JP2020053902A - Management device, management method, and management program - Google Patents

Abstract

To provide a management device, a management method, and a management program that can easily set connection restrictions for each terminal used by one user, even when the number of terminals exclusively used by one user increases.SOLUTION: A terminal 3G generates group identification information G1, G2 in units of users of the terminal 3 in accordance with a user operation, and stores them in a ROM 41. The terminal 3G stores terminal information T1 to T3 specified by the user in association with the identification information G1 specified by the user. When a request to set connection restriction for the identification information G1 is made, the terminal 3G associates first setting information L1 for connection restriction with each of the terminal information T1 to T3 corresponding to the identification information G1 to store them. The terminal 3G transmits connection management information including each of the terminal information T1 to T3 and the corresponding first setting information L1 to a relay device 2. The relay device 2 executes connection restriction to a network 1 for the terminal 3 on the basis of the connection management information.SELECTED DRAWING: Figure 5

Description

  The present invention relates to a management device, a management method, and a management program.

  A relay device such as a router that relays communication between a terminal such as a network such as the Internet and a terminal has a function of restricting a terminal from connecting to a network for the purpose of, for example, limiting a time for a child to access the Internet. There is something.

  Patent Literature 1 discloses that connection management (QoS request management) of a terminal connected to an access point is performed by a group (provider or department unit) using a VLAN (Virtual Local Area Network) or the like or a MAC (Media Access Control). It is described that the operation is performed by a policy control device outside the access point in user units (terminal ID units) using addresses and the like.

JP 2006-304083 A

  For example, in a network constructed in a home, an administrator such as a parent restricts a user's terminal such as a child from connecting to a network such as the Internet for a terminal of the user. In recent years, the number of terminals exclusively used by one user tends to increase. As described above, when the number of terminals per user increases, it becomes necessary to repeatedly perform the same connection restriction setting for all the terminals owned by the user, which complicates the operation.

  The policy control device described in Patent Literature 1 performs connection management on a group basis using a plurality of networks divided by a VLAN or the like. However, such as a terminal connection restriction for each user in a home, It is not assumed that connection management will be performed on a terminal user basis within the same network. Further, the connection management on a user basis performed by the policy control device described in Patent Document 1 is connection management on a terminal basis to the last. When one user uses a plurality of terminals, the connection management is performed on a user basis. It is not assumed that connection management will be performed.

  The present invention has been made in view of the above circumstances, and even when the number of terminals exclusively used by one user increases, it is easy to set connection restrictions for each terminal used by that user. It is an object of the present invention to provide a management device, a management method, and a management program that can perform the management.

  The management device of the present invention is a management device for managing a connection restriction to the network for the terminal, which is performed by a relay device that relays communication between the network and the terminal, and the management device includes a group for each user of the terminal. A group identification information generation unit that generates identification information of the terminal, obtains terminal information of the terminal connected to the relay device, the identification information specified by a user of the management device, and the identification information specified by the user. A group association processing unit for associating the terminal information with the terminal information, and accepting a first request for setting the connection restriction for the identification information specified by the user, the terminal associated with the identification information A first connection restriction setting unit that associates the first setting information of the connection restriction with the information, and the first setting information and the first setting information are associated with each other. A connection restriction execution control unit that transmits the terminal information to the relay device, and causes the relay device to execute connection restriction to the network based on the first setting information for the terminal specified by the terminal information. , Is provided.

  The management method according to the present invention is a management method for managing a connection restriction to the network for the terminal, which is performed by a relay device that relays communication between the network and the terminal, wherein the group is a user unit of the terminal. Group identification information generating step of generating identification information of the terminal, acquiring terminal information of the terminal connected to the relay device, the identification information specified by a user of the management device, and specified by the user A group association processing step of associating the terminal information with the terminal information, and accepting a first request for setting the connection restriction for the identification information specified by the user, the terminal associated with the identification information A first connection restriction setting step of associating the first setting information of the connection restriction with information, and the first setting information and the first setting information; A connection that transmits the terminal information associated with the setting information to the relay device, and causes the relay device to execute a connection restriction to the network based on the first setting information for the terminal specified by the terminal information. And a limit execution control step.

  The management program according to the present invention is a management program for managing a connection restriction to the network for the terminal, which is performed by a relay device that relays communication between the network and the terminal, the group being a user unit of the terminal. Group identification information generating step of generating identification information of the terminal, acquiring terminal information of the terminal connected to the relay device, the identification information specified by a user of the management device, and specified by the user A group association processing step of associating the terminal information with the terminal information, and accepting a first request for setting the connection restriction for the identification information specified by the user, the terminal associated with the identification information A first connection restriction setting step of associating first setting information of the connection restriction with information; and the first setting information. The relay device transmits the terminal information associated with the first setting information to the relay device, and limits the connection to the network based on the first setting information for the terminal specified by the terminal information. And a connection restriction execution control step to be executed by the computer.

  According to the present invention, even when the number of terminals exclusively used by one user increases, a management apparatus and a management method capable of easily setting connection restrictions for each terminal used by the user , And a management program can be provided.

FIG. 1 is a schematic diagram illustrating a schematic configuration example of a LAN 100 constructed in a home. FIG. 2 is a schematic diagram illustrating an example of an internal configuration of a relay device 2 in the LAN 100 illustrated in FIG. 1. FIG. 2 is a schematic diagram showing an example of an internal configuration of a terminal 3G as a management device in the LAN 100 shown in FIG. FIG. 4 is a functional block diagram of a terminal 3G shown in FIG. FIG. 4 is a diagram illustrating an example of management information stored in a ROM 41. FIG. 4 is a diagram illustrating another example of management information stored in a ROM 41. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing an example of information memorized by ROM41 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing an example of information memorized by ROM41 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing an example of information memorized by ROM41 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing an example of information memorized by ROM41 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing an example of information memorized by ROM41 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing an example of information memorized by ROM41 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing the example of a screen displayed on indicator 44 of terminal 3G by a connection management application. It is a figure showing an example of information memorized by ROM41 of terminal 3G by a connection management application.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a schematic diagram showing a schematic configuration example of a LAN 100 built in a home. The LAN 100 includes a relay device 2 such as a router or a gateway connected to a network 1 such as a mobile communication network or the Internet provided by a mobile phone carrier, and at least one terminal connectable to the relay device 2. In the example of FIG. 1, seven terminals of a terminal 3A, a terminal 3B, a terminal 3C, a terminal 3D, a terminal 3E, a terminal 3F, and a terminal 3G are connected to the relay device 2.

  The relay device 2 is communicably connected to each of the terminals 3A, 3B, 3C, 3D, 3E, 3F, and 3G by radio or wire. The relay device 2 relays communication between the network 3 and each of the terminals 3A, 3B, 3C, 3D, 3E, 3F, and 3G.

  Each of the terminals 3A, 3B, 3C, 3D, 3E, 3F, and 3G is a device having a communication function for connecting to the network 1 via the relay device 2. Each of the terminal 3A, the terminal 3B, the terminal 3C, the terminal 3D, the terminal 3E, the terminal 3F, and the terminal 3G is, for example, a game machine, a smartphone, a tablet, a personal computer, or the like.

  Hereinafter, the terminal 3A, the terminal 3B, the terminal 3C, the terminal 3D, the terminal 3E, the terminal 3F, and the terminal 3G are simply described as the terminal 3 when it is not necessary to individually distinguish the terminals. In addition, between the relay device 2 and the terminal 3, an authentication operation or the like for relaying communication is performed in advance, and the terminal 3 is registered in the relay device 2.

