

  However, there is a problem that efficient operation becomes difficult if the entire monitoring center constructed as a system as disclosed in Patent Document 1 is simply delegated to another monitoring center. That is, a system such as a remote conference system is not realized by a single piece of hardware or software, but a large number of pieces of hardware and software are provided in cooperation with each other. For this reason, if the entire system is moved to another area when a part of the system is stopped, the original resources are wasted after the failure, and excessive resources must be secured in the destination system. Become. For this reason, redundant resources are likely to be generated before and after the occurrence of a failure, and efficient operation may not be performed.

  An object of the present invention is to provide an available system capable of efficient operation.

  In view of the above problems, the present invention is an information processing apparatus that manages one or more apparatuses that provide a communication service to a transmission terminal, in order that the apparatus operates. The device function determining means for determining the other device or function on which the failed device depends, with reference to the first dependency relationship information in which the other device or function on which the dependency depends is registered, and the device function determining means, And control means for controlling the determined other device or function to be taken over by the device as the takeover destination.

  It is possible to provide an available system that can be efficiently operated.

It is an example of the figure explaining the determination method of the apparatus or function which a transmission system transfers at the time of failure occurrence. It is an example of the schematic diagram of a transmission system. It is an example of the hardware block diagram of a transmission terminal. It is an example of the hardware block diagram of a call control apparatus. 2 is an example of a functional block diagram of a transmission terminal, a call control device, an authentication management device, and a configuration management device included in the transmission system 1. FIG. It is an example of the sequence diagram of the procedure in which a transmission terminal logs into a call control apparatus. It is an example of the sequence diagram of the procedure in which a transmission terminal starts communication of content data. It is an example of the flowchart figure which shows the procedure in which a dependency relationship management part produces an indirect dependency relationship table from a dependency relationship table. It is an example of the flowchart figure which shows the inheritance procedure of the apparatus or function using an indirect dependency relationship table. It is an example of the flowchart figure which shows the procedure which takes over an apparatus or a function using an indirect dependence relationship table, when terminal management DB fails. FIG. 10 is an example of a flowchart illustrating a procedure for taking over a device or a function using an indirect dependency relationship table when a configuration management device fails.

  Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings.

<Outline of Transmission System of this Embodiment>
FIG. 1 is an example of a diagram illustrating a method for determining a device or a function to be transferred when a transmission system according to the present embodiment causes a failure. FIG. 1A shows the dependency relationship between the functions a to d used by the device A and the device c. For example, the device A depends on the functions a to c, and the function c depends on the functions b and d.

  In such a dependency relationship, the transmission system extracts devices and functions as resources from the dependency relationship shown in FIG. Then, a table (indirect dependency relationship table to be described later) for arranging resources in rows and columns is created. Then, although it may be either a row or a column, two are extracted from all resources, and an indirect dependency relationship is obtained by following the dependency relationship in FIG.

  For example, when the device A and the function b are taken out, the device A depends on the function b, so that the dependency relationship between the device A and the function b becomes True. Further, when the device A and the function d are taken out, the device A does not directly depend on the function d, but since the function c depends on the function d, the dependency relationship between the device A and the function d is True and Become. In this way, an indirect dependency relationship is obtained from the table.

Next, when a device or function fails, the device or function to be transferred is determined by referring to the table in FIG. 1B in the column direction and the row direction, respectively.
(0) First, the failed device or function is defined as resource 1.
(i) Next, looking at the row corresponding to the failed resource, the column heading that is True is specified. The device or function of the column heading is assumed to be resource 2.
(ii) Next, the heading of the row whose column heading is True in the column of resource 1 and resource 2 is specified. Let the device or function of the heading of this row be resource 3.
(iii) The union of resources 1, 2, and 3 becomes the takeover target resource.

When a failure occurs in device A, all columns are False when referring to the row whose row heading is device A. Next, referring to the column corresponding to the device A with the device A as the resource 1, since the device A depends on the functions a, b, c, and d (the element is True), the functions a, b, c and d are determined as resource 3. Therefore, the device A and the functions a, b, c, and d are determined as takeover target resources (FIG. 1C).
When a failure occurs in the function d, referring to the row whose row heading is the function d, the column of the device A and the function c is True. Therefore, the device A and the function c become the resource 2. Next, referring to a column whose column heading is function d (resource 1) and apparatus A / function c (resource 2), all of the columns of function d are False. In the column of device A, functions a, b, c, and d (resource 3) are specified, and in the column of function c, functions b and d (resource 3) are specified. Therefore, the device A and the functions a, b, c, and d become takeover target resources (FIG. 1 (d)).

  Therefore, when a failure occurs in a certain device or function, the transmission system of the present embodiment transfers all the functions that cannot be operated in consideration of the dependency relationship between the device and the function. Can transfer functions. As a result, efficient operation is possible while maintaining the availability of the transmission system.

<< Overall Configuration of Embodiment >>
FIG. 2 is a schematic diagram of a transmission system according to an embodiment of the present embodiment. As shown in FIG. 1, the transmission system 1 has a configuration divided into bases A, B, and C. The site A has a management system 5a and a relay system 3a, and the site B has a management system 5b and a relay system 3b. The function for the base C is omitted. The bases A, B, and C each provide a communication service to the transmission terminal 10 in the base. That is, the transmission terminal 10 can communicate with each other by the management system 5a and the relay system 3a in the bases A, B, and C to perform a video conference.

  The transmission system 1 includes transmission terminals (10aa, 10ab, 10ba, 10bb), which are examples of video conference terminals. Hereinafter, when an arbitrary transmission terminal is represented among the transmission terminals (10aa, 10ab, 10ba, 10bb), it is referred to as a transmission terminal 10.

  The relay system 3a includes a relay device 30a and a relay management device 40a. On the other hand, the relay system 3b includes a relay device 30b and a relay management device 40b. Hereinafter, any relay device among the relay devices 30a and 30b is referred to as a relay device 30. The relay management device 40 is described as an arbitrary relay management device among the relay management devices 40a and 40b.

  The relay device 30 relays content data such as image data and sound data between the plurality of transmission terminals 10. The image of the image data may be a moving image or a still image, or both a moving image and a still image.

  The relay management device 40 is a computer having a server function. The relay management device 40 manages each relay device 30 at the site to which the own device belongs.

  The management system 5a includes a call control device 50a, an authentication management device 60, and a configuration management device 90a. The management system 5b includes a call control device 50b and a configuration management device 90b. Hereinafter, when an arbitrary call control device is represented among the call control devices 50a and 50b, it is referred to as a call control device 50.

