JP3894758B2 - Remote management system for Internet connection server, initial setting server, host server, and Internet connection server - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an automatic connection server to the Internet and the like, and more particularly to an automatic connection server that can automatically return itself even if a software failure occurs.
[0002]
[Prior art]
In recent years, from small-scale network servers that use LANs with several PCs and dial-up connections to the Internet via ISDN, to medium- and large-scale network servers used as access servers for corporate networks and providers, Internet connection shared servers (called routers depending on the application) are widely used.
[0003]
Further, in a conventional home network or small-scale network, a dial-up method for connecting to a public line only when connecting to the Internet has been adopted. However, in recent years, the line usage fee has become cheaper, and there have been providers and line operators that provide services for connecting to the Internet at a fixed flat rate. As a result, an environment has been established that can always connect to the Internet even in a relatively small scale, such as a LAN in an individual home, a small office, or a condominium. Further, terminal devices using the Internet other than PCs have appeared, and servers for sharing a connection line constantly among a plurality of devices have been used even in homes and small offices.
[0004]
By the way, since the connection shared server is a device that connects the networks to each other, in order to connect the server to the Internet, it is necessary to first perform two procedures, that is, modem setting and server setting. First, in the modem setting, a setting for connecting to a public line network, an optical cable, a wireless line, CATV, or the like is required. Server settings require setting of a routing table, which is a correspondence table between network numbers and output destination ports. Furthermore, settings corresponding to an address translation function (NAT) and a filtering function for permitting / prohibiting passage of a specific packet are also required.
[0005]
Here, in a medium / large-scale network server, the network is often managed by a specialized person (network administrator) with a wealth of knowledge about the network, and various settings for the server are performed by this person. The network administrator is also responsible for maintaining the server after connection. In such an environment, if the connection server breaks down or a power failure occurs and connection to the Internet becomes impossible, the person in charge can quickly recover the connection. In addition, about hundreds of medium- and large-scale network servers are connected by using a dedicated line, and are directly connected without using a modem. Therefore, management is relatively easy.
[0006]
[Problems to be solved by the invention]
However, in an environment such as a personal home, a small office, or a LAN in a condominium, it is not easy to place a network administrator who sets up a shared connection server. Since the above-described setting work requires a certain level of expertise, it is difficult for general users, and it is difficult for an individual user to set a connection server. In recent years, some devices have been devised so that they can be set and operated using a Web browser, but this is not easy for general users. For the device provider side, it is very expensive to prepare an interface for operation / setting corresponding to each user level.
[0007]
Furthermore, even if it can be managed remotely by some method, managing many servers at the same time is due to the problem of software diversity (the combination of installed software and each version is innumerable). It was very difficult to realize, and as a result, the manager etc. handled each one individually. In order to maintain at least several thousand servers, it is necessary to safely automate the judgment and work of the administrator.
[0008]
In the future, it can be expected that new devices other than PCs will be connected to the Internet, including home appliances such as microwave ovens, refrigerators, and audio devices, and the services provided will be developed indefinitely. It is difficult to respond to these needs with a hardware type connection server that is widely spread from the viewpoint of flexibility. For this reason, the use of a software type connection shared server that realizes the functions of the hardware type connection server with a general OS such as Linux is also being studied. This software-type connection shared server is more flexible and rich in functions than hardware-type connection servers. However, when software failure occurs, complicated work is required. Recovery is not easy. In some cases, setting information for recovery may be lost by the user, and it is expected that it is difficult for the user to solve the problem.
[0009]
Furthermore, as the demand for a server for constant connection to the Internet spreads to the area of individual users, how to perform the setting becomes a problem. In addition, when the connection between the server and the Internet becomes impossible due to a failure, the recovery must be performed reliably. However, the problem is that the recovery work cannot be easily performed at the individual user level.