  In the following, a description will be given assuming that the LAN 100 is built in a family of four, for example, a father, a mother, and the sons of the parents, the eldest son and the second son. The eldest son mainly uses the terminals 3D, 3E, and 3F, the second son mainly uses the terminals 3A and 3B, the mother mainly uses the terminal 3C, and the father mainly uses the terminal 3G. It will be described as an example.

  An arbitrary terminal 3 (terminal 3G in the example of FIG. 1) that can be connected to the relay device 2 is a terminal on which an application program (connection management application) including a management program can be installed. The terminal 3G functions as a management device by executing the connection management application. Hereinafter, it is assumed that the father of a family of four is an administrator who manages children by performing various settings and operations on the connection management application of the terminal 3G (hereinafter, referred to as a user of the terminal 3G (management device)). explain.

  In this connection management application, the terminals 3 are registered in groups of user units and registered, and connection restrictions to the network 1 can be set collectively for the terminals 3 belonging to this group. The restriction on the connection to the network 1 means that the period (time zone, day of the week, etc.) that can be connected to the network 1 is restricted.

  For example, the terminal 3D, the terminal 3E, and the terminal 3F are registered in the eldest son group because the eldest son mainly uses the terminal 3D. In addition, the terminal 3A and the terminal 3B are registered in the second son group because the second son mainly uses the terminal 3A. For example, when the father wants to restrict the connection to the network 1 for all the terminals 3 used by the eldest son, the user operates the connection management application to perform the connection restriction setting operation for the eldest son's group. As a result, connection restriction can be performed for the terminals 3D, 3E, and 3F belonging to the eldest son group at once.

  FIG. 2 is a schematic diagram showing an example of the internal configuration of the relay device 2 in the LAN 100 shown in FIG. The relay device 2 includes a CPU (Central Processing Unit) 20, a ROM (Read Only Memory) 21, a RAM (Random Access Memory) 22, a first communication module 23, and a second communication module 24.

  The CPU 20, the ROM 21, the RAM 22, the first communication module 23, and the second communication module 24 are connected by a common bus.

  If the network 1 is the Internet, the first communication module 23 performs wired communication with the network 1 based on, for example, the IEEE802.3 standard.

  If the network 1 is a mobile communication network, the first communication module 23 is, for example, an IMT (International Mobile Telecommunication) -2000 standard (3G / HSDPA (3rd Generation / High-Speed Downlink Packet Access), LTE (LongEngTimer). Or wireless communication with the network 1 in accordance with WiMAX (including Worldwide Interoperability for Microwave Access) or the like.

The second communication module 24 is a module for performing wireless or wired communication with the terminal 3. As the second communication module 24, a module that performs wireless communication in accordance with, for example, the IEEE (The Institute of Electrical and Electronics Engineers) 802.11 standard is used. Alternatively, the second communication module 24 that performs wired communication in accordance with a standard such as 1000BASE-T, 100BASE-TX, or 10BASE-T is used. The second communication module 24 may be a module for communicating with the terminal 3 by both wireless and wired.
As a specific method for the relay device 2 to restrict the connection of the terminal 3 to the network 1, when the second communication module 24 performs wireless communication, the wireless communication from the terminal 3 for a specified period is performed. There is a way to refuse the connection. When the second communication module 24 performs wired communication, there is a method of rejecting a packet received from the terminal 3 during a specified period.

  The CPU 20 controls the operation of the entire relay device 2 by executing a program such as firmware stored in the ROM 21 after the program is expanded in the RAM 22. More specifically, the structure of the CPU 20 is an electric circuit in which circuit elements such as semiconductor elements are combined.

  The ROM 21 stores various programs such as the above-described firmware and various data including connection management information described later. The CPU 20 restricts the connection of the terminal 3 connected to the relay device 2 to the network 1 based on the connection management information stored in the ROM 21. Terminal information (IP address, MAC address, maker name, device category, etc.) obtained from the terminal 3 during the authentication work performed with the terminal 3 is registered in the ROM 21.

  The RAM 22 operates as a main memory of the relay device 2 and stores various programs and data.

  FIG. 3 is a schematic diagram showing an example of an internal configuration of a terminal 3G as a management device in the LAN 100 shown in FIG. The terminal 3G includes a CPU 40, a ROM 41, a RAM 42, a communication module 43, a display unit 44, and an operation unit 45.

  The CPU 40, the ROM 41, the RAM 42, the communication module 43, the display unit 44, and the operation unit 45 are connected by a common bus.

  The communication module 43 is a module for performing wireless or wired communication with the relay device 2. The communication module 43 that performs wireless communication in accordance with, for example, the IEEE 802.11 standard is used. Alternatively, the communication module 43 that performs wired communication in accordance with a standard such as 1000BASE-T, 100BASE-TX, or 10BASE-T is used.

  The display unit 44 includes a display panel for displaying information constituted by a display element such as a liquid crystal display element or an organic EL (electro-luminescence) display element, and a display controller (for example, a GPU (Graphics) for driving the display panel). Processing Unit).

  Upon receiving data indicating an instruction to display information from the CPU 40, the display controller creates data constituting a display screen, drives the display panel based on the data, and displays the data on the display panel. A desired display screen is displayed in the area.

  The operation unit 45 is an interface for inputting various information to the CPU 40, and includes a button, a touch panel, and the like. Hereinafter, the operation unit 45 is described as a touch panel integrally formed with the display panel of the display unit 44. When the operation unit 45 is operated, information corresponding to the operation is input to the CPU 40.

  The CPU 40 controls the operation of the entire terminal 3G by being executed after the program stored in the ROM 41 is expanded in the RAM 42. This program includes the connection management application described above. More specifically, the structure of the CPU 40 is an electric circuit in which circuit elements such as semiconductor elements are combined.

  The ROM 41 stores various programs and various data including management information described later. The ROM 41 functions as a storage unit.

  FIG. 4 is a functional block diagram of the terminal 3G shown in FIG.

  The terminal 3G executes the program including the connection management application stored in the ROM 41 by the CPU 40 and cooperates with the respective units, so that the name registration unit 40A, the group identification information generation unit 40B, the group association processing unit 40C, the first Functions as a connection restriction setting unit 40D, a second connection restriction setting unit 40E, and a connection restriction execution control unit 40F.

  The name registration unit 40A acquires the terminal information of the terminal 3 registered in the ROM 21 of the relay device 2 from the relay device 2 and stores it in the ROM 41.

  Further, the name registration unit 40A acquires the terminal information of the terminal 3 connected to the relay device 2 from the relay device 2 and, based on this terminal information, among the terminal information stored in the ROM 41, A connection flag is associated with the terminal information of the terminal currently connected to.

  Further, the name registration unit 40A accepts a display request (a request for displaying a list of terminal information of the terminals 3 connected to the relay device 2) input by the user of the terminal 3G operating the operation unit 45. A list screen (hereinafter, also referred to as a terminal list screen) of all the terminal information stored in the ROM 41 or the terminal information associated with the connected flag stored in the ROM 41 is displayed on the display unit 44. Let it.

  The name registration unit 40A displays, for example, a terminal list screen on the display unit 44, and when one terminal information is selected by a touch operation on the terminal list screen, a detailed screen of the selected terminal information is displayed. It is displayed on the display unit 44. On this detailed screen, an area is provided in which the name of the terminal 3 specified by the terminal information can be arbitrarily input.

  When the user of the terminal 3G inputs an arbitrary name in this area and performs an operation of saving this name, the name registration unit 40A accepts the input of this name and stores the selected name stored in the ROM 41. This name is added to the terminal information, and the terminal information is updated. The name registration unit 40A allows the user of the terminal 3G to easily confirm to whom the terminal 3 connected to the relay device 2 belongs.