  The call control device 50 is a computer having a server function. The call control device 50 controls establishment of a session (content data session sed) for transmitting content data between the transmission terminals 10 in the transmission system 1.

  The authentication management device 60 authenticates the transmission terminal 10 and provides an access token for authenticating the transmission terminal to the call control device 50 and notifies the address of the call control device 50 for each transmission terminal 10. The authentication management device 60 operates at either the base A or B. The access token indicates that authentication of the transmission terminal 10 is established, and is information for connecting the transmission terminal 10 to the call control device 50.

  Hereinafter, one or more of the call control device 50, the authentication management device 60, the configuration management device 90, the relay device 30, the terminal management DB 5001, and the authentication management DB 6001 may be simply referred to as “device”.

  The configuration management device 90 manages cooperation between the devices. An inquiry about the address of the device on which the device depends is received from each device in the same base, and each device connects to the target device according to the response. In addition, it grasps the life and death status of devices in the same base, and controls the transfer of devices and functions between the bases. Furthermore, the alive state of each device is shared with the configuration management device 90 placed at another base, and the alive state of the configuration management device 90 placed at another base is monitored.

  The relay device 30a, the relay management device 40a, the call control device 50a, the authentication management device 60, and the configuration management device 90a are communicably connected at the base A via a LAN 2a (Local Area Network). For example, the base A is a data center in Tokyo.

  On the other hand, the relay device 30b, the relay management device 40b, the call control device 50b, and the configuration management device 90b are communicably connected at the base B via the LAN 2b. For example, base B is a data center in New York.

  Each device at the base A and each device at the base B are connected to each other device from the other base or the transmission terminal 10 via the communication network 2 from the routers (70a, 70b). ing. The communication network 2 may be the Internet, a mobile phone network, or a dedicated line. For example, by connecting each device at the base A and each device at the base B via the communication network 2 using a dedicated line, communication between the relay devices 30 or between the call control devices 50 can be stabilized.

  With this transmission system 1, it is possible to make a call between users of the respective transmission terminals 10. This call can be realized by sound, video (image), or sound and video (image).

  In FIG. 1, for ease of explanation, three bases (A, B, C) and four terminals (10aa, 10ab, 10ba, 10bb) are shown, but the transmission system 1 has four or more transmission systems. A base may be provided, and it may be constructed by five or more transmission terminals 10.

<< Hardware configuration example >>
FIG. 3 is a hardware configuration diagram of the transmission terminal 10 according to the present embodiment. As shown in FIG. 3, the transmission terminal 10 of the present embodiment is used to drive a CPU 101 such as a CPU (Central Processing Unit) 101 and an IPL (Initial Program Loader) that control the operation of the entire transmission terminal 10. ROM (Read Only Memory) 102 storing a program, RAM (Random Access Memory) 103 used as a work area of the CPU 101, programs for various terminals of the transmission terminal 10, various data such as image data and sound data are stored. The flash memory 104, the SSD 101 (Solid State Drive) that controls the reading or writing of various data to the flash memory 104 according to the control of the CPU 101, and the reading of data to the recording medium 106 such as a flash memory or IC card (Integrated Circuit Card) Or media I / O that controls writing (memory) 107, an operation button 108 operated when selecting a destination, a power switch 109 for switching on / off the power of the transmission terminal 10, and a network I / F for transmitting data using the communication network 2 (Interface) 111 is provided.

  The transmission terminal 10 also includes a built-in camera 112 that captures an image of a subject under the control of the CPU 101 to obtain image data, an image sensor I / F 113 that controls driving of the camera 112, a built-in microphone 114 that inputs sound, The built-in speaker 115 that outputs sound, the sound input / output I / F 116 that processes input / output of sound signals between the microphone 114 and the speaker 115 according to the control of the CPU 101, and the image data on the external display 120 according to the control of the CPU 101 FIG. 3 shows a display I / F 117 for transmitting a signal, an external device connection I / F 118 for connecting various external devices, an alarm lamp 119 for notifying various functions of the transmission terminal 10, and the above-described components. Bus lines 11 such as an address bus and a data bus for electrical connection It is equipped with a.

  The display 120 is a display unit configured by liquid crystal or organic EL (Organic Electroluminescence) that displays an image of a subject, an operation, and the like. The display 120 is connected to the display I / F 117 by a cable 120c. The cable 120c may be an analog RGB (VGA) signal cable, a component video cable, HDMI (High-Definition Multimedia Interface) or DVI (Digital Video). Interactive) signal cable may be used.

  The camera 112 includes a lens and a solid-state image sensor that converts light into electric charges and digitizes a subject image (video). As the solid-state image sensor, a CMOS (Complementary Metal Oxide Semiconductor) or a CCD (Charge Coupled Device) is used. Etc. are used.

  External devices such as an external camera, an external microphone, and an external speaker are electrically connected to the external device connection I / F 118 by a USB (Universal Serial Bus) cable or the like inserted into the connection port 1132 of the housing 1100. Can be connected to. When an external camera is connected, the external camera is driven in preference to the built-in camera 112 under the control of the CPU 101. Similarly, when an external microphone is connected or when an external speaker is connected, each of the external microphones and the built-in speaker 115 is given priority over the internal microphone 114 and the internal speaker 115 according to the control of the CPU 101. An external speaker is driven.

  Note that the recording medium 106 is detachable from the transmission terminal 10. Further, as long as it is a non-volatile memory that reads or writes data according to the control of the CPU 101, not only the flash memory 104 but also an EEPROM (Electrically Erasable and Programmable ROM) or the like may be used.

  FIG. 4 is a hardware configuration diagram of the call control device 50. The call control device 50 includes a CPU 501 that controls the overall operation of the call control device 50, a ROM 502 that stores programs used to drive the CPU 501, such as an IPL, a RAM 503 that is used as a work area for the CPU 501, and a program for the call control device 50. For reading various data such as HD504, HDD (Hard Disk Drive) 505 for controlling the reading or writing of various data to the HD504 in accordance with the control of the CPU 501, and data reading or writing (storage) for a recording medium 506 such as a flash memory. Media drive 507 to be controlled, display 508 for displaying various information such as a cursor, menu, window, character, or image, network I / F 509 for data communication using the communication network 2, characters, numerical values A keyboard 511 having a plurality of keys for inputting various instructions, a mouse 512 for selecting and executing various instructions, selecting a processing target, moving a cursor, etc., and a CD-ROM as an example of a removable recording medium (Compact Disc Read Only Memory) 513, a CD-ROM drive 514 for controlling the reading or writing of various data, and an address bus for electrically connecting the above components as shown in FIG. A bus line 510 such as a data bus is provided.