[0010]
Further, when the connection server is always connected to the Internet, a firewall is required to prevent unauthorized access from the outside. Usually, security is performed by using the filtering function of the server as a simple firewall, but in the future, the always-on type of usage will become popular among individual users and will be adopted by large companies. It is expected that full-scale firewall settings will be required. However, this firewall configuration requires more specialized knowledge, and the firewall must be upgraded regularly for evolving defenses.
[0011]
It is technically impossible for an individual user to reset the connection server for each version upgrade and to perform daily management of the connection server. In addition, when new functions such as scheduler settings and Internet-controlled TV settings are added, the settings must be changed. If the server settings fail when adding or updating new functions, It is difficult for general users to cope. Since such resetting and function change are complicated, some substitution system is desired.
[0012]
The present invention has been made to solve the technical problems as described above, and can set the connection server for connecting to the Internet with high reliability. It is an object of the present invention to provide an automatic connection server that can be easily restored even when it cannot be provided.
[0013]
In addition, once a connection server is connected to the Internet, the server is managed via the Internet, so that software upgrades and changes can be made even if the individual user does not perform server settings. An object of the present invention is to provide a remote management system for connection servers.
[0014]
It is another object of the present invention to provide a system in which user-specific information is stored in a host server, synchronized by various timing methods, and can be returned to the previous state at any time.
[0015]
Still another object of the present invention is to provide a system that enables centralized management and automatic operation of a large number of servers by automating the management of user servers and limiting the configuration of software installed on the servers to a management pattern. .
[0016]
[Means for Solving the Problems]
In order to achieve such an object, according to the present invention, the user can automatically connect to the Internet by starting up the setting for connecting to the Internet without considering it, and there is a problem with the software in the Internet connection server for some reason. Even if it occurs, it provides an Internet connection server that can automatically return itself.
[0017]
That is, the present invention can connect any terminal not connected to the Internet to the network, Between the internet provider and the terminal An Internet connection server for automatically connecting the terminal to the Internet, a connection start means for starting a connection with the initial setting server based on preset initial connection information, and a connection is established by the connection start means A setting information acquisition unit that acquires setting information necessary for the main connection from the started initial setting server, a disconnection unit that disconnects the connection started by the connection start unit, and a connection based on the acquired setting information. It is characterized by comprising the present connection start means for starting.
[0018]
In addition, it is further provided with a download means for downloading the upgraded software from the host server in which the main connection is started by the main connection start means, and operates by the software downloaded by the download means. By automatically linking software upgrades and service contents with the host server, automatic operation can be efficiently performed.
[0019]
From another viewpoint, the Internet connection server of the present invention is stored in a nonvolatile memory in which information for connecting to the Internet for the first time is stored as preset initial information, and in the nonvolatile memory. And a writable storage medium for storing network setting information obtained from a server connected to the Internet based on the information.
[0020]
Here, if the nonvolatile memory stores information for executing a temporary connection to the Internet provider for initial setting, the setting for connecting to the Internet can be surely performed. This is preferable because it can be expected to be reset and can be easily re-set even if the connection fails due to a failure or the like.
[0021]
Further, the present invention can be understood as an initial setting server connected at the time of initial setting such as initial setting or resetting from trouble. This initial setting server can connect any terminal that is not connected to the Internet to the network. Between the internet provider and the terminal The setting information holding means for holding the network setting information, which is unique information for each Internet connection server for automatically connecting the terminal to the Internet, and the Internet connection server that has made the Internet connection request A user confirmation authentication means for confirming whether or not the user is a user, and when the user confirmation authentication means determines that the user is a legitimate user, the setting information holding means for the Internet connection server that requested the Internet connection Network setting information transmitting means for transmitting the network setting information of the held Internet connection server.
[0022]
Furthermore, the present invention can be understood as a host server that manages the Internet connection server after this setting is made. That is, the present invention can connect any terminal not connected to the Internet to the network. Between the internet provider and the terminal A host server for remotely managing an internet connection server for automatically connecting the terminal to the internet, , About internet connection of device Software information holding means for holding software necessary for operation and update information of the software; Always connected after initial setup Confirmation request receiving means for receiving a version confirmation request from a predetermined Internet connection server, and confirming whether or not the Internet connection server that has received the version confirmation request by this confirmation request receiving means is a contracted authorized user. User confirmation authentication means, version information transmission means for sending the latest software version information held in the software information holding means to the Internet connection server for which a version confirmation request has been made by the confirmation request receiving means, and this Internet connection Software providing means for providing predetermined software held in the software information holding means based on a request from the server is provided.
