JP2022172572A - Information processing device, information processing method, and program - Google Patents

Abstract

To estimate unknown location information of an IP address.SOLUTION: An information processing device according to one aspect of the present invention includes: an acquisition unit that obtains a plurality of access logs each including both an IP address allocated to an access point device and user identification information for identifying a user who has accessed the access point device; a first extraction unit that extracts a first access log including a first IP address the location information of which is unknown from the plurality of access logs; a second extraction unit that extracts a second access log including both a second IP address the location information of which is known and user identification information that is the same as the user identification information included in the first access log from the plurality of access logs; and an estimation unit that estimates the location information of the first IP address included in the first access log based on the location information of the second IP address included in the second access log.SELECTED DRAWING: Figure 2

Description

The present invention relates to an information processing device, an information processing method, and a program.

Access point devices have been installed in various facilities both indoors and outdoors. The access point device can perform wireless communication with an information processing terminal such as a smart phone, and provide the information processing terminal with connection to a communication network through IP (Internet Protocol) communication. In a wireless communication system, an EMS server or the like may assign an IP (Internet Protocol) address to an access point device. For example, Patent Literature 1 describes managing location information of access point devices in a database as a method of managing such access point devices.

JP 2016-21661 A

Location information associated with an IP address assigned to an access point device is expected to be used in various ways. However, if the data that can be collected from the access point device is limited, it is difficult for anyone other than the person who manages the assignment of IP addresses to the access point device to grasp the location information of the IP address.

SUMMARY OF THE INVENTION Accordingly, it is an object of the present invention to provide an information processing apparatus, an information processing method, and a program capable of estimating location information of an IP address whose location information is unknown.

An information processing device according to an aspect of the present invention acquires a plurality of access logs including an IP address assigned to an access point device and user identification information for identifying a user who accessed the access point device. a first extraction unit for extracting a first access log containing a first IP address whose location information is unknown from the plurality of access logs; a second IP address whose location information is known from the plurality of access logs; a second extraction unit for extracting a second access log containing the same user identification information as the user identification information contained in the first access log; and based on the location information of the second IP address contained in the second access log, an estimating unit for estimating location information of the first IP address included in the first access log.

According to this aspect, from a plurality of access logs including a first access log including a first IP address whose location information is unknown and a second access log including a second IP address whose location information is known, the first access A second access log containing the same user identification information as the user identification information contained in the log is extracted, and then included in the first access log based on the location information of the second IP address contained in the second access log. Location information for the first IP address is estimated. Therefore, it is possible to estimate the location information of an IP address whose location information is unknown.

According to the present invention, it is possible to provide an information processing device, an information processing method, and a program capable of estimating location information of an IP address whose location information is unknown.

It is a schematic diagram showing an example of composition of communications system 1 concerning this embodiment. It is a schematic diagram showing an example of functional composition of management server device 10 concerning this embodiment. FIG. 4 is a diagram showing an example of the data structure of an IP address management table; FIG. FIG. 10 illustrates an example data structure of an access log table; 4 is an operation flow diagram showing an example of operation processing by the communication system 1 according to the present embodiment; FIG.

Preferred embodiments of the present invention will be described with reference to the accompanying drawings. It should be noted that, in each figure, the same reference numerals have the same or similar configurations.

(1) Overview An overview of a communication system 1 according to this embodiment will be described with reference to FIG. FIG. 1 is a schematic diagram showing an example of the configuration of a communication system 1 according to this embodiment. The communication system 1 includes, for example, a management server device 10, a plurality of access point devices 20, at least one user terminal 30, and at least one service providing server device 40. In the present disclosure, symbols such as “20a” and “20b” may be attached to distinguish each access point device 20. FIG. Also, the communication system 1 may include a plurality of user terminals 30 .

The management server device 10, the access point device 20, and the service providing server device 40 are connected to a communication network N such as the Internet so that they can exchange information with each other. The access point device 20 is configured by one or more computers, for example, and can function as an access point that provides wireless communication such as Wi-Fi within a predetermined access range. The access point device 20 is assigned an IP (Internet Protocol) address from an EMS (Element Management System) server (not shown) or the like via the communication network N, for example.

The user terminal 30 is an information processing terminal such as a smart phone, a tablet terminal, or a PC used by the user. The service providing server device 40 is a server device for providing predetermined services including various information and benefits to each user via the user terminal 30 or the like. The number of service providing server devices 40 included in the communication system 1 is not limited to one, and may be plural. The user terminal 30 can access the service providing server device 40 after connecting to the communication network N via the access point device 20 within the access range provided by any access point device 20 . When accessed by the user terminal 30 , the access point device 20 relays data generated according to a protocol such as HTTP between the user terminal 30 and the service providing server device 40 . Thereby, a predetermined service is provided to the user terminal 30 from the service providing server device 40 via the communication network N and the access point device 20 . Furthermore, the user moves while carrying the user terminal 30 . Thereby, the user terminal 30 moves inside and outside the access area of each access point device 20 .