  Since the relay device 30, the relay management device 40, the authentication management device 60, and the configuration management device 90 have the same hardware configuration as the call control device 50, the description thereof is omitted.

<Functional configuration>
Next, the functional configuration of the transmission system 1 according to the present embodiment will be described with reference to FIG. FIG. 5 is an example of a functional block diagram of the transmission terminal 10, the call control device 50, the authentication management device 60, and the configuration management device 90 included in the transmission system 1 according to an embodiment.

<< Functional configuration of transmission terminal >>
The transmission terminal 10 includes a transmission / reception unit 11, an operation input reception unit 12, a display control unit 13, and a storage / reading unit 19. Each of these units is a function realized by any one of the constituent elements shown in FIG. 3 operating according to a command from the CPU 101 according to a program expanded from the flash memory 104 onto the RAM 103. Further, the transmission terminal 10 has a storage unit 1000 constructed by the ROM 102, the RAM 103, and the flash memory 104 shown in FIG.

(Functional configuration of transmission terminal)
The transmission / reception unit 11 of the transmission terminal 10 shown in FIG. 5 is realized by a command from the CPU 101 and the network I / F 111, and communicates with the transmission terminal 10 on the other side, each device or system, etc. via the communication network 2. Send and receive various data (or information).

  The operation input receiving unit 12 is realized by an instruction from the CPU 101, the operation button 108a, and the power switch 109, and receives various inputs by the user and various selections by the user.

  The display control unit 13 is realized by an instruction from the CPU 101 and the display I / F 117 and performs control for transmitting image data sent from the other party to the display 120 when making a call.

  The storage / reading unit 19 is executed by an instruction from the CPU 101 and the SSD 105, or realized by an instruction from the CPU 101, and stores various data in the storage unit 1000 or extracts various data stored in the storage unit 1000. I do.

  The storage unit 1000 stores a communication ID (Identification) for identifying a terminal or a user of the transmission terminal 10 as a communication destination, type identification information (information indicating that it is the transmission terminal 10), a password, and the like. . Note that the communication ID and password may not be stored in the storage unit 1000, and may be input by the user each time a login request is made to the call control device 50, for example.

<Functional configuration of call control device>
The call control device 50 includes a transmission / reception unit 51, a management unit 52, a session control unit 53, a duplication unit 54, and a storage / reading unit 59. Each of these units is a function realized by any one of the constituent elements shown in FIG. 4 operating according to a command from the CPU 501 according to the program for the call control device 50 expanded from the HD 504 to the RAM 503. Or means. In addition, the call control device 50 includes a storage unit 5000 constructed by the HD 504.

記憶部５０００には表１の端末管理テーブルを記憶する端末管理ＤＢ５００１が構築されている。この端末管理テーブルでは、各伝送端末１０の通信ＩＤ毎に、端末名、この伝送端末１０の稼動状態、この伝送端末１０の通信状態、この伝送端末１０が参加しているコンテンツデータ用セッションのセッションＩＤ、このセッションにおいてコンテンツデータの中継の全体を管理する中継管理装置４０のドメイン情報、及び、この伝送端末１０の接続先の呼制御装置５０又は中継管理装置４０が属する拠点を示す情報が関連付けられて管理されている。

In the storage unit 5000, a terminal management DB 5001 that stores the terminal management table of Table 1 is constructed. In this terminal management table, for each communication ID of each transmission terminal 10, the terminal name, the operating state of this transmission terminal 10, the communication state of this transmission terminal 10, and the session for the content data session in which this transmission terminal 10 participates The ID, the domain information of the relay management device 40 that manages the whole relay of content data in this session, and the information indicating the base to which the call control device 50 or the relay management device 40 to which the transmission terminal 10 belongs are associated. Are managed.

記憶部５０００には表２の宛先管理テーブルを記憶する宛先管理ＤＢ５００２が構築されている。宛先管理テーブルには、伝送端末のそれぞれに対して宛先とすることのできる伝送端末１０の一覧が関連づけて記録されている。

In the storage unit 5000, a destination management DB 5002 that stores the destination management table of Table 2 is constructed. In the destination management table, a list of transmission terminals 10 that can be destinations for each transmission terminal is recorded in association with each other.

(Functional configuration of call control device)
The transmission / reception unit 51 is executed by a command from the CPU 501 and the network I / F 509, and transmits / receives various data (or information) to / from each transmission terminal 10 and the call control device 50 through the communication network 2.

  The management unit 52 is realized by an instruction from the CPU 501, and stores and manages the operation state of the transmission terminal 10 in association with each communication ID and terminal name of the transmission terminal 10 in the terminal management table.

  The session control unit 53 is realized by a command from the CPU 501 and controls a content data session sed for transmitting content data between the transmission terminals 10. The above control includes control for establishing a communication session, control for allowing the transmission terminal 10 to participate in the established communication session, control for disconnecting the communication session, and the like.

  The duplication unit 54 is realized by a command from the CPU 501 and duplicates information with the terminal management DB 5001 placed at different locations.

  The storage / reading unit 59 is executed by the instruction from the CPU 501 and the HDD 505 or realized by the instruction from the CPU 501, and stores various data in the storage unit 5000 or extracts various data stored in the storage unit 5000. I do.

<< Functional configuration of authentication management device >>
The authentication management device 60 includes a transmission / reception unit 61, an authentication unit 62, a duplication unit 63, and a storage / reading unit 69. Each of these units is a function realized by any of the constituent elements shown in FIG. 4 being operated by an instruction from the CPU 501 in accordance with a program for an authentication management apparatus expanded from the HD 504 to the RAM 503, or Means. In addition, the authentication management device 60 includes a storage unit 6000 constructed by the HD 504.

記憶部６０００には表３の認証管理テーブルを記憶する認証管理ＤＢ６００１が構築されている。この認証管理テーブルでは、各伝送端末１０の通信ＩＤ毎に、パスワード、及び、伝送端末１０が所属する所属先の呼制御装置５０のアドレスが登録されている。伝送端末１０が所属する呼制御装置５０とは、伝送端末１０を呼制御する呼制御装置５０である。

In the storage unit 6000, an authentication management DB 6001 that stores the authentication management table of Table 3 is constructed. In this authentication management table, for each communication ID of each transmission terminal 10, a password and the address of the call control device 50 to which the transmission terminal 10 belongs are registered. The call control device 50 to which the transmission terminal 10 belongs is a call control device 50 that performs call control of the transmission terminal 10.