  The group identification information generation unit 40B accepts input of information (for example, a user name or a group name) performed by the user of the terminal 3G operating the operation unit 45, and, based on this information, a user unit of the terminal 3 Generate group identification information in. The group identification information generation unit 40B generates, for example, a user name input from a user of the terminal 3G as group identification information, and stores the generated user name in the ROM 41.

  The group association processing unit 40 </ b> C outputs all terminal information stored in the ROM 41 to the identification information specified by the user of the terminal 3 </ b> G in the identification information of the group stored in the ROM 41. The terminal information specified by the user of the terminal 3G among the stored terminal information associated with the connection flag is stored in the ROM 41 in association with the terminal information. Group management information is composed of the identification information and the terminal information associated with the identification information. Note that only one piece of identification information is associated with one piece of terminal information.

  For example, while a screen for displaying a list of the generated identification information (hereinafter, referred to as a user list screen) is displayed on the display unit 44, the user of the terminal 3G selects one of the user list screens from the user list screen. When an operation for selecting the identification information is performed, information specifying the identification information is input to the CPU 40. By accepting this information, the group association processing unit 40C recognizes the identification information specified by the user of the terminal 3G.

  Further, for example, when the user of the terminal 3G performs an operation of selecting one piece of terminal information from the terminal list screen while the terminal list screen is displayed on the display unit 44, the terminal information is displayed. The information to be specified is input to the CPU 40. By accepting this information, the group association processing unit 40C recognizes the terminal information specified by the user of the terminal 3G.

  The terminal 3 specified by the terminal information associated with the identification information is hereinafter also referred to as a registered terminal, and the terminal 3 specified by the terminal information not associated with the identification information is hereinafter referred to as a terminal 3. Then, it is also called an unregistered terminal.

  When the first connection restriction setting unit 40D receives the first request for setting the connection restriction for the identification information specified by the user of the terminal 3G among the identification information stored in the ROM 41, the first connection restriction setting unit 40D responds to the identification information. The connection restriction setting information having the content corresponding to the first request is stored in the ROM 41 in association with all the attached terminal information. The connection restriction setting information is information indicating a period during which connection to the network 1 is prohibited, whether connection to the network 1 is prohibited, and the like. The connection restriction setting information stored in the ROM 41 by the first connection restriction setting unit 40D is referred to as first setting information.

  For example, when an operation of selecting arbitrary identification information from the above-described user list screen is performed, the group association processing unit 40C recognizes the identification information specified by the user of the terminal 3G, and recognizes the specified identification information. A screen (hereinafter, referred to as a user detail screen) for displaying the identification information and all the terminal information associated with the identification information is displayed on the display unit 44.

  When the user of the terminal 3G performs an operation on the user detail screen to request the setting of connection restriction to the network 1 for the terminal 3 specified by all the terminal information included in the user detail screen, the user details A first request for setting a connection restriction for the identification information displayed on the screen is input to the CPU 40.

  When accepting the first request, the first connection restriction setting unit 40D associates the setting information with the content corresponding to the above operation with each terminal information associated with the identification information displayed on the user details screen. And stored in the ROM 41. The terminal information and the setting information associated with the terminal information constitute connection management information. A combination of the connection management information and the above-described group management information is referred to as management information.

  FIG. 5 is a diagram showing an example of management information stored in the ROM 41. In the management information shown in FIG. 5, identification information G1 of the eldest son group mainly using the terminals 3D, 3E and 3F is generated and registered, and identification information G2 of the second son group mainly using the terminals 3A and 3B is registered. Is generated and registered, and is generated when a first request for setting a different connection restriction is made for each of the identification information G1 and G2.

  Specifically, the ROM 41 stores identification information G1 of the eldest son group and identification information G2 of the second son group. The terminal information T1, T2, and T3 specified by the user of the terminal 3G are stored in association with the identification information G1. The terminal information T1 is, for example, terminal information of the terminal 3D, the terminal information T2 is, for example, terminal information of the terminal 3E, and the terminal information T3 is, for example, terminal information of the terminal 3F.

  Furthermore, the first setting information L1 requested by the user of the terminal 3G is stored in association with the terminal information T1, T2, and T3. The combination of the identification information G1 and the corresponding terminal information T1, T2, T3 is group management information. The combination of each of the terminal information T1, T2, T3 and the first setting information L1 corresponding to each of them is connection management information.

  Terminal information T4 and T5 specified by the user of the terminal 3G are stored in association with the identification information G2. The terminal information T4 is, for example, terminal information of the terminal 3A, and the terminal information T5 is, for example, terminal information of the terminal 3B.

  Further, the terminal information T4 and T5 store the first setting information L2 requested by the user of the terminal 3G in association with each other. The combination of the identification information G2 and the corresponding terminal information T4, T5 is group management information. The combination of each of the terminal information T4 and T5 and the first setting information L2 corresponding to each of them is connection management information.

  The second connection restriction setting unit 40E is specified by the user of the terminal 3G out of all the terminal information stored in the ROM 41 or the terminal information associated with the connecting flag stored in the ROM 41. When the second request for setting the connection restriction to the network 1 with respect to the specified terminal information is accepted, the connection restriction setting information is stored in the ROM 41 in association with the designated terminal information.

  For example, when the user of the terminal 3G performs an operation of designating any terminal information included in the user detail screen in a state where the user detail screen is displayed on the display unit 44, the CPU 40 causes the designated A screen for displaying details of the terminal information (hereinafter, referred to as a terminal details screen) is displayed on the display unit 44.

  When the user of the terminal 3G performs an operation on this terminal detail screen to request setting of connection restriction to the network 1 for the terminal 3 specified by the terminal information displayed on the terminal detail screen, the terminal information Is input to the CPU 40.

  When accepting the second request, the second connection restriction setting unit 40E stores in the ROM 41 the terminal information displayed on the terminal detail screen in association with the setting information having the content corresponding to the above operation. The connection restriction setting information stored in the ROM 41 by the second connection restriction setting unit 40E is referred to as second setting information.

  For example, in a state where the management information illustrated in FIG. 5 is generated, the user of the terminal 3G performs an operation of requesting the terminal 3D specified by the terminal information T1 to set the connection restriction to the network 1. Then, the above second request is made. Then, the second connection restriction setting unit 40E that has accepted the second request cancels the association between the terminal information T1 and the corresponding first setting information L1. Specifically, the second connection restriction setting unit 40E changes the first setting information L1 corresponding to the terminal information T1 to the second setting information L3 corresponding to the second request, and changes the management information. Update to the one shown in FIG.

The connection restriction execution control unit 40F transmits the connection management information of the management information generated in this manner and stored in the ROM 41 to the relay device 2, and connects the terminal 3 to the network 1 based on the connection management information. The restriction is performed by the relay device 2.
For example, connection management information including terminal information T1 and first setting information L1, connection management information including terminal information T2 and first setting information L1, and terminal information T3 and first setting information L1 illustrated in FIG. And the case where the connection management information is generated and stored in the ROM 41.
In this case, the connection restriction execution control unit 40F first transmits the connection management information including the terminal information T1 and the first setting information L1 to the relay device 2, and performs the connection restriction on the terminal 3D specified by the terminal information T1. , Based on the first setting information L1.
Thereafter, the connection restriction execution control unit 40F transmits the connection management information including the terminal information T2 and the first setting information L1 shown in FIG. 5 to the relay device 2, and restricts the connection to the terminal 3E specified by the terminal information T2. Is performed by the relay device 2 based on the first setting information L1.
Thereafter, the connection restriction execution control unit 40F transmits the connection management information including the terminal information T3 and the first setting information L1 shown in FIG. 5 to the relay device 2, and restricts the connection to the terminal 3F specified by the terminal information T3. Is performed by the relay device 2 based on the first setting information L1.
As described above, the connection restriction execution control unit 40F transmits the connection restriction information to the relay device 2 for each terminal 3 and causes the relay device 2 to individually execute the connection restriction for each terminal 3 based on the connection restriction information.