The management server device 10 is a server device for managing various kinds of information such as location information regarding IP addresses assigned to the access point devices 20 . The management server device 10 collects access logs from the service providing server device 40 . Here, the access log includes, for example, a first access log that does not contain position information and a second access log that contains position information. In other words, the first access log includes IP addresses with unknown location information (first IP addresses), and the second access log includes IP addresses with known location information (second IP addresses). The management server device 10 extracts a second access log containing at least the same user ID as the user ID contained in the first access log, and based on the location information of the second IP address contained in the second access log, Estimate the location information of the first IP address included in the first access log. Specifically, for example, the average value of the location information of the second IP addresses is calculated as the estimated value of the location information of the first IP addresses. A condition may be further imposed that the extracted second IP address includes time information whose difference from the time information of the first IP address is within a predetermined threshold. As described above, in the communication system 1 according to the present embodiment, the management server device 10 can estimate the location information of an IP address whose location information is unknown.

(2) Configuration of Management Server Apparatus 10 FIG. 2 is a schematic diagram showing an example of the functional configuration of the management server apparatus 10 according to this embodiment. The management server device 10 is an example of an information processing device, and includes, for example, one or more computers, and includes a communication unit 11, an operation unit 12, an output unit 13, a storage unit 14, and a processing unit 15. and

The communication unit 11 includes a communication interface circuit and connects the management server device 10 to the communication network N. FIG. The communication unit 11 transmits the data supplied from the processing unit 15 via the communication network N to the access point 20, the user terminal 30, the service providing server device 40, and the like. The communication unit 11 also supplies the processing unit 15 with data received from each access point 20 , the user terminal 30 , the service providing server device 40 and the like via the communication network N.

The operation unit 12 may be any device that can operate the management server device 10, such as a touch panel or key buttons. The administrator of the management server device 10 can use the operation unit 12 to input letters, numbers, symbols, and the like. The operation unit 12 generates a signal corresponding to the operation when operated by the administrator. The generated signal is supplied to the processing unit 15 as an instruction from the administrator.

The output unit 13 includes, for example, a display unit and an audio output unit. The display unit may be any device as long as it can display video, images, and the like, such as a liquid crystal display and an organic EL (Electro-Luminescence) display. The display unit displays a video corresponding to the video data supplied from the processing unit 15, an image corresponding to the image data, and the like. Also, the audio output unit is configured as a speaker, for example, and outputs audio based on the audio data supplied from the processing unit 15 .

The storage unit 14 is configured by, for example, a semiconductor memory device, a magnetic disk device, an optical disk device, or the like. The storage unit 14 stores an operating system program, a driver program, an application program, data, etc. used for processing in the processing unit 15 . For example, the storage unit 14 stores, as driver programs, an input device driver program for controlling the operation unit 12, an output device driver program for controlling the output unit 13, and the like. The storage unit 14 also stores programs for managing the management server device 10 as application programs. Various programs may be installed in the storage section 14 from a computer-readable portable recording medium such as CD-ROM, DVD-ROM, etc. using a known setup program or the like. The storage unit 14 may also store an IP address management table, an access log, and the like.

<IP address management table>
FIG. 3 is a diagram showing an example of the data structure of an IP address management table. The IP address management table is a table for managing various information on IP addresses. As shown in FIG. 3, the IP address management table includes, for example, "IP address", "location information information", and "others".

An IP address assigned to each access point device 20 by, for example, an EMS server (not shown) is registered in the "IP address" field.

For example, IP address location information and a category related to the location information are registered in the “information about location information”. The location information of the IP address is the location information of the IP address estimated based on the access log. Categories and their classification criteria may be arbitrarily set by the administrator. Table 1 shows an example of categories and classification criteria.

In the example shown in Table 1, the IP address categories include "first category", "second category", and "third category". In addition, in the example shown in Table 1, the classification criterion includes "differences in the average value of location information for each day". The “difference in average location information value for each day” indicates the range of deviation in the average location information value for each day for access logs collected by the access log collection unit 151 (to be described later). Here, the positional information average value is an average value obtained by weighting the positional information contained in the access log by the number of access logs. The maximum value of the difference between the average position information values for any two days is registered in the “difference in average position information values for each day”. Note that the classification criteria are not limited to those described above, and may be one or more other conditions.