(Functional configuration of authentication management device)
The transmission / reception unit 61 is executed by a command from the CPU 501 and the network I / F 509, and transmits / receives various data (or information) to / from each terminal, device, or system via the communication network 2.

  The authentication unit 62 is realized by a command from the CPU 501, searches an authentication management table for an authentication request from the transmission terminal 10, and determines whether the same communication ID and password are managed in this authentication management table. Authentication of the transmission terminal 10 is performed. In addition, for each transmission terminal 10, the address of the call control device 50 to which it belongs is notified to the transmission terminal 10.

  The duplicating unit 63 is realized by an instruction from the CPU 501 and duplicates information with the authentication management DB 6001 placed at different locations.

  The storage / reading unit 69 is executed by an instruction from the CPU 501 and the HDD 505 or realized by an instruction from the CPU 501, and stores various data in the storage unit 6000 or extracts various data stored in the storage unit 6000. I do.

<< Functional configuration of configuration management device >>
The configuration management device 90 includes a transmission / reception unit 91, a configuration management unit 92, a dependency relationship management unit 93, a life / death state management unit 94, a control unit 95, and a storage / reading unit 99. Each of these units is a function realized by any of the constituent elements shown in FIG. 4 being operated by an instruction from the CPU 501 in accordance with a program for an authentication management apparatus expanded from the HD 504 to the RAM 503, or Means. In addition, the configuration management device 90 includes a storage unit 9000 constructed by the HD 504.

記憶部９０００には表４の構成管理テーブルを記憶する構成管理ＤＢ９００１が構築されている。構成管理テーブルでは、装置ごとにアドレス情報と引き継ぎ先が登録されている。アドレス情報は、各装置が通信サービスの提供のために接続すべき装置のアドレス（例えばＩＰアドレス）であり、構成管理装置９０に問い合わせがあった場合に抽出される。引き継ぎ先は装置が故障した場合に各装置がアクセスすべき装置のアドレス（例えばＩＰアドレス）である。端末管理ＤＢ５００１と認証管理ＤＢ６００１は予め複製が作成されているので、引き継ぎ先が登録されている。その他の装置は故障が生じた場合に引き継ぎ先が登録される。

In the storage unit 9000, a configuration management DB 9001 that stores the configuration management table of Table 4 is constructed. In the configuration management table, address information and a takeover destination are registered for each device. The address information is an address (for example, an IP address) of a device to which each device is to be connected for providing a communication service, and is extracted when an inquiry is made to the configuration management device 90. The takeover destination is an address (for example, IP address) of a device to be accessed by each device when the device fails. Since the terminal management DB 5001 and the authentication management DB 6001 are duplicated in advance, the takeover destination is registered. For other devices, the takeover destination is registered when a failure occurs.

記憶部９０００には表５の依存関係テーブルを記憶する依存関係管理ＤＢ９００２が構築されている。この依存関係テーブルでは、依存元の装置又は機能が依存先の装置又は機能に依存することが登録されている。この関係は、ある拠点で依存元の装置又は機能が動作するためには、同じ拠点で依存先の装置又は機能が動作していなければならない、ことを意味している。すなわち、依存元の装置が適切に動作するために依存先の装置又は機能を必要とする。このデータ構造はそれぞれの装置をグラフ理論における頂点、依存関係を依存する側からされる側への方向を持つ辺とした有向グラフと考えた場合、この有向グラフにおける隣接行列として表現することもできる。依存関係テーブルは第２の依存関係情報の一例である。

In the storage unit 9000, a dependency management DB 9002 that stores the dependency table in Table 5 is constructed. In this dependency relationship table, it is registered that the dependency source device or function depends on the dependency destination device or function. This relationship means that in order for a dependent device or function to operate at a certain base, the dependent device or function must operate at the same base. In other words, the dependent device or function is required for the dependent device to operate properly. This data structure can also be expressed as an adjacency matrix in a directed graph when each device is considered as a directed graph with vertices in the graph theory and edges having a direction from the dependent side to the dependent side. The dependency relationship table is an example of second dependency relationship information.

記憶部９０００には表６の間接依存関係テーブルを記憶する間接依存関係管理ＤＢ９００３が構築されている。間接依存関係テーブルは、依存関係テーブルから導かれる間接的な依存を含めた依存関係を示す。間接依存関係テーブルの求め方は後述する。間接依存関係テーブルの行方向の装置や機能それぞれが停止した場合に影響を受ける装置又は機能があれば、対応するフィールドにＴｒｕｅ（真）が、影響しない場合にはＦａｌｓｅ（偽）が設定されている。なお、表６では、便宜上、すべてがＦａｌｓｅとなる列を除いて示している。間接依存関係テーブルは第１の依存関係情報の一例である。

In the storage unit 9000, an indirect dependency management DB 9003 that stores the indirect dependency table in Table 6 is constructed. The indirect dependency relationship table indicates dependency relationships including indirect dependency derived from the dependency relationship table. A method for obtaining the indirect dependency relationship table will be described later. If there are devices or functions that are affected when each device or function in the row direction of the indirect dependency table is stopped, True (true) is set in the corresponding field, and False (false) is set if there is no effect. Yes. In Table 6, for the sake of convenience, all columns are shown as false. The indirect dependency relationship table is an example of first dependency relationship information.

(Each functional configuration of the configuration management device)
The transmission / reception unit 91 is executed by a command from the CPU 501 and the network I / F 509, and transmits / receives various data (or information) to / from each transmission terminal 10, call control device 50, and the like via the communication network 2.

  The configuration management unit 92 is realized by a command from the CPU 501, and receives an inquiry regarding address information such as the terminal management DB 5001 and the configuration management device 90 with which the call control device 50 should communicate through the transmission / reception unit 91. Then, referring to the configuration management table, the address information of these devices is returned. The configuration management unit 92 can be configured as a DNS server that receives a DNS (Domain Name Service) inquiry from another device via a local network and returns the IP address of the target device. It can also be configured as a relational database or KVS (Key Value Store) storing information such as port numbers and URLs for accessing other devices.