  When receiving the connection management information including any terminal information from the terminal 3G, the relay device 2 stores this in the ROM 21. The relay device 2 restricts the connection to the network 1 for the terminal 3 specified by the terminal information included in the connection management information stored in the ROM 21 based on the setting information included in the connection management information. In this way, the relay device 2 limits the connection on a terminal 3 basis without considering the group.

  Next, an operation of generating various information by the terminal 3G that has executed the connection management application will be described using an example of a screen displayed on the display unit 44 of the terminal 3G. In the following description, the terminal information of the terminal 3D is referred to as terminal information T1, the terminal information of the terminal 3E is referred to as terminal information T2, the terminal information of the terminal 3F is referred to as terminal information T3, the terminal information of the terminal 3A is referred to as terminal information T4, The terminal information of 3B is referred to as terminal information T5, the terminal information of terminal 3C is referred to as terminal information T6, and the terminal information of terminal 3G is referred to as terminal information T7.

  In the following operation, it is assumed that each of the terminal information T1 to T7 stored in the ROM 41 of the terminal 3G includes the name of the terminal 3 input by the user of the terminal 3G. I do.

  Specifically, a name of “second son game machine” is added to the terminal information T4 of the terminal 3A. In the terminal information T5 of the terminal 3B, a name of “second son tablet” is added. The name “mother's tablet” is added to the terminal information T6 of the terminal 3C. In the terminal information T1 of the terminal 3D, a name of "eldest game machine" is added. In the terminal information T2 of the terminal 3E, a name of "eldest smartphone" is added. In the terminal information T3 of the terminal 3F, a name of "eldest personal computer" is added. In the terminal information T7 of the terminal 3G, a name of “smartphone of father” is added.

  FIGS. 7 to 11, 13, 13, 14, 16 to 18, 20 to 22, 24 to 26, 28, and 30 to 32 show the display unit of the terminal 3G by the connection management application. It is a figure showing the example of a screen displayed on 44. FIGS. 12, 15, 19, 23, 27, 29, and 33 are diagrams illustrating examples of information stored in the ROM 41 of the terminal 3G by the connection management application. In the screen examples in each figure, rectangles with “3A” to “3G” inside are icons indicating terminals 3A to 3G.

(Group registration operation)
In an initial state in which the group identification information or the connection restriction setting information is not stored in the ROM 41 of the terminal 3G, the CPU 40 first causes the display unit 44 to display an initial screen of the user list shown in FIG. When the (+) button at the lower right of this initial screen is touched by the user, the CPU 40 causes the display unit 44 to display the screen shown in FIG.

  Next, when the user inputs the character of “eldest son” into the input area 80 on the screen shown in FIG. 8 and touches “Save” on the upper right of this screen, the input character information is input to the CPU 40. Is done. In the CPU 40, when accepting the character information, the group identification information generation unit 40B stores the character information in the ROM 41 as group identification information G1.

  Next, when the user touches the (+) button at the lower right of the screen shown in FIG. 8, the CPU 40 proceeds to FIG. 9 based on the terminal information T1 to T7 stored in the ROM 41 in advance. The displayed screen is displayed on the display unit 44.

  On the screen shown in FIG. 9, all the terminal information T1 to T7 stored in the ROM 41 or the terminal information associated with the connecting flag among the terminal information T1 to T7 stored in the ROM 41 are displayed. It is displayed together with the icon described above. The items of the terminal information displayed here are the name of the terminal 3 registered by the user, the manufacturer name of the terminal 3, and the IP address of the terminal 3.

  The CPU 40 causes the terminal information to be displayed on the screen shown in FIG. 9 to be associated with the identification information generated by the group identification information generation unit 40B in the “registered terminal” column, Those not associated with the identification information are displayed in the “unregistered terminal” column. At this point, there is no terminal information associated with the identification information. Therefore, all the terminal information T1 to T7 are displayed in the “unregistered terminal” column.

  In the screen illustrated in FIG. 9, when the user selects a region in which terminal information and an icon of each of the terminal 3D, the terminal 3E, and the terminal 3F are displayed by a touch operation, and touches “OK” in the upper right of the screen. Information specifying the terminal information T1 of the terminal 3D, the terminal information T2 of the terminal 3E, and the terminal information T3 of the terminal 3F is input to the CPU 40.

  In the CPU 40, when the group association processing unit 40C accepts this information, the terminal information T1, the terminal information T2, and the terminal information T3 are stored in the ROM 41 in association with the identification information G1, and the “registration” screen shown in FIG. The display unit 44 displays a screen X (not shown) to which the terminal information T1, the terminal information T2, and the terminal information T3 and the icon corresponding to the terminal information T1, the terminal information T2, and the terminal information T3 are added in the “completed terminal” column.

  When “Save” on the upper right of the screen X is touched, the CPU 40 returns to FIG. 10 based on the identification information G1 stored in the ROM 41 and the corresponding terminal information T1, terminal information T2, and terminal information T3. The displayed user list screen is displayed on the display unit 44.

  The screen shown in FIG. 10 includes a character "Eldest son" indicating the generated group identification information G1 and a character "3" indicating the total number of terminal information corresponding to the identification information G1. An area is displayed.

  Subsequently, when the (+) button at the lower right of the screen shown in FIG. 10 is touched by the user, the CPU 40 causes the display unit 44 to display the screen shown in FIG. Then, when the user inputs the character “second son” in the input area 80 on the screen shown in FIG. 8 and touches “Save” at the upper right of this screen, the input character information is input to the CPU 40. You. In the CPU 40, when accepting the character information, the group identification information generating unit 40B stores the character information in the ROM 41 as group identification information G2.

  After the character of “second son” is input in the input area 80 and “save” is touched, when the user touches the (+) button at the lower right of the screen shown in FIG. Based on the terminal information T1 to T7 stored in the table, a screen X1 (not shown) similar to the screen shown in FIG. 9 (the terminal information and icons of the terminals 3D to 3F in FIG. 9 are moved to the “registered terminal” column). Is displayed on the display unit 44.

  In this screen X1, an area in which the terminal information and the icons of the terminals 3A and 3B are displayed is selected by the user through a touch operation, and when "OK" is touched in the upper right of the screen, the terminal information T4 of the terminal 3A and the terminal 3A are displayed. Information specifying the terminal information T5 of the terminal 3B is input to the CPU 40.

  In the CPU 40, when the group association processing unit 40C accepts this information, the terminal information T4 and the terminal information T5 are stored in the ROM 41 in association with the identification information G2, and the “registered terminal” column of the screen shown in FIG. Then, the display unit 44 displays a screen X2 (not shown) to which terminal information T4 and terminal information T5 and an icon corresponding to the terminal information T4 and T5 are added.

  When “Save” on the upper right is touched on this screen X2, the CPU 40 displays the user list screen shown in FIG. 11 based on the identification information G2 stored in the ROM 41 and the corresponding terminal information T4 and terminal information T5. It is displayed on the display unit 44.

  The screen shown in FIG. 11 includes the above-described first area, characters “second son” indicating the identification information G2 of the group, and characters “2” indicating the total number of terminal information corresponding to the identification information G2. Are displayed.

  By the operation so far, the two group management information shown in FIG. 12 is stored in the ROM 41 of the terminal 3G. The operation up to this point is the operation of grouping the terminals 3 on a user basis.