Any information related to the IP address is registered in "Others". The arbitrary information may include, for example, the MAC address and BSSID of the access point device 20 to which the IP address is assigned. Note that the data structure of the IP address management table shown in FIG. 3 is an example, and other data such as an arbitrary address (regardless of whether it is a physical address or a logical address) in the access point device 20 is stored in the IP address management table. may be included.

<Access log table>
FIG. 4 is a diagram showing an example of the data structure of an access log table. Each record corresponds to one access log regarding access by the user terminal 30 to the access point device 20 . For example, the access log generated and stored by each service providing server device 40 is collected by the access log collecting unit 151 and then recorded in the access log table. As shown in FIG. 4, the access log table includes, for example, "access start time", "access end time", "user ID", "BSSID", "IP address", and "location information". including. "Log No." shown in FIG. 4 is a column for specifying an access log provided for convenience of explanation. sometimes referred to as

The "access start time" is an example of time information, and is information indicating the time (which may include the date) when access to the management server device 10, the access point device 20, the service providing server device 40, etc. is started. be. The "access end time" is another example of time information, and indicates the time (which may include the date) when access to the management server device 10, the access point device 20, the service providing server device 40, etc. ends. This is the information shown.

“User ID” is identification information of a user who uses the user terminal 30 that has accessed the service providing server device 40 by accessing the access point device 20 . The user ID is not particularly limited as long as it can be acquired by the management server device 10. For example, it may be a user ID set in any service provided by the service providing server device 40. FIG.

“BSSID” is a BSSID (Basic Service Set Identifier) assigned to the access point device 20 to be accessed. The access point device 20 , for example, transmits the BSSID previously stored in the access point device 20 to the service providing server device 40 .

“IP address” is the IP address assigned to the access point device 20 that is the access target. The access point device 20 stores, for example, an IP address assigned in advance by an EMS server or the like in advance, and transmits the IP address to the service providing server device 40 .

“Positional information” is positional information of the access point device 20 to be accessed. The format of the position information is not particularly limited, but may be, for example, longitude and latitude, building name, area name, address, and the like. The location information may be location information acquired by a location information acquisition function such as GPS that the user terminal 30 or the access point device 20 has, or may be location information stored in the access point device 20 in advance. The access point device 20 transmits the location information to the service providing server device 40, for example. When the service providing server device 40 and the management server device 10 cannot acquire the location information from the access point device 20, the service providing server device 40 and the management server device 10 refer to a predetermined table or the like to obtain the location information linked to the information such as the BSSID. may be included in the access log as the location information of the access point device 20 . In addition, in the "position information", for example, when the access log does not contain the position information, the service providing server device 40, the management server device 10, etc. register information indicating that the position information is unknown. good too. In the example shown in FIG. 4, "unknown" is registered in the "location information" associated with the IP address "A003" as information indicating that the IP address is unknown. Note that the data structure of the access log table shown in FIG. 4 is an example, and other data may be included in the access log table.

Refer to FIG. 2 again. The processing unit 15 includes one or more processors and their peripheral circuits. The processing unit 15 comprehensively controls the overall operation of the management server device 10, and is, for example, a CPU. The processing unit 15 controls the communication unit 11, the output unit 13, etc. so that the various processes of the management server device 10 are executed in an appropriate procedure based on the programs stored in the storage unit 14, the operation of the operation unit 12, and the like. controls the behavior of The processing unit 15 executes processing based on programs (operating system programs, driver programs, application programs, etc.) stored in the storage unit 14 . Also, the processing unit 15 can execute a plurality of programs (application programs, etc.) in parallel.

The processing unit 15 may include an access log collection unit 151, an IP address classification unit 152, a first extraction unit 153, a second extraction unit 154, and a location information estimation unit 155, for example.

The access log collection unit 151, for example, collects access logs from each service providing server device 40 and updates the access log table. The collection of access logs by the access log collection unit 151 may be executed at any timing. may be executed in response to performing an operation for executing access log collection via the operation unit 12 .

The IP address classification unit 152 classifies, for example, IP addresses included in a plurality of access logs into preset categories. For example, the IP address classification unit 152 classifies the IP addresses included in the collected access logs into the categories of Table 1 based on the classification criteria of Table 1 described above.

The first extraction unit 153, for example, extracts an access log (first access log) including an IP address (first IP address) whose position information is unknown from a plurality of access logs. The number of access logs (first access log) to be extracted may be one or more.