[0023]
From another point of view, the host server to which the present invention is applied has a contract between a connection request receiving means for receiving a connection request from a predetermined Internet connection server and a predetermined Internet connection server having a connection request. A user authentication confirming means for confirming whether the user is a legitimate user, and a transmitting means for transmitting service configuration information of the Internet connection server when the user authentication confirmation means confirms that the user is a legitimate user. It is characterized by providing.
[0024]
On the other hand, the present invention can be understood as a remote management system for an Internet connection server. The remote management system for this Internet connection server can connect any terminal that is not connected to the Internet to the network. Between the internet provider and the terminal An Internet connection server for automatically connecting the terminal to the Internet, an initial setting Internet provider having an access point connected to the Internet connection server based on preset initial connection information, and the Internet connection server And an initial setting server that holds network setting information necessary to perform the connection, and this initial setting Internet provider performs connection authentication of the Internet connection server that has requested connection, and if it can be authenticated, connects to the Internet, This initial setting server performs user confirmation authentication of whether or not the Internet connection server that requested the connection is a contracted server, and if it can be authenticated, it passes through the initial setting Internet provider to the Internet connection server. Network It is characterized by providing a click configuration information.
[0025]
Here, after the network setting information is obtained from the initial setting server, the Internet connection server temporarily disconnects the connection with the initial setting Internet provider and requests a new connection based on the network setting information. Since the Internet connection server can be set by the initial setting server managed by the operating company, it is possible to reduce hardware and software settings of the server (Internet connection server) by the user. Become.
[0026]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.
FIG. 1 is a diagram showing an overall configuration of an automatic connection shared server remote management system to which the present embodiment is applied. In this system, for example, an automatic connection shared server 10 which is a software type automatic connection shared server is provided at the center of a small-scale network such as a home network. The automatic connection shared server 10 includes household appliances such as a personal computer (PC) 31 and an internet device 32 (for example, a television (TV), a refrigerator, a cooler) and the like that can be connected to the internet 44 via the LAN port 11. Etc.) are connected via LAN. The automatic connection shared server 10 is connected to the public line network 41 via the modem 33 from the line port 12.
[0027]
The public line network 41 includes an Internet provider (ISP) 42 with which the user of the automatic connection shared server 10 has a connection contract, and an initial setting ISP 43 which is an Internet provider with a connection contract for initial setting. Is connected. The ISP 42 is an Internet provider for this connection, and the initial setting ISP 43 is a temporary setting Internet provider. An Internet 44 is connected to the ISP 42 and the initial setting ISP 43, and an initial setting server 50 that performs initial setting of the automatic connection shared server 10 and a host server 60 that performs maintenance of the automatic connection shared server 10 are connected to the Internet 44. Has been. The initial setting server 50 and the host server 60 can be configured by the same server as a management server (host side server).
[0028]
The public line network 41 may be in the form of a subscriber telephone network, ISDN, optical cable, wireless line, CATV, or the like. Further, the automatic connection shared server 10 and the Internet 44 constitute a dial-up connection environment or a constant connection environment, and any of these may be used. However, in the following description, a constant connection environment is assumed after the initial setting of the automatic connection shared server 10.
[0029]
First, the contents of the automatic connection shared server 10 shown in FIG. 1 will be described.
FIG. 2 is a diagram showing a configuration of the automatic connection shared server 10. The automatic connection shared server 10 includes the LAN port 11 and the line port 12 described above. In order to always connect the CPU 13 that controls the entire apparatus, the PROM 14 that stores the operation program of the CPU 13, the RAM 15 that is a temporary storage area used by various programs executed by the CPU 13, and the automatic connection shared server 10. A flash memory 16 for storing necessary programs and setting information and an HDD (Hard Disk Drive) 17 for temporarily storing various information as auxiliary storage are provided.