  In the following, the operation when setting the connection restriction collectively for the identification information of each group and the operation when setting the connection restriction individually for each terminal information will be described.

(Connection restriction setting operation: batch setting)
When the user touches the first area including the character of “eldest son” on the screen shown in FIG. 11, the CPU 40 determines based on the identification information G1 stored in the ROM 41 and the corresponding terminal information T1 to T3. Then, the user details screen shown in FIG. 13 is displayed.

  The user details screen shown in FIG. 13 includes a “connection restriction batch setting” button for collectively setting connection restrictions for the terminal 3 specified by all terminal information corresponding to the identification information G1. ing. When the “connection restriction batch setting” button is touched by the user, the CPU 40 overlays a setting screen 140 for selecting a connection restriction setting pattern on the user detail screen shown in FIG. 13 (see FIG. 14). ).

  The setting screen 140 allows the user to select one of seven items: unset, unrestricted, connection prohibited, 7-12 o'clock, 12-18 o'clock, 18-23 o'clock, and 23-7 o'clock. Radio button is displayed.

  “Not set” means that setting of connection restriction to the network 1 is not performed. “No restriction” means that connection to the network 1 is not restricted. "Connection prohibition" means that connection to the network 1 is restricted indefinitely. “Prohibited during XX to YY” means that connection to the network 1 is restricted during the period from XX to YY.

  When one of these seven items is selected by a user's touch operation and “OK” at the lower right of the setting screen 140 is touched, the connection restriction for the identification information G1 specified by the user is set. Is input to the CPU 40.

  In the CPU 40, when the first connection restriction setting unit 40D accepts the first request, the first item selected by the above radio button for each of the terminal information T1 to T3 associated with the identification information G1. Is stored in the ROM 41 in association with the first setting information of the connection restriction according to

  For example, when “unset” or “do not restrict” is selected, information indicating that connection restriction is not performed is stored in the ROM 41 as first setting information. When “connection prohibition” is selected, information indicating that connection restriction is performed indefinitely is stored in the ROM 41 as first setting information. If “Prohibit when XX to YY” is selected, information indicating that connection restriction is to be performed only during the designated time zone is stored in the ROM 41 as first setting information.

  For example, as shown in FIG. 14, when OK is touched in a state in which the item of “18:00 to 23:00 prohibited” is selected, the first connection restriction setting unit 40 </ b> D identifies the identification information stored in the ROM 41. First setting information L1 indicating that connection restriction is to be performed during the period from 18:00 to 23:00 is stored in association with each of the terminal information T1 to T3 of G1. As a result, as shown in FIG. 15, three connection management information is generated.

  When OK is touched on the setting screen 140 shown in FIG. 14, the CPU 40 changes the user detailed screen shown in FIG. 13 to the user detailed screen shown in FIG. 16 based on the information shown in FIG. Update to detail screen. In the user detail screen shown in FIG. 16, an icon of "18:00 to 23:00 prohibited" indicating the first setting information L1 is additionally displayed in each display area of the terminal information T1 to T3 corresponding to the identification information G1. I have.

(Setting operation of connection restriction: Individual setting)
When the user touches the display area of the terminal information T1 of the terminal 3D on the user detail screen shown in FIG. 16, information specifying the terminal information T1 is input to the CPU 40. Upon receiving this information, the CPU 40 causes the display unit 44 to display a terminal detail screen shown in FIG. 17 based on the terminal information T1 and the first setting information L1 associated therewith.

  The terminal detail screen illustrated in FIG. 17 includes an area where characters of “connection restriction 18:00 to 23:00 prohibited” based on the first setting information L1 associated with the terminal information T1 of the terminal 3D are displayed. When this area is touched by the user, the CPU 40 causes the setting screen 140 to be overlaid on the terminal detail screen shown in FIG. 17, as shown in FIG.

  On the screen shown in FIG. 18, for example, when OK is touched in a state where the item of “prohibition of connection” is selected, a second request for setting a connection restriction on the terminal information T1 specified by the user is issued. It is input to the CPU 40.

  When accepting this second request, the second connection restriction setting unit 40E converts the first setting information L1 corresponding to the terminal information T1 shown in FIG. To the setting information L3. That is, the association between the terminal information T1 and the first setting information L1 is released, and the terminal information T1 is associated with the second setting information L3. As a result, the management information is updated to the information shown in FIG.

  As described above, when OK is touched on the setting screen 140 shown in FIG. 18 and the management information is updated, the CPU 40 displays the information shown in FIG. 16 based on the information shown in FIG. The user details screen is updated to the user details screen shown in FIG. In the user details screen shown in FIG. 20, an icon of “connection prohibition” indicating the second setting information L3 is displayed in the display area of the terminal information T1 corresponding to the identification information G1.

(Group move operation of terminal)
In the connection management application, the group to which the terminal 3 belongs can be changed to another group without releasing the group (deleting the identification information from the ROM 41). Hereinafter, an operation in a case where the identification information of the group to which the terminal 3F belongs is changed from the identification information G1 to the identification information G2 from the state in which the two group management information illustrated in FIG. 19 are generated will be described.

  When the user touches the second area including the character “second son” on the user list screen illustrated in FIG. 11 displayed after the information illustrated in FIG. 19 is generated, the CPU 40 determines the identification stored in the ROM 41. The user detail screen shown in FIG. 21 is displayed based on the information G2 and the corresponding terminal information T4 and T5.

  Next, when the user touches the (+) button at the lower right of the screen shown in FIG. 21, the CPU 40 causes the screen shown in FIG. 22 to be displayed based on the terminal information T1 to T7 stored in the ROM 41. Is displayed on the display unit 44. On the screen shown in FIG. 22, the terminal information excluding the terminal information T4 and T5 corresponding to the identification information G2 is displayed separately for an unregistered terminal and a registered terminal.

  In the screen shown in FIG. 22, when the user touches the area where the terminal information T3 of the terminal 3F is displayed and touches "OK" at the upper right of the screen, a request to change the group for the terminal information T3 of the terminal 3F is made. Is input to the CPU 40.

  In the CPU 40, when accepting this request, the group association processing unit 40C cancels the association between the identification information G1 and the terminal information T3, and stores the terminal information T3 in the ROM 41 in association with the identification information G2. As a result, the two group management information stored in the ROM 41 are updated from the state shown in FIG. 19 to the one shown in FIG. As shown in FIG. 23, when the association between the identification information G1 and the terminal information T3 is released, the association between the terminal information T3 and the first setting information L1 is also released. That is, the terminal information T3 associated with the identification information G2 is not associated with the setting information.

  When the group management information is updated as shown in FIG. 23, the CPU 40 updates the user details screen shown in FIG. 21 to the user details screen shown in FIG. 24 based on the updated group management information. . On the user details screen shown in FIG. 24, terminal information T3 of the terminal 3F and an icon corresponding thereto are additionally displayed.

(Setting operation of connection restriction: Individual setting)
The individual setting of the connection restriction for arbitrary terminal information described with reference to FIGS. 17 to 19 can be performed even when the terminal information is not associated with the group identification information. The CPU 40 checks the terminal information of the terminal registered in the relay device 2 acquired from the relay device 2 when the connection management application is activated, and displays new terminal information on the display unit 44 when new terminal information is added. , A new terminal may be added.
Alternatively, when a new terminal is registered in the relay device 2, the relay device 2 notifies the terminal 3G that executes the connection management application, and the CPU 41 of the terminal 3G receives a new notification when receiving the notification. The notification may be performed by recognizing that the terminal information has been added.