The second extraction unit 154, for example, extracts an access log (second access log) that includes an IP address (second IP address) whose location information is known and has a predetermined relationship with the first access log, from a plurality of access logs. Extract. The number of access logs (second access logs) to be extracted may be one or more. The second access log is an access log that includes location information and has a user ID common to any of the first access logs (including the same user ID as the user ID included in the first access log). you can The second access log further includes time information whose time information is close to the first access log by a predetermined value (including time information whose difference from the time information included in the first access log is within a predetermined threshold value) access It can be a log. The predetermined threshold is not particularly limited, but may be 10 minutes, for example.

The location information estimation unit 155 estimates the location information of the first IP address included in the first access log, for example, based on the location information of the second IP address included in the second access log. For example, the location information estimation unit 155 may calculate an average value of the location information of the second IP addresses as the estimated value of the location information of the first IP addresses. Here, the average value of the location information of the second IP addresses may be a sum of values obtained by multiplying each location information of the second IP addresses by a predetermined weighting factor. The predetermined weighting factor may be a ratio of the number of second access logs containing each piece of location information to the total number of second access logs extracted by the second extraction unit 154 . Also, the predetermined weighting factor may be corrected based on the difference in access time between the first access log and the second access log. When the access time includes the access start time and the access end time, the difference in access time may be the interval from the access end time of the earlier access log to the access start time of the later access log. The value of the weighting factor may be set so as to increase as the access time difference decreases.

Note that the processing unit 15 may have a function of providing an advertisement distribution service, a connection assistance function service to wireless communication such as Wi-Fi, and the like.

(3) Operation Processing FIG. 5 is an operation flow diagram showing an example of operation processing by the communication system 1 according to this embodiment.

( S<b>101 ) First, the access log collection unit 151 collects access logs from each service providing server device 40 . The access log includes, for example, the IP address assigned to the access point device 20, the BSSID of the access point device 20, and the user ID obtained from the user terminal 30. Additionally, the access log optionally includes location information. The collection of access logs by the access log collection unit 151 may be executed at any timing. may be executed in response to performing an operation for executing access log collection via the operation unit 12 . A collection period (for example, 90 days) may be provided for collection of access logs, and the access log collection unit 151 may collect only access logs whose "access time" is included in the collection period. If there is information that is not included in the access log, the access log collection unit 151 may complement the information that is not included with information included in another access log having a common BSSID or the like. For example, if there is an access log that does not contain an IP address, the IP address of that access log may be complemented by the IP address of another access log with a common BSSID. Also, for example, if there is an access log that does not contain location information, the location information of the access log may be supplemented with the location information of another access log having a common BSSID.

(S102) Next, the IP address classification unit 152 classifies the IP addresses included in the collected access logs into preset categories. This is because even if the IP address is the same, the position information measured by the user terminal 30 may be out of sync. Therefore, it is possible to classify IP addresses into preset categories according to their accuracy so that highly accurate location information of IP addresses can be preferentially used when estimating location information, which will be described later. Specifically, for example, the IP address classification unit 152 classifies the IP addresses included in the collected access logs into the categories of Table 1 based on the classification criteria of Table 1 described above. IP address classification unit 152 records the classification result in the IP address management table stored in storage unit 14 . Note that the IP address classification unit 152 may classify the IP addresses included in the collected access logs into categories based on other classification criteria. Also, at this time, access logs in which the location information is greatly deviated may be regarded as outliers, and a fixed ratio may not be considered. By the above processing, it is possible to grasp the category of IP addresses included in the collected access log, and to distribute and collect information according to the category of IP addresses.

(S103) Next, the first extraction unit 153 extracts at least one access log including an IP address whose location information is unknown as a first access log from the collected access logs. Note that the first extraction unit 153 may set a predetermined condition for the access log to be extracted. The predetermined condition may be defined according to, for example, the "essential access period" described above. Specifically, for example, access by an arbitrary user ID once or more in the last 7 days, and access by an arbitrary user ID once or more in 3 days or more in the most recent 90 days, A condition may be provided.

For example, when the access log shown in FIG. 4 is collected by the access log collection unit 151, the location information for the IP address "A3" in the access logs 1, 5, and 6 are all "unknown". The unit 153 extracts these access logs 1, 5, and 6 as first access logs.

(S104) Next, for each of the extracted first access logs, the second extraction unit 154 includes the same user ID as the user ID included in the first access log among the access logs whose location information is known. The access log is extracted as a second access log. The number of second access logs that the second extraction unit 154 extracts for each first access log may be one or more. Furthermore, the second extraction unit 154 adds that the difference in access time between the first access log and the second access log is within a predetermined threshold value (for example, 10 minutes) as a condition for the second access log. good too. Note that if there are a plurality of access logs whose access time difference from the first access log is within a predetermined threshold, the access log containing time information immediately before or after the access time of the first access log is used as the second access log. It can also be used as a log.