[0030]
The PROM 14 is non-volatile so that the stored contents are not erased even when the power is turned off, and has a low failure rate without mechanical operation such as rotation, so that it is important as the operation of the automatic connection shared server 10. Programs and information, that is, an OS for processing all operations, initial connection information, and the like are stored. The initial connection information stored in the PROM 14 functions effectively in the recovery process in the event of an abnormality in addition to the startup process in the automatic connection shared server 10.
[0031]
First, the contents stored in the read-only storage medium will be described.
FIG. 3 is a diagram showing the contents stored in the PROM 14 which is a read-only storage medium. The PROM 14 has an OS storage area 21. Examples of the OS stored in the OS storage area 21 include Linux. Also, an installation management program to be described later is stored. Further, the PROM 14 has an initial connection storage area 22, which is the minimum program necessary for connecting to the Internet 44 as a program that operates first when the automatic connection shared server 10 is turned on and started up. Boot program, connection protocol, etc.). Further, the PROM 14 has an initial connection information storage area 23 for storing information (domain name, ID number, password, service level, etc.) necessary for the automatic connection shared server 10 to connect to the initial setting ISP 43 for the first time. Thus, information unique to each automatic connection shared server 10 is distributed.
[0032]
The OS, program, unique information, etc. stored in the OS storage area 21, initial connection storage area 22, and initial connection information storage area 23 of the PROM 14 are stored when the automatic connection shared server 10 is shipped. Due to the characteristics of the nonvolatile memory, it is configured so that it cannot be erased or rewritten by a normal method. However, it is possible to substitute the flash memory 16 or the like by configuring the software so that it is not easily erased.
[0033]
The RAM 15 of the automatic connection shared server 10 uses the volatile nature of erasing its contents when the power is turned off, sequentially stores signals, and is used as a temporary storage area used by programs stored in the flash memory 16 and the PROM 14. Has been. Various programs of the automatic connection shared server 10 are executed in this memory space.
[0034]
In the flash memory 16 of the automatic connection shared server 10, there is a program and setting information necessary for always connecting the automatic connection shared server 10 by using the characteristic that contents stored by an external voltage can be written and deleted. It is remembered. In the flash memory 16, after starting the automatic connection shared server 10, information and programs necessary for this connection can be read from the initial setting server 50 and stored. After the continuous connection, the program stored in the flash memory 16 can be rewritten or added to a new version by connecting to the host server 60 as necessary.
[0035]
The HDD 17 of the automatic connection shared server 10 has the property that it stores signals by mechanical operation and can rewrite the stored contents by external instructions as with the flash memory 16. Therefore, instead of the flash memory 16 or together with the flash memory 16, it can function to store information of the ISP 42 taken in via the initial setting ISP 43. It can also be used for the cache function.
[0036]
It is sufficient that either the flash memory 16 or the HDD 17 is selectively provided, and the HDD 17 can play the same role as the flash memory 16. When both are provided, the HDD 17 is used as a supplement to the capacity of the flash memory 16.
[0037]
In addition, by installing a portable media read / write device such as a CD-ROM in the automatic connection shared server 10, it is possible to reduce network traffic caused by downloading a large amount of software and reduce the time required for software updates. can do. When the user inserts the CD-ROM into the automatic connection shared server 10, the installation management program stored in the OS storage area 21 in the PROM 14 in the automatic connection shared server 10 checks the contents of the CD-ROM. This installation management program starts connection to the host server 60. The host server 60 starts a falsification check program installed in the automatic connection shared server 10, converts the contents of the CD-ROM into a numerical value, and calculates a regular CD-ROM value registered in advance in the host server 60. Make sure it is the same. This is an operation performed to prevent an unauthorized program from being installed from an unauthorized CD-ROM. If the calculated values are different, it is determined that the CD-ROM is not a regular CD-ROM, and the CD-ROM is ejected. When the host server 60 is recognized as a regular CD-ROM (when the calculated value of the CD-ROM matches the calculated value registered in the host server 60), the host server 60 provides the service of the user registered in the host server 60. Based on the configuration, new service installation and software UPDATE are executed.