  Further, the individual setting of connection restriction for arbitrary terminal information described with reference to FIGS. 17 to 19 can be performed even in a state where the terminal information is not associated with the first setting information. For example, when the user touches an area of the terminal 3D where the terminal information is displayed on the user detail screen shown in FIG. 13, information specifying the terminal information T1 is input to the CPU 40. Upon receiving this information, the CPU 40 causes the display unit 44 to display a terminal detail screen shown in FIG. 25 based on the terminal information T1.

  In the state shown in FIG. 13, the setting information is not associated with the terminal information T1 of the terminal 3D. For this reason, the terminal detail screen shown in FIG. 25 includes an area in which the characters “connection restriction not set” are displayed. When this area is touched by the user, the CPU 40 overlays the setting screen 140 on the terminal detail screen shown in FIG. 25, as shown in FIG.

  If OK is touched on the screen shown in FIG. 26 while, for example, the item of “prohibition of connection” is selected, a second request for setting a connection restriction for the terminal information T1 specified by the user is issued It is input to the CPU 40.

  When accepting this second request, the second connection restriction setting unit 40E associates the terminal information T1 shown in FIG. 12 with the second setting information L3 indicating that connection restriction is to be performed indefinitely. Remember. As a result, the management information is updated from the state shown in FIG. 12 to that shown in FIG.

  When the group management information is updated as shown in FIG. 27, the CPU 40 updates the user details screen shown in FIG. 13 to the user details screen shown in FIG. 28 based on the updated group management information. . In the user details screen shown in FIG. 28, an icon of “connection prohibition” indicating the second setting information L3 is additionally displayed in the display area of the terminal information T1 corresponding to the identification information G1.

(Batch setting of connection restriction when terminals with connection restriction set and terminals not set together)
When the “connection restriction collective setting” button is touched on the user details screen shown in FIG. 28, the CPU 40 causes a setting screen 140 for selecting a connection restriction setting pattern to be displayed on the user details screen shown in FIG. . Then, for example, when OK is touched in a state where the item “18:00 to 23:00 prohibited” is selected on the setting screen 140, the first connection setting for the identification information G1 specified by the user is performed. Is input to the CPU 40.

  In the CPU 40, when the first connection restriction setting unit 40D accepts the first request, the second setting information L3 is already associated with the terminal information T1 to T3 associated with the identification information G1. The terminal information T1 and T2 except for the terminal information T3 are stored in the ROM 41 in association with the first setting information L1 of the connection restriction corresponding to the item selected on the setting screen 140. As a result, the management information shown in FIG. 27 is updated to management information (see FIG. 29) in which two pieces of connection management information are added.

(Effects of the embodiment)
As described above, according to the connection management application, a large number of terminals 3 can be divided into groups for each user, and connection restrictions can be collectively set for the terminals 3 belonging to each group. Therefore, even in a situation where the number of terminals 3 connected to the relay device 2 increases and the number of users of the terminals 3 increases, the connection restriction can be easily set.

  In addition, the relay device 2 restricts the connection of the terminal 3 to the network 1 based on the connection management information in which the terminal information is associated with the setting information of the connection restriction. As described above, the relay device 2 does not perform the process conscious of the group. For this reason, the above-described effects can be obtained without making a significant improvement in the firmware of the relay device 2, and the cost for constructing the LAN 100 can be suppressed. Further, the user of the terminal 3G can obtain the above-mentioned convenience while using the existing relay device 2.

  Further, according to the connection management application, the connection restriction can be individually set for the terminal information corresponding to the group identification information without releasing the association between the identification information and the terminal information. For this reason, connection restrictions can be flexibly and easily set for a plurality of terminals 3 belonging to a group, and convenience can be improved.

Further, according to the connection management application, the terminal information associated with the group identification information can be released from the association with the identification information and newly associated with the identification information of another group. As described above, the group to which the terminal 3 belongs can be changed while maintaining the once generated identification information, and the work required to change the group of the terminal 3 can be simplified.
For example, from the viewpoint of network management in a company or the like, in order to change the group to which a terminal belongs, the work of releasing the association between the terminal and the group. , And the task of linking the selected terminal to the destination group are required sequentially. According to the connection management app, the terminal was assigned to a group without performing the work of unlinking the terminal from the group and the work of selecting this terminal after leaving this terminal as not belonging to any group. As it is, the terminal can be easily moved to another group.

  At home, for example, a situation may occur in which the user who mainly uses the terminal 3F is to be changed from the eldest son to the second son. According to the connection management application, it is possible to cope with the above-described situation only by changing the correspondence destination of the terminal information of the terminal 3F while maintaining the eldest son group and the second son group, thereby improving convenience. it can.

  Further, according to the connection management application, in a state where terminal information associated with setting information and terminal information not associated with setting information are associated with certain identification information, When the first request for setting the connection restriction is made, the first setting information corresponding to the first request is stored in association with only the terminal information to which the setting information is not associated. Is done. As described above, since the setting information is not changed for the terminal 3 for which connection restriction has been individually performed, the connection restriction for the plurality of terminals 3 belonging to the group can be flexibly and easily set, and the convenience is improved. Can be enhanced.

  Hereinafter, a modified example of the operation of the CPU 40 of the terminal 3G that has executed the connection management application will be described.

(First modification)
When the “connection restriction collective setting” button is touched on the user details screen shown in FIG. 28, the CPU 40 causes a setting screen 140 for selecting a connection restriction setting pattern to be displayed on the user details screen shown in FIG. . Then, for example, when OK is touched in a state where the item “18:00 to 23:00 prohibited” is selected on the setting screen 140, the first connection setting for the identification information G1 specified by the user is performed. Is input to the CPU 40.

  In the CPU 40, when the first connection restriction setting unit 40D accepts the first request, the terminal information already associated with the setting information among the terminal information T1 to T3 associated with the identification information G1. Is determined. If the first connection restriction setting unit 40D determines that there is terminal information to which the setting information is already associated, the first connection restriction setting unit 40D notifies the presence of the terminal information to which the setting information is already associated. The screen 150 is overlaid on the user detail screen shown in FIG. 28 (see FIG. 30).

  The screen 150 displays a message such as "There are terminals for which connection restrictions are individually set. Cancel this setting and perform batch setting again".

  According to the operation of the first modification, it is possible to prevent another connection restriction from being erroneously set for the terminal 3 to which connection restriction is individually performed.

(Second modification)
On the screen 150 described above, for example, as shown in FIG. 31, there are “terminals for which connection restrictions have been individually set. A confirmation message such as "?" May be displayed.

  In this case, when the user performs an operation to continue the setting (OK touch operation) after understanding the message, a first request is input to the CPU 40. When accepting the first request, the first connection restriction setting unit 40D responds to the terminal information T1 to T3 associated with the identification information G1 according to the item selected on the setting screen 140. The first setting information L1 of the connection restriction is stored in the ROM 41 in association with the first setting information L1. As a result, the second setting information L3 of the management information shown in FIG. 27 is changed to the first setting information L1, and updated to the management information shown in FIG.

  According to the operation of the second modified example, it is possible to prevent another connection restriction from being erroneously set for the terminal 3 that has individually performed the connection restriction. Further, it is possible to cope with a case where connection setting is to be collectively performed ignoring the setting information of the terminal 3 for which connection has been individually restricted, and convenience can be improved.

(Third modification)
Here, a modified example of the above-described terminal group movement operation will be described.

  In the screen shown in FIG. 22, when the user touches the area where the terminal information T3 of the terminal 3F is displayed and touches "OK" at the upper right of the screen, a request to change the group for the terminal information T3 of the terminal 3F is made. Is input to the CPU 40.