  The dependency relationship management unit 93 is realized by an instruction from the CPU 501 and manages a dependency relationship table in which dependency relationships between devices and functions in the base are registered. Further, the dependency relationship management unit 93 creates an indirect dependency relationship table from the dependency relationship table and registers it in the indirect dependency relationship management DB 9003. Also, the dependency relationship management unit 93 determines the failed device or function itself as the resource 1. Next, the dependency management unit 93 searches the indirect dependency relationship table for a row having the failed device or function as a headline, and determines the device or function of the column heading associated with True in that row as the resource 2. . Further, a column having each of the resources 1 and 2 as headings is searched from the indirect dependency relationship table, and the device or function of the row heading associated with the True is determined as the resource 3. Then, the union of resources 1, 2 and 3 is determined as the takeover target resource.

  The life and death state management unit 94 is realized by a command from the CPU 501, monitors the operation state by a method unique to each device in the same base, and stores whether or not it is operating (life state) (memory 503, HD504, etc.) Store on top. In addition, the life and death state of each subordinate apparatus is exchanged with the configuration management apparatus 90 placed at another base via the transmission / reception unit 91, and management is performed for each base. Here, the configuration management device 90 confirms the life and death status of each device. However, the present invention is not limited to this. For example, the life and death information obtained using a monitoring device installed inside or outside the base may be received. .

  The control unit 95 controls each of these units, and controls to execute the function at another site when the apparatus is stopped.

  The storage / reading unit 99 is executed by an instruction from the CPU 501 and the HDD 505, or realized by an instruction from the CPU 501, and stores various data in the storage unit 9000 or extracts various data stored in the storage unit 9000. I do.

<Details of processing>
Next, details of the processing of the transmission system 1 will be described.

<< Processing at login >>
A procedure until the transmission terminal 10aa logs in to the call control device 50 will be described with reference to FIG. FIG. 6 is an example of a sequence diagram of a procedure for the transmission terminal 10aa to log in to the call control device 50.
S1: The transmission terminal 10 transmits a login request including the communication ID (01aa) and password to the authentication management apparatus 60.
S2: The authentication unit 62 of the authentication management device 60 that has acquired the login request inquires of the authentication management DB 6001 whether a set of communication ID and password is registered in the authentication management table.
S3: When a pair of communication ID and password is registered in the authentication management table, the address of the call control device 50 to which the transmission terminal 10 managed in association with the communication ID belongs (for example, conf.a.example. com).
S4: The authentication unit 62 of the authentication management device 60 generates an access token that authorizes the transmission terminal 10 to access the call control device 50.

S5: The authentication unit 62 of the authentication management device 60 notifies the transmission terminal 10 of the access token and the address of the call control device 50 via the transmission / reception unit 61.
S6: Next, the transmission terminal 10aa requests the notified call control apparatus 50a to log in using the notified access token.
S7: The management unit 52 of the call control device 50a permits the login of the transmission terminal 10aa when the access token presented by the transmission terminal 10aa can be confirmed as valid. The management unit 52 records the state of the transmission terminal 10aa as online in the terminal management table of the terminal management DB 5001. further,
S8: The management unit 52 reads the destination list of the transmission terminal 10aa from the destination management table of the destination management DB 5002.
S9: The transmission / reception unit 51 of the call control device 50a transmits the destination list to the transmission terminal 10aa. At this time, the address of the call control device 50a to which the transmission terminal 10 in the destination list belongs (conf.b.example.com in the transmission terminal 10ab) is also transmitted.

  S10: The transmission / reception unit 51 of the call control device 50a notifies the destination registered in the destination management table that the state of the transmission terminal 10aa is online.

  In this way, the transmission terminal 10 can access the call control device 50a after receiving authentication by accessing the authentication management device 60.

<< Sequence until communication start >>
Next, processing until the transmission terminal 10aa starts communication of content data with the transmission terminal 10ab will be described with reference to FIG. FIG. 7 is an example of a sequence diagram of a procedure in which the transmission terminal 10aa starts communication of content data with the transmission terminal 10ab.

Hereinafter, a case will be described in which the transmission terminal 10aa connected to the call control device 50a through the login process starts communication with the transmission terminal 10ab connected to the call control device 50b through the login process.
S1: The transmission terminal 10aa makes a communication start request to the call control device 50a by the transmission / reception unit 11 according to the operation of the operation button 108 by the user. In this communication start request, the communication ID of the transmission terminal 10aa as the communication start request source, the domain “01aa@conf.a.example.com” of the call control device 50a, and the communication ID of the destination terminal 10ab and the call control device 50b domain “01ab@conf.b.example.com” is included. The domain of the call control device 50 to which the destination transmission terminal 10 belongs is transmitted to the transmission terminal 10aa together with the destination list.
S2: The transmission / reception unit 51 of the call control device 50a receives the communication start request. The call control device 50a sets the communication state of the request source terminal 10aa in the terminal management table to BUSY.
S3: The transmission / reception unit 51 of the call control device 50a requests the call control device 50b to notify the other transmission terminal 10ab that the communication state of the request source terminal 10aa is BUSY.
S4: The call control device 50b notifies the transmission terminal 10ab that the communication state of the request source terminal 10aa is BUSY.

S5: Next, the transmission / reception unit 51 of the call control device 50a transmits a communication start request to the call control device 50b that manages the transmission terminal 10ab that is the connection destination. This start request includes the communication IDs (01aa, 01ba) of the request source terminal and the destination terminal.
S6: The transmission / reception unit 51 of the call control device 50b transmits the received communication start request to the destination transmission terminal 10ab.
S7: Upon receiving the start request, the destination transmission terminal 10ab transmits a permission response indicating permission to start to the call control device 50b according to the input of permission to start communication by the user. This response includes communication IDs (01aa, 01ab) between the request source terminal and the destination terminal.
S8: The transmission / reception unit 51 of the call control device 50b transmits the received permission response to the call control device 50a.
S9: When the transmission / reception unit 51 of the call control device 50a receives the permission response, the session control unit 53 transmits the relay management device 40 that manages the entire relay of content data in the session established based on the communication start request. Selection is made from among all the relay management devices 40 provided in the system 1. The method of selecting the relay management device 40 is not particularly limited, but the method of selecting the relay management device 40 arranged at the connection destination base A of the request source terminal 10aa, the method of selecting at the connection destination base B of the destination terminal 10ab A method of selecting the relay management device 40, a method of selecting the relay management device 40 arranged at an intermediate position between the connection destination of the request source terminal 10aa and the connection destination of the destination terminal 10ab, a method of selection by the round robin method, load distribution The method of selecting from the viewpoint of Hereinafter, the case where the relay management device 40a arranged at the connection destination base A of the request source terminal 10aa is selected will be described.