For example, in the example shown in FIG. 4, for access log 1, which is the first access log, the location information is "L4" with known location information and the user ID is "U2", which is the same as the user ID of access log 1. is the second access log. Similarly, for access log 5, which is the first access log, access logs 2 and 10 are the second access logs, and for access log 6, which is the first access log, access log 3 is the second access log. Access log.

(S105) Next, the location information estimation unit 155 extracts the IP address (second IP address) included in the extracted first access log based on the location information of the IP address (second IP address) included in the extracted second access log. Estimate the location information of the first IP address). The estimated value of the location information of the first IP address may be, for example, the average value of the location information of the second IP address. Here, the average value of the location information of the second IP addresses may be a sum of values obtained by multiplying each location information of the second IP addresses by a predetermined weighting factor. The predetermined weighting factor may be a ratio of the number of second access logs containing each piece of location information to the total number of second access logs extracted by the second extraction unit 154 . Also, the predetermined weighting factor may be corrected based on the difference in access time between the first access log and the second access log. Specifically, the shorter the difference, the larger the value of the weighting factor.

Thereafter, the loop processing from steps S103 to S105 may be sequentially repeated for each other IP address whose location information is unknown. In this case, the position information estimation unit 155 may register the estimated value of the position information of the first IP address calculated in step S105 in the access log table. As a result, the first access log containing the first IP address whose position information is unknown is treated as the second access log containing the second IP address whose position information is known after the next loop processing.

The embodiments described above are for facilitating understanding of the present invention, and are not intended to limit and interpret the present invention. The present invention is not limited to the embodiments described above, and can be implemented in various other forms without departing from the scope of the present invention. Therefore, the above-described embodiment is merely an example in all respects, and should not be construed as limiting. For example, the processing steps described above can be arbitrarily changed in order or executed in parallel as long as there is no contradiction in the processing contents. Also, other steps may be added between each processing step. Further, a step described as one step may be divided into a plurality of steps and executed, and a step described as being divided into a plurality of steps may be grasped as one step.

Reference Signs List 1 communication system 10 management server device 11 communication unit 12 operation unit 13 output unit 14 storage unit 15 processing unit 151 access log collection unit 152 IP address classification unit 153 First extraction unit 154 Second extraction unit 155 Location information estimation unit 20 Access point device 30 User terminal 40 Service providing server device

Claims (7)

an acquisition unit for acquiring a plurality of access logs including an IP address assigned to the access point device and user identification information for identifying a user who accessed the access point device;
a first extraction unit for extracting a first access log including a first IP address whose location information is unknown from the plurality of access logs;
A second extraction unit for extracting, from the plurality of access logs, a second access log containing a second IP address whose location information is known and user identification information identical to user identification information included in the first access log. When,
an estimating unit that estimates location information of the first IP address included in the first access log based on location information of the second IP address included in the second access log. 2. The estimation unit calculates an average value of location information of the second IP addresses included in the second access log as an estimated location information value of the first IP addresses included in the first access log. The information processing device according to . The plurality of access logs further includes time information based on the time when the user accessed the access point device,
3. The second access log according to claim 1, wherein said second access log extracted by said second extraction unit further includes time information whose difference from time information included in said first access log is within a predetermined threshold. Information processing equipment. The second access log extracted by the second extraction unit further includes the time included in the first access log among the access logs including the same user identification information as the user identification information included in the first access log. 4. The information processing apparatus according to claim 3, wherein the access log includes time information immediately before or after the information. The information processing apparatus according to any one of claims 1 to 4, wherein said estimation unit includes an estimated value of location information of said first IP address included in said first access log in said first access log. the computer
obtaining a plurality of access logs including an IP address assigned to the access point device and user identification information for identifying a user who accessed the access point device;
extracting a first access log containing a first IP address whose location information is unknown from the plurality of access logs;
extracting from the plurality of access logs a second access log containing a second IP address whose location information is known and user identification information identical to the user identification information included in the first access log;
and estimating location information of the first IP address included in the first access log based on location information of the second IP address included in the second access log. the computer,
an acquisition unit for acquiring a plurality of access logs including an IP address assigned to the access point device and user identification information for identifying a user who accessed the access point device;
a first extraction unit for extracting a first access log including a first IP address whose location information is unknown from the plurality of access logs;
A second extraction unit for extracting, from the plurality of access logs, a second access log containing a second IP address whose location information is known and user identification information identical to user identification information included in the first access log. When,
A program for functioning as an estimating unit for estimating location information of the first IP address included in the first access log based on location information of the second IP address included in the second access log.

Images