  In the CPU 40, when accepting this request, the group association processing unit 40C cancels the association between the identification information G1 and the terminal information T3, and stores the terminal information T3 in the ROM 41 in association with the identification information G2. Furthermore, when associating the terminal information T3 with the identification information G2, the group association processing unit 40C changes the name of the terminal 3 included in the terminal information T3 based on the identification information G2.

  For example, when associating the terminal information T3 with the identification information G2 (“second son”), the group association processing unit 40C sets “the eldest personal computer, which is the name of the terminal 3F included in the terminal information T3, to the identification information G2. Based on this, change to "second son's computer".

  When the group management information is updated in this way, the CPU 40 updates the user details screen shown in FIG. 21 to the user details screen shown in FIG. 32 based on the updated group management information. On the user details screen shown in FIG. 32, terminal information T3 of the terminal 3F and an icon corresponding thereto are additionally displayed. The name included in the terminal information T3 has been changed as described above. Therefore, on the user detail screen shown in FIG. 32, a state is established in which a link between the name of the group and the name of the terminal 3 belonging to this group is established.

  In this way, even when the group is changed, the correspondence between the group name and the terminal name is maintained, so that the user does not feel uncomfortable. For example, if an operation of manually changing the name in the terminal information of the terminal 3F on the user details screen shown in FIG. 24 is performed, it is possible to associate the group name with the terminal name. According to the third modification, this operation can be eliminated, and the convenience can be improved.

(Fourth modification)
Here, it is assumed that management information as shown in FIG. 6 is generated. From this state, when a request to change the group to which the terminal 3F specified by the terminal information T3 belongs is made, the association between the identification information G1 and the terminal information T3 is released by the group association processing unit 40C, and the identification is performed. The terminal information T3 is associated with the information G2. In the fourth modification, the CPU 40 further associates the terminal information T3 associated with the identification information G2 with the other terminal information T4 and T5 corresponding to the identification information G2 by the above processing. The first setting information L2 is automatically associated and stored. As a result, the management information shown in FIG. 6 is updated to the management information shown in FIG.

  According to the fourth modification, even when the affiliation of the terminal 3 is changed, the connection restriction for the terminal 3 can be automatically set. It is considered that the terminal 3 belonging to the same group often restricts connection with the same content. For this reason, in this way, of the work of changing the affiliation of the terminal 3 and the work of individually restricting the connection to the terminal 3 after the change, the latter work can be eliminated, and the convenience can be reduced. Can be enhanced.

(Other modifications)
The management information generated by the connection management application described so far is stored in the terminal 3G that executes the connection management application, but is not limited thereto. For example, the CPU 40 of the terminal 3G may transmit the management information stored in the ROM 41 to the relay device 2 and store the management information in the ROM 21 of the relay device 2. In this case, when the connection management application is started, the CPU 40 of the terminal 3G acquires management information from the relay device 2 and stores it in the ROM 41 or the like. Then, when the management information is changed, the CPU 40 may transmit the changed management information to the relay device 2 to update the management information stored in the relay device 2.

  By storing the management information in the relay device 2 in this manner, when there are a plurality of terminals 3 that execute the connection management application (for example, when the father and the mother each manage the connection restriction using the terminal 3). However, the management information can be easily shared by a plurality of terminals 3.

  Further, the CPU 40 of the terminal 3G may store the latest management information stored in the ROM 41 in a device accessible from the terminal 3G via the network 1. Alternatively, the CPU 40 of the terminal 3G may store the latest management information stored in the ROM 41 in a device accessible via a mobile communication network directly connectable to the terminal 3G.

  In this case, when the connection management application is started, the CPU 40 of the terminal 3G acquires management information from the above device and stores it in the ROM 41 or the like. Then, when a change is made to the management information, the CPU 40 may transmit the changed management information to the device and update the management information stored in the device.

  As described above, since the management information is stored in a device accessible from the terminal 3G via the network, the management information can be easily transmitted to the plurality of terminals 3 even when there are a plurality of terminals 3 executing the connection management application. Can be shared to Further, even when the user of the terminal 3G is out of the office, the connection restriction of the terminal 3 connected to the relay device 2 can be set.

  A server is mentioned as an example of the above device. When storing the management information in the server, the CPU 40 of the terminal 3 that has executed the connection management application stores the identification number of the relay device 2 in the ROM 41, and stores the management information generated as described above and the identification information. The number is associated with the number and transmitted to the server for storage.

  Then, when the connection management application is activated, the CPU 40 accesses the relay device 2 and acquires the identification number of the relay device 2. Further, the CPU 40 accesses the server at this start-up or at an arbitrary timing, and checks whether or not the management information corresponding to the acquired identification information of the relay device 2 exists in the server.

  Here, if the server has management information corresponding to the identification information of the relay device 2, the CPU 40 determines the creation date and time of the management information or the data version of the management information (the version of the management information). When the check is made, if the management information does not exist in the ROM 41, the management information is acquired and stored in the ROM 41.

  Further, even when the management information is stored in the ROM 41, if the creation date and time or the version information is older than that of the management information stored in the server, the CPU 40 obtains the management information from the server and stores the management information in the ROM 41. Remember.

  Thereby, for example, the management information generated by the connection management application installed on the terminal 3G can be obtained by the server by the connection management application installed on the terminal 3C different from the terminal 3G, and the management information can be shared. It can be done easily.

  Note that the relay device 2 is a router, and a repeater (a device that relays communication between the relay device 2 and the terminal 3 in order to extend the communicable range of the relay device 2) exists in the router. If the relay apparatus 2 has a function of executing the same connection restriction, the CPU 40 of the terminal 3G may transmit the connection management information to each of the router and the repeater.

  The CPU 40 of the terminal 3G may read out the ROM 41 connection management information if it is stored and transmit it to the repeater, or may transmit a changed part of the read connection management information to the repeater. Good. As a result, not only the setting becomes easy, but also a different connection restriction can be set only in the communicable range extended by the repeater, and more flexible setting becomes possible.

  The restriction on the connection to the network 1 in the above description is not limited to the period during which the network 1 can be connected (such as a time zone or a day of the week), but may be a restriction on the connection destination of a server or the like connected to the network 1.

  The connection management application described above is stored in a non-transitory computer-readable storage medium that can read the program. Such a “computer-readable storage medium” includes, for example, an optical medium such as a CD-ROM (Compact Disc-ROM) and a magnetic storage medium such as a USB memory or a memory card. Further, such a program can be provided to the terminal 3 by downloading via the Internet.

  As described above, the following items are disclosed in this specification.

(1)
A management device for managing connection restriction to the network for the terminal performed by a relay device that relays communication between a network and a terminal,
A group identification information generation unit that generates identification information of a group for each user of the terminal,
The terminal information of the terminal connected to the relay device is obtained, the identification information specified by the user of the management device, and a group association processing unit that associates the terminal information specified by the user. ,
When accepting a first request for setting the connection restriction for the identification information specified by the user, for the terminal information associated with the identification information, the first setting information of the connection restriction, A first connection limit setting unit to associate with,
Transmitting to the relay device the terminal information in which the first setting information and the first setting information are associated with each other, and to the network based on the first setting information for the terminal specified by the terminal information; And a connection restriction execution control unit that causes the relay device to execute the connection restriction.

(2)
The management device according to (1),
When accepting a second request for setting the connection restriction for the terminal information specified by the user, a second connection restriction setting unit that associates the second setting information for the connection restriction with the terminal information. In addition,
The connection restriction execution control unit transmits the terminal information associated with the second setting information and the second setting information to the relay device, for the terminal identified by the terminal information, A management device for restricting connection to the network based on second setting information;

(3)
(2) The management device according to (2),
The second connection restriction setting unit, when the first setting information is associated with the terminal information specified by the user, the correspondence between the terminal information and the first setting information A management device that removes attachments.