S10: The transmission / reception unit 51 of the call control device 50a transmits session information regarding the content data session sed established between the transmission terminals 10aa and 10ab to the relay management device 40a of the relay system 3a based on the request of the transmission terminal 10aa. To do. This session information includes at least the communication IDs (01aa, 01ab) of the request source terminal and the destination terminal.
S11: The relay management device 40a that has received the session information assigns a session ID “S001” for identifying the session.
S12: Also, the relay management device 40a transmits the generated session ID to the call control device 50a in association with the domain information “video.a.example.com” indicating the own device.
S13: Subsequently, the call control device 50a transmits the session ID “S001” and the domain information to the request source terminal 10aa.
S14: Also, the call control device 50a sends the session ID and domain information “S001@video.a.example.com” and the communication ID (destination terminal 10ab) to the call control device 50b to which the destination terminal 10ab is connected. 01ab) is transmitted.

S15: The transmission / reception unit 51 of the call control device 50b transmits the session ID and domain information “S001@video.a.example.com” sent from the call control device 50a to the destination terminal 10ab.
S16: The request source terminal 10aa is connected to the relay management apparatus 40a by transmitting the communication ID of the own terminal to the relay management apparatus 40a disposed at the site A to which the call control apparatus 50a to which the terminal is connected belongs. To do.
S17: Similarly, the destination terminal 10ab connects to the relay management device 40a using the session ID and domain information received from the call control device 50b.
S18: Subsequently, the transmission / reception unit 11 of the transmission terminal 10aa transmits the session ID sent from the call control device 50a and the communication ID of the terminal itself to the relay management device 40a, thereby identifying the content data identified by this session ID. Request to participate in session sed.
S19: Upon receiving the participation request, the relay management device 40a determines the relay device 30 that relays the content data in this session from among the relay devices 30 managed by the own device.

  S20: Then, the assigned relay device 30 (here, the relay device 30a), the request source terminal 10aa, and the destination terminal 10ab are connected. As a result, the transmission terminal 10aa and the transmission terminal 10ab can transmit / receive content data to / from each other via the relay device 30aa.

  Thus, even if the bases of the transmission terminals 10aa and 10ab are different and the call control devices 50 to which they belong are different, they can communicate with each other.

<Indirect dependency table generation>
Next, generation of an indirect dependency relationship table based on the dependency relationship table will be described with reference to FIG. According to the dependency relationship table of Table 5, the call control device 50a at the site A depends on the external network, the configuration management device 90a and the terminal management DB 5001 at the site A, the relay device 30 depends on the external network, and the authentication management device 60 Depends on the external network, the configuration management device 90a, and the authentication management DB 6001.

  In this embodiment, an apparatus or function registered in the dependency relationship table is referred to as a resource, and two permutations of all of the resources are extracted to determine whether or not there is a dependency relationship in the dependency relationship table. According to Table 5, 1. call control device; 2. external network; 3. Configuration management device 4. Terminal management DB 5001 (located at base A) 5. relay device; 6. authentication management device; There are seven resources in the authentication management DB 6001 (duplicate resources are treated as the same).

  FIG. 8 is an example of a flowchart illustrating a procedure in which the dependency relationship management unit 93 creates an indirect dependency relationship table from the dependency relationship table. This process checks whether it is possible to reach the device or function b by recursively following the device or function that the device or function a depends on any two devices a, b or function a, b. Yes. First, as a premise, the dependency relationship management unit 93 sets X as a set of all resources. Also, in all permutations that take two from the set X 1, the two are denoted by [a, b]. In the following process, the dependency that a depends on b is expressed by DEP (a, b). True if the dependency of DEP (a, b) is true, False if it is false.

  The dependency management unit 93 extracts an arbitrary DEP (a, b) and determines whether or not the DEP (a, b) has been determined (S10).

  If DEP (a, b) has already been determined (Yes in S10), the dependency relationship management unit 93 leaves DEP (a, b) as it is (S20).

  If DEP (a, b) has not been determined (No in S10), the dependency relationship management unit 93 records that DEP (a, b) extracted in step S10 is being calculated (S30).

  Next, the dependency relationship management unit 93 reads the dependency relationship having the resource a as a parent from the dependency relationship table (S40).

  Then, it is determined whether or not a dependency relationship exists (S50). For example, if the resource a is the call control device 50, there is a dependency, but if the resource a is an external network, there is no dependency.

  When there is no dependency relationship (No in S50), the dependency relationship management unit 93 sets DEP (a, x) to false for all X (S60). For example, when the resource a is an external network, the dependency relationship from the external network to all seven resources is False.

  When the dependency relationship exists (Yes in S50), the dependency relationship management unit 93 first sets the dependency relationship as DEP (a) (S70).

  Then, in DEP (a), it is determined whether or not b extracted in step S10 is included in the dependency relationship child (S80).

  If the determination in step S80 is Yes, the dependency relationship management unit 93 sets True to DEP (a, b), and the process ends (S90).

  If the determination in step S80 is No, the process proceeds to step S100. The dependency relationship management unit 93 calculates DEP (x, b) for all of the children x having a dependency relationship in the dependency relationship table for DEP (a) (S100). For example, when the resource a is the call control device 50, the external network, the configuration management device 90, and the terminal management DB 5001 are x of DEP (x, b).

  Next, it is determined whether there is even one dependency relationship of DEP (x, b) in the dependency relationship table (S110).

  If there is even one dependency, DEP (a, b) having the dependency is set to True (S120).

  If there is no dependency, all DEP (x, b) are set to False (S130).

  The dependency relationship management unit 93 performs the process of FIG. 8 until True or False is set for all permutations of DEP (a, b). By the processing as described above, the indirect dependency relationship table shown in Table 6 is obtained. The presence of the indirect dependency relationship table makes it easier to identify other devices and functions that have an effect than the dependency relationship table when an arbitrary device fails.

  By recursive processing as shown in FIG. 8, DEP (a, c) can be set to True when there is a → b, b → c relationship in the dependency relationship table. In the dependency relationship table of FIG. 5, relationships such as a → b and b → c are not registered.