[0038]
Next, contents stored in the writable storage medium will be described.
FIG. 4 is a diagram showing the contents stored in the writable storage medium (flash memory 16 and HDD 17) of the automatic connection shared server 10. Here, an OS 80 made of, for example, Linux (Linux), a version check program (VCP) 81 for checking and updating the software version, and the automatic connection shared server 10 from the host server 60 are required as basic software in normal operation. A service configuration program (SCP) 82 for receiving service information and rewriting the information, and a network configuration program (NCP) 83 for establishing and setting a network are stored.
[0039]
In addition, the flash memory 16 and the HDD 17 temporarily store a firewall 84 that protects the internal network from external attacks and unauthorized access, a falsification check program 85 that is a program for checking falsification, and once accessed Internet content. A cache management program 86 for managing the cache stored in the cache is provided. Furthermore, an IP routing program 87 that executes a router function, an Internet connection program 88 that connects to the Internet 44, and ISP connection information cache data 89 that is connection information to the ISP 42 are provided.
[0040]
For example, various programs (80 to 88) except for the ISP connection information cache data 89 can be stored in the flash memory 16 or the HDD 17 of the automatic connection shared server 10 at the initial stage of shipping the automatic connection shared server 10. The ISP connection information cache data 89 is acquired from the initial setting server 50 and stored at the temporary connection stage. However, after the use, if a program is lost due to some abnormality in the flash memory 16 or the HDD 17, each program can be downloaded from the initial setting server 50 or the host server 60 via the Internet 44 and reconfigured. It is.
[0041]
In this embodiment, in the initial connection, the automatic connection shared server 10 is temporarily connected to the initial setting server 50 via the initial setting ISP 43 and the Internet 44, and the automatic connection shared server 10 and the modem 33 are initially set. ing. Next, the connection between the modem 33 and the public line network 41 is temporarily disconnected by the automatic connection shared server 10, and the modem 33 and the ISP 42 are fully connected with new connection information after the connection is restarted. . After the continuous connection, the automatic connection shared server 10 and the host server 60 are connected via the Internet 44, and the host server 60 remotely manages the automatic connection shared server 10 as necessary.
[0042]
Next, the initial setting server 50 shown in FIG. 1 will be described.
FIG. 5 is a diagram showing the configuration of the initial setting server 50. The initial setting server 50 includes an OS 51 that is basic software, a user server authentication program 52 that is a program for confirming whether or not the automatic connection shared server 10 is contracted with the operating company at the time of initial setting, and the Internet 44. Before connection, the user server setting information acquisition program 53, which is a program for storing individual setting information necessary for the automatic connection shared server 10, and the automatic connection shared server acquired by the user server setting information acquisition program 53 An automatic connection shared server management table 55 that stores setting information for different connections for every 10 is provided.
[0043]
FIG. 6 is a diagram illustrating an example of information stored in the automatic connection shared server management table 55 of the initial setting server 50. In the automatic connection shared server management table 55 of the initial setting server 50, various unique setting information different for each automatic connection shared server 10 is stored. For example, as shown in FIG. 6, MAC (Media Access Control) address, IP (Internet Protocol) address, domain, VPN (Virtual Private Network), global IP, and other information are held. These pieces of setting information differ depending on each automatic connection shared server 10 and are identified by a MAC address or the like that each automatic connection shared server 10 has uniquely.
[0044]
Next, the host server 60 shown in FIG. 1 will be described.
The host server 60 is performing maintenance of the automatic connection shared server 10, software necessary for the operation of the automatic connection shared server 10, its update information, importance, compatibility information between various software, hardware and software compatibility information Etc. are stored. On the host server 60 side, such software and programs are updated as needed, and the latest version is prepared and can be supplied to the automatic connection shared server 10 as appropriate.