(4)
The management device according to (2) or (3),
The first connection restriction setting unit, among the terminal information corresponding to the identification information specified by the user, to other than the terminal information associated with the second setting information, A management device that associates the first setting information.

(5)
The management device according to (2) or (3),
The first connection restriction setting unit, when the terminal information corresponding to the second setting information is present in the terminal information corresponding to the identification information specified by the user, Is a management device that reports the existence of the terminal information.

(6)
The management device according to any one of (2) to (5),
When accepting a request to change the group for the terminal information to which the identification information of the group is associated, the group association processing unit releases the association between the terminal information and the identification information, and A management device for associating the terminal information with the identification information of the group to be changed.

(7)
(6) The management device according to (6),
A name registration unit that receives an input of the name of the terminal and registers the terminal information of the terminal including the information of the name,
The management device, wherein, when associating the terminal information with the identification information of the group to be changed, the group association processing unit changes the name included in the terminal information based on the identification information.

(8)
The management device according to any one of (2) to (7),
A storage unit that stores management information including information that associates the identification information with the terminal information, and information that associates the terminal information with the first setting information or the second setting information. Management device.

(9)
The management device according to any one of (2) to (7),
The relay device stores information in which the identification information is associated with the terminal information and management information including information in which the terminal information is associated with the first setting information or the second setting information. Management device.

(10)
The management device according to any one of (2) to (7),
Information that associates the identification information and the terminal information, and management information that includes information that associates the terminal information with the first setting information or the second setting information is a network from the management device. Management device stored on a device accessible via the Internet.

(11)
A management method for managing connection restriction to the network for the terminal performed by a relay device that relays communication between the network and the terminal,
A group identification information generation step of generating identification information of a group for each user of the terminal,
Acquiring terminal information of the terminal connected to the relay device, the identification information specified by a user of the management device, and a group association processing step of associating the terminal information specified by the user; ,
When accepting a first request for setting the connection restriction for the identification information specified by the user, for the terminal information associated with the identification information, the first setting information of the connection restriction, A first connection limit setting step to be associated;
Transmitting to the relay device the terminal information in which the first setting information and the first setting information are associated with each other, and to the network based on the first setting information for the terminal specified by the terminal information; And a connection restriction execution control step of causing the relay device to execute the connection restriction.

(12)
A management program for managing connection restriction to the network for the terminal performed by a relay device that relays communication between a network and a terminal,
A group identification information generation step of generating identification information of a group for each user of the terminal,
Acquiring terminal information of the terminal connected to the relay device, the identification information specified by a user of the management device, and a group association processing step of associating the terminal information specified by the user; ,
When accepting a first request for setting the connection restriction for the identification information specified by the user, for the terminal information associated with the identification information, the first setting information of the connection restriction, A first connection limit setting step to be associated;
Transmitting to the relay device the terminal information in which the first setting information and the first setting information are associated with each other, and to the network based on the first setting information for the terminal specified by the terminal information; And a connection restriction execution control step of causing the relay device to execute the connection restriction described above.

100 LAN
1 Network 2 Relay Device 3A-3G Terminal 20 CPU
21 ROM
22 RAM
23 first communication module 24 second communication module 40 CPU
41 ROM
42 RAM
43 communication module 44 display unit 45 operation unit 40A name registration unit 40B group identification information generation unit 40C group association processing unit 40D first connection restriction setting unit 40E second connection restriction setting unit 40F connection restriction execution control unit 80 input area 140, 150 setting screen

Claims (12)

A management device for managing connection restriction to the network for the terminal performed by a relay device that relays communication between a network and a terminal,
A group identification information generation unit that generates identification information of a group for each user of the terminal,
The terminal information of the terminal connected to the relay device is obtained, the identification information specified by the user of the management device, and a group association processing unit that associates the terminal information specified by the user. ,
When accepting a first request for setting the connection restriction for the identification information specified by the user, for the terminal information associated with the identification information, the first setting information of the connection restriction, A first connection limit setting unit to associate with,
Transmitting to the relay device the terminal information in which the first setting information and the first setting information are associated with each other, and to the network based on the first setting information for the terminal specified by the terminal information; And a connection restriction execution control unit that causes the relay device to execute the connection restriction. The management device according to claim 1,
When accepting a second request for setting the connection restriction for the terminal information specified by the user, a second connection restriction setting unit that associates the second setting information for the connection restriction with the terminal information. In addition,
The connection restriction execution control unit transmits the terminal information associated with the second setting information and the second setting information to the relay device, for the terminal identified by the terminal information, A management device for restricting connection to the network based on second setting information; The management device according to claim 2, wherein
The second connection restriction setting unit, when the first setting information is associated with the terminal information specified by the user, the correspondence between the terminal information and the first setting information A management device that removes attachments. The management device according to claim 2 or 3,
The first connection restriction setting unit, among the terminal information corresponding to the identification information specified by the user, to other than the terminal information associated with the second setting information, A management device that associates the first setting information. The management device according to claim 2 or 3,
The first connection restriction setting unit, when the terminal information corresponding to the second setting information is present in the terminal information corresponding to the identification information specified by the user, Is a management device that reports the existence of the terminal information. The management device according to any one of claims 2 to 5, wherein
When accepting a request to change the group for the terminal information to which the identification information of the group is associated, the group association processing unit releases the association between the terminal information and the identification information, and A management device for associating the terminal information with the identification information of the group to be changed. The management device according to claim 6, wherein
A name registration unit that receives an input of the name of the terminal and registers the terminal information of the terminal including the information of the name,
The management device, wherein, when associating the terminal information with the identification information of the group to be changed, the group association processing unit changes the name included in the terminal information based on the identification information. The management device according to any one of claims 2 to 7, wherein
A storage unit that stores management information including information that associates the identification information with the terminal information, and information that associates the terminal information with the first setting information or the second setting information. Management device. The management device according to any one of claims 2 to 7, wherein
The relay device stores information in which the identification information is associated with the terminal information and management information including information in which the terminal information is associated with the first setting information or the second setting information. Management device. The management device according to any one of claims 2 to 7, wherein
Information that associates the identification information and the terminal information, and management information that includes information that associates the terminal information with the first setting information or the second setting information is a network from the management device. Management device stored on a device accessible via the Internet. A management method for managing connection restriction to the network for the terminal performed by a relay device that relays communication between the network and the terminal,
A group identification information generation step of generating identification information of a group for each user of the terminal,
Acquiring terminal information of the terminal connected to the relay device, the identification information specified by a user of the management device, and a group association processing step of associating the terminal information specified by the user; ,
When accepting a first request for setting the connection restriction for the identification information specified by the user, for the terminal information associated with the identification information, the first setting information of the connection restriction, A first connection limit setting step to be associated;
Transmitting to the relay device the terminal information in which the first setting information and the first setting information are associated with each other, and to the network based on the first setting information for the terminal specified by the terminal information; And a connection restriction execution control step of causing the relay device to execute the connection restriction. A management program for managing connection restriction to the network for the terminal performed by a relay device that relays communication between a network and a terminal,
A group identification information generation step of generating identification information of a group for each user of the terminal,
Acquiring terminal information of the terminal connected to the relay device, the identification information specified by a user of the management device, and a group association processing step of associating the terminal information specified by the user; ,
When accepting a first request for setting the connection restriction for the identification information specified by the user, for the terminal information associated with the identification information, the first setting information of the connection restriction, A first connection limit setting step to be associated;
Transmitting to the relay device the terminal information in which the first setting information and the first setting information are associated with each other, and to the network based on the first setting information for the terminal specified by the terminal information; And a connection restriction execution control step of causing the relay device to execute the connection restriction described above.

Images