  Further, the method of obtaining the indirect dependency relationship table is not limited to FIG. When a dependency relationship table is considered as an adjacency matrix of a directed graph in graph theory, a method of obtaining a reachability matrix indicating reachability between two arbitrary vertices is generally known. When the adjacency matrix is X and the unit matrix is I, the reachability matrix is obtained as a result of performing the power of X + I (however, the sum and product of elements are respectively logical sum and logical product) until there is no change. .

<Inheriting device or function when device fails>
The process from the stop detection of a device or function to the handover of the device or function to multiple sites will be described with reference to FIG. FIG. 9 is an example of a flowchart illustrating an apparatus or function takeover procedure using an indirect dependency relationship table.

  First, the life and death state management unit 94 of the configuration management device 90 detects the stop of the device or function (resource) (S10). The life and death state management unit 94 updates the life and death state stored in the memory and notifies the control unit 95 of the updated life and death state.

  The control unit 95 inquires the dependency management unit 93 using the stopped device or function as a key, and extracts the resource 2 (S20). For example, when the terminal management DB 5001 is stopped in the indirect dependency relationship table of Table 6, the call control device 50 in which True is associated with the terminal management DB 5001 is extracted in the row direction.

  Next, referring to the column corresponding to the call control device 50 (resource 2) extracted in the row direction and the failed terminal management DB 5001 (resource 1), the resource 3 that is True is extracted (S30). In the column of the call control device 50 in the indirect dependency relationship table in Table 6, True is the external network, the configuration management device 90, and the terminal management DB 5001 (resource 3). Further, all elements in the column of the terminal management DB 5001 are False and are omitted from Table 6.

  Therefore, the dependency relationship management unit 93 determines the terminal management DB 5001 (resources 1 and 3), the call control device 50 (resource 2), the external network, and the configuration management device 90 (resource 3) as takeover target resources (S40). ). These show the necessary equipment at the site that accepts the function of the stopped equipment.

  It should be noted that all devices other than those determined in step S40 that cannot be taken over (eg, external network; in this embodiment, the external network is not taken over) are to be taken over. It is also possible to specify a device that is not to be taken over in advance.

  The following processing is repeatedly executed while there is one next takeover target (S50).

  First, one takeover target resource is selected (S60).

  The control unit 95 pays attention to the device or function (resource) that is the takeover target, and selects a base where all the devices or functions are operating (S70). The selection method when there are a plurality of bases that satisfy the conditions is not limited, but it is possible to select bases that are closer to each other, or to select randomly.

  Then, the control unit 95 takes over the device or function to be taken over to the selected base (S80). Specifically, the apparatus or function is executed at the takeover destination site, and the takeover is performed by correcting information for referring to the apparatus or function. If the failed device is a database, a copy of the data is placed in advance at a site that may be the takeover destination. Takeover is performed by setting a takeover destination in address information indicating a failed database in the configuration management table of the configuration management apparatus 90.

  When the failed device is a single device or a device that provides a function by referring to a database (in the example, the call control device 50 or the authentication management device 60), a new device that provides the function is started at the takeover destination site. Then, the takeover is performed by setting the takeover destination for the address of the device on the configuration management table of the configuration management device 90.

  If the device that has taken over accepts the connection from the external network to which the transmission terminal 10 is connected, and the IP address changes due to the movement of the base, the DNS registration information on the external network is updated. Make the reference to the takeover device.

  Also, IP addresses that may be taken over to the transmission terminal 10 are stored in advance with priorities, and when the IP addresses with higher priorities cannot be connected to the devices, they are connected to the devices with lower priorities. May be tried.

  If a device that provides the same function is already operating at the takeover destination, it may be possible not to take over or to start up the device until the performance requirements required only at the takeover destination are met. It is done.

  Finally, the control unit 95 adds information about the newly added device to the dependency relationship table in the configuration management device 90b that is the takeover destination, and recreates the indirect dependency relationship table (S90).

<< If terminal management DB fails >>
The takeover when the terminal management DB 5001 fails will be described with reference to FIG. FIG. 10 is an example of a flowchart showing a procedure for taking over an apparatus or a function using an indirect dependency relationship table when the terminal management DB 5001 fails (specific example of FIG. 9).

  First, the dependency relationship management unit 93 of the configuration management apparatus 90a extracts a takeover target resource affected by a failure of the terminal management DB 5001 from the indirect dependency relationship table. The extraction method has been described with reference to FIG.

  Next, the control unit 95 selects a takeover destination base of the terminal management DB 5001 of the base A (S20). The configuration management table confirms that the copy of the terminal management DB 5001 is located at the site B.

  Next, the life and death state management unit 94 confirms that the terminal management DB 5001 at the site B is operating (S30).

  Then, the control unit 95 updates the configuration management table so that the terminal management DB 5001 at the site B is referred to as the terminal management DB 5001 at the site A (S40). Since the address information of the takeover destination has already been registered in the configuration management table, a flag or the like indicates that the currently valid address information is that of the takeover destination. Alternatively, the address information of the takeover source is deleted.

  Next, the control unit 95 takes over the call control device 50a (S50). A base having the external network on which the call control device 50a depends, the configuration management device 90, and the terminal management DB 5001 is selected. Since the terminal management DB 5001 of the base A has already been transferred to the base B, it is determined whether or not the base B has an external network and the configuration management device 90. Since the base B has an external network and the configuration management device 90, the base B is selected.

  The control unit 95 causes the call control device 50b to start call control for the site A (S60). That is, the address information of the takeover destination of the configuration management device 90a is registered in the configuration management table, and this is notified to the call control device 50b. The call control device 50b can access the configuration management device 90b and the terminal management DB 5001 at the site B.

<< If the configuration management device fails >>
The takeover when the configuration management apparatus 90a fails will be described with reference to FIG. FIG. 11 is an example of a flowchart illustrating a procedure for taking over a device or a function using an indirect dependency relationship table when the configuration management device 90a fails (specific example of FIG. 9).

  The life and death state management unit 94 of the configuration management device 90b mutually monitors the configuration management device 90a at another base (S10). When the configuration management apparatus 90a at a certain base (referred to as base A) stops, the stoppage is detected at the configuration management apparatuses (referred to as bases B and C) at other bases.

  Next, the control unit 95 of the configuration management apparatuses 90b and 90c at the bases B and C selects a leader in charge of control of the takeover process via the transmission / reception unit 91 (S20). For example, an order based on numerical values is provided at the bases, and the configuration management apparatus 90 that is operating has the smallest numerical value as the leader. The method of selecting leaders is not limited to this.