[0045]
FIG. 7 is a diagram showing the configuration of the host server 60. In addition to the OS 61 that is the basic software, the host server 60 includes a software update management program 62 that is a program for registering new software when it comes out, and the addition, change, and deletion of data in the installation pattern. An installation pattern management program 63, an update execution determination program 64 for managing the importance of software and performing an update if the importance is high, and a user server authentication program 65 for performing connection authentication based on the MAC address and password are provided. .
[0046]
In the host server 60, for example, an automatic connection shared server management table 66 for managing user information such as version management information of software installed by the user, software storing the latest software management information, software importance, and the like. Various data such as update information 67, an installation pattern management table 68 storing software installation patterns, and a software library 69 storing software information for downloading are stored in a storage medium.
[0047]
8A to 8E are diagrams showing examples of various information stored in the host server 60. FIG. The installed software version management information shown in FIG. 8 (a) is information stored in the automatic connection shared server management table 66 shown in FIG. 7, and each automatic connection shared server 10 has Pattern_ID, and install pattern management. Linked to the table 68, the version information of each software is managed for each automatic connection shared server 10 by the MAC address. In the present embodiment, the program installed in each automatic connection shared server 10 is patterned by this Pattern_ID.
[0048]
The latest software management information shown in FIG. 8B and the verified software patch management information shown in FIG. 8C are stored in the software update information 67 shown in FIG. In this verified software patch management information, the importance level is managed. For example, if the importance level is 5, the update is performed, and otherwise, the update is performed. In this way, it is possible to automate the determination of whether or not to update by digitizing.
[0049]
The verified software installation pattern shown in FIG. 8D is stored in the installation pattern management table 68 shown in FIG. This installation pattern management table 68 indicates that there are a finite number of combinations of software versions installed in each automatic connection shared server 10. Further, if only the patterns strictly verified on the management side are prepared, an update program is prepared for each pattern by the update program management table as shown in FIG. It can be safely automated. In the Update program management table shown in FIG. 8E, the Update program is shown for each of the pattern IDs 1 to 4, and the priority is shown for each.
[0050]
Next, the flow of the process of the automatic connection shared server remote management system to which this embodiment is applied will be described in detail.
First, before the user connects the automatic connection shared server 10 to the Internet 44, it is necessary to store the individual setting information necessary for the automatic connection shared server 10 used by the user in the initial setting server 50. . The information necessary for this connection is the MAC address, IP address, domain, VPN, global IP, and other information shown in FIG. 6, which are sent from the user or ISP 42 to the maintenance management company by fax, telephone, letter, etc. Keep informed. In the maintenance operating company, the setting information for main connection that differs for each automatic connection shared server 10 is stored in the initial setting server 50. By performing this preparation, the automatic connection described below becomes possible.
[0051]
FIG. 9 shows a basic processing procedure for automatically connecting the automatic connection shared server 10 to the Internet 44 and managing maintenance. First, in a system environment as shown in FIG. 1, when the LAN cable is connected and the automatic connection shared server 10 is turned on, the CPU 13 of the automatic connection shared server 10 starts the automatic connection program based on the initial setting. Then, connection (temporary connection) is made to the initial setting server 50 via the Internet 44 (step 100). Next, setting information is acquired from the initial setting server 50, and the network is reconfigured (step 200). Thereafter, the automatic connection shared server 10 temporarily disconnects from the network, reconnects to the network again with the new setting information, and connects (mainly connects) to the host server 60 (step 300).
[0052]
Next, the CPU 13 of the automatic connection shared server 10 starts the version check program (VCP81), and the automatic connection shared server 10 connects to the host server 60 and acquires the pattern ID of the software installed in its own machine. Then, the corresponding automatic update program is downloaded from the update program management table, and the automatic update program is started. The automatic update program performs update processing while downloading software, update patches, and the like as necessary (step 400). Further, the CPU 13 of the automatic connection shared server 10 activates a service configuration program (SCP 82), acquires service configuration information of the automatic connection shared server 10 from the host server 60 via the Internet 44, and activates each service ( Step 500). With this series of processing, the setting or updating of the automatic connection shared server 10 is completed, and the user can access the Internet 44 from the PC 31 or the like connected to the automatic connection shared server 10 (step 600).