  Next, the control unit 95 of the configuration management apparatus 90 that has become the leader extracts the takeover target resource from the indirect dependency relationship table (S30). First, it is the call control device 50 and the authentication management device 60 that are true in the row of the configuration management device 90 in the row header of the indirect dependency relationship table (resource 2). Since all the columns of the configuration management apparatus 90 that are resources 1 are False, they are omitted from Table 6. Next, it is the external network, the configuration management device 90, and the terminal management DB 5001 that are true in the column of the call control device 50 in the column header of the indirect dependency relationship table. In the column of the authentication management device 60 in the column header of the indirect dependency relationship table, True is the external network, the configuration management device 90, and the authentication management DB 6001. Therefore, the external network, the configuration management device 90, the terminal management DB 5001, and the authentication management DB 6001 are the resources 3.

  Therefore, except for the external network, the configuration management device 90, the call control device 50, the authentication management device 60, the terminal management DB 5001, and the authentication management DB 6001 become takeover target resources.

  Next, the control unit 95 of the configuration management apparatus 90b that has become the leader performs the processing of steps S50 to S80, as in the case of FIG.

  Therefore, even if the configuration management apparatus 90a that performs the handover process fails, the configuration management apparatus 90b can take over the function of the configuration management apparatus 90a to another base.

<Other preferred examples>
The best mode for carrying out the present invention has been described above with reference to the embodiments. However, the present invention is not limited to these embodiments, and various modifications can be made without departing from the scope of the present invention. And substitutions can be added.

  For example, two or more of the call control device 50, the authentication management device 60, the relay management device 40, and the configuration management device 90 may be configured in an information processing device in one housing. In addition, a plurality of call control devices 50, authentication management devices 60, relay management devices 40, and configuration management devices 90 may be arranged at one site.

  In addition, the call control device 50, the authentication management device 60, the relay management device 40, and the configuration management device 90 may be realized by cloud computing. The number of devices 60, relay management devices 40, and configuration management devices 90 may increase or decrease dynamically.

  The functional blocks shown in FIG. 5 are merely examples, and the functions of each device need not be fixed to each device, and may be provided as the transmission system 1.

  The transmission terminal 10 is not limited to a dedicated communication device, and may be a general-purpose portable terminal such as a smartphone, a tablet terminal, a PC (Personal Computer), a wearable PC, a game device, or a car navigation terminal.

DESCRIPTION OF SYMBOLS 1 Transmission system 10 Transmission terminal 30 Relay apparatus 40 Relay management apparatus 50 Call control apparatus 60 Authentication management apparatus 90 Configuration management apparatus

JP 2004-118689 A

Claims (9)

An information processing apparatus that manages one or more apparatuses that provide a communication service to a transmission terminal,
Failure detection means for detecting a failure of the device;
Device function determination means for determining the other device or function on which the failed device depends, referring to the first dependency relationship information in which the other device or function on which the device depends to operate is registered;
An information processing apparatus comprising: a control unit configured to control the other device or function determined by the device function determining unit to be taken over by a device serving as a takeover destination. The device function determining means provides the device and the communication service from a plurality of pieces of second dependency information in which devices or functions necessary when the failed device provides the communication service are registered. Take out the necessary devices or functions as resources so as not to overlap,
Whether the first resource arbitrarily extracted depends on the second resource is determined to be true or false in the dependency relationship from the first resource to the second resource according to the result of searching from all the second dependency relationship information. Set,
Further, even when the dependency relationship in which the first resource depends on the second resource is not registered in the second dependency relationship information, the dependency relationship in which the first resource depends on the second resource is not changed through the third resource. When registered in the second dependency relationship information, set true to the dependency relationship from the first resource to the second resource,
A table in which all resources are arranged in each of the column direction and the row direction is created, and the first dependency relationship information is set by setting true or false to corresponding elements of the row direction resource and the column direction resource. The information processing apparatus according to claim 1 to be created. The device function determining means is
Search for the failed device or function from the row header or column header of the table, and retrieve all the third resources associated with the true for the device or function,
Next, all the fourth resources in which the information indicating the true in the table is associated with the third resource and the failed device or function are extracted,
The information processing apparatus according to claim 2, wherein the union of the failed device or function, the third resource, and the fourth resource is determined as the other device or function on which the failed device depends. The communication service is provided for each site,
When the failure detection means detects a failure of the information processing device at the first base,
The device function determining means selects the device as a takeover destination from another base, and the device function determining means of the selected device is dependent on the device detected by the failure detecting means. Or decide the function,
The information according to any one of claims 1 to 3, wherein the control unit of the selected device controls the other device or function determined by the device function determining unit to be taken over by the device as a takeover destination. Processing equipment. If the device as the takeover destination is a database, a copy of the database has been created in advance at another location,
5. The information processing apparatus according to claim 1, wherein, when the database is taken over, the control unit updates the address information of the database to the address information of the database replicated in the other base.   Configuration management means for returning the address of the other device or function controlled so that the control means takes over to the device as the takeover destination when there is an inquiry from the device as the takeover destination that provides the communication service The information processing apparatus according to any one of claims 1 to 5. An information processing device that manages one or more devices that provide communication services to a transmission terminal;
A failure detection step of detecting a failure of the device;
A device function determining step of determining the other device or function on which the failed device depends on referring to the first dependency relationship information in which the other device or function on which the device depends to operate is registered;
A control step for executing control so as to take over the other device or function determined in the device function determination step to a device as a takeover destination. A service control method performed by an information processing apparatus that manages one or more apparatuses that provide a communication service to a transmission terminal,
A failure detection step of detecting a failure of the device;
A device function determining step of determining the other device or function on which the failed device depends on referring to the first dependency relationship information in which the other device or function on which the device depends to operate is registered;
A control step of controlling the other device or function determined in the device function determination step to be taken over by a device as a takeover destination. A transmission system for providing a communication service to a transmission terminal,
Call control means for receiving a request from a transmission terminal and executing call control;
Failure detection means for detecting a failure of one or more devices providing communication services to the transmission terminal;
Device function determination means for determining the other device or function on which the failed device depends, referring to the first dependency relationship information in which the other device or function on which the device depends to operate is registered;
Control means for controlling to take over the other apparatus or function determined by the apparatus function determining means to the apparatus as the takeover destination;
And a configuration management unit that returns an address of the other device controlled so that the control unit takes over to a device as a takeover destination when an inquiry is made from a transmission terminal.

Images