[0053]
This access to the Internet 44 continues until the automatic connection shared server 10 is turned off (step 700), thereby forming a constant connection environment. If the power is not turned off, it is determined whether or not the set time has passed (step 800). If the set time has passed, that is, every set time (for example, 1 Once a day or once a week), the automatic connection shared server 10 reconnects to the host server 60, performs routine processing from step 400, and downloads the latest version of software and service configuration information. For this reason, the automatic connection shared server 10 can use the latest version of software even in an always-connected environment, and can take measures against firealls and viruses based on the latest information. In the case of an urgent situation in which an important security hole is detected, the host server 60 refers to the unique setting information of each automatic connection shared server 10 as shown in FIG. Connect to the shared server 10 and forcibly start the version check program (VCP81) in the automatic connection shared server 10.
[0054]
Next, a detailed processing procedure of each routine shown in FIG. 9 will be described with reference to FIGS.
FIG. 10 is a diagram showing a processing procedure in step 100 of FIG. When the automatic connection shared server 10 is powered on, the CPU 13 starts the OS stored in the OS storage area 21 of the PROM 14 (step 101), and the automatic connection shared server 10 operates with this OS. Next, the automatic connection program stored in the initial connection storage area 22 of the PROM 14 is automatically activated (step 102). In the initial connection information storage area 23 of the PROM 14, specific connection information (such as a telephone number or an IP address) of the operating company is stored in advance. Based on this hidden connection information, the automatic connection program connects to the access point (AP) of the initial setting ISP 43 that is a preset Internet provider (step 103). This access point (AP) belongs to a maintenance management company, and is not the Internet provider (ISP 42) with which the user of the automatic connection shared server 10 is contracted. This connection is a temporary connection for obtaining initial setting information.
[0055]
Next, connection authentication of the automatic connection shared server 10 is performed in the initial setting ISP 43, and if the authentication is successful, connection to the Internet 44 is permitted (step 104). This authentication is performed by using a password automatic generation program stored in the initial connection information storage area 23 of the PROM 14 (a password obtained by encrypting a value based on an encryption key in the host server 60 from its own MAC address), This is done by sending the MAC address to the initial setting ISP 43. Thereby, when the automatic connection shared server 10 is shipped from the factory, a unified program may be described in the PROM 14, and it is not necessary to record a unique password for each automatic connection shared server 10.
[0056]
After the automatic connection shared server 10 is connected to the Internet 44, the automatic connection program starts connection with the initial setting server 50 (step 105). In this connection, user confirmation authentication is performed in the initial setting server 50 in order to confirm whether or not the automatic connection shared server 10 is contracted with the operating company. This user confirmation authentication is performed by the MAC address, user ID, password, and the like stored in the initial connection information storage area 23 of the PROM 14 of the automatic connection shared server 10 and transmitted from the automatic connection shared server 10. If the initial setting server 50 authenticates with the automatic connection shared server 10 which is a legitimate user, the initial setting server 50 is connected (step 106). Through the above processing, the automatic connection shared server 10 can be connected to the initial setting server 50 via the Internet 44.
[0057]
FIG. 11 is a diagram showing a processing procedure in step 200 of FIG. When the Internet connection between the automatic connection shared server 10 and the initial setting server 50 is completed in step 100, the network configuration program (NCP83) of the automatic connection shared server 10 is activated, and the automatic connection shared server 10 is connected to the initial setting server 50. A request for required setting information is output (step 201). Then, in response to the request, the initial setting server 50 transmits new setting information specified to the automatic connection shared server 10 (step 202). This new setting information is initially set as information for each automatic connection shared server 10 by a method such as telephone, FAX, E-mail, Web page (CGI Form) from the user or ISP 42 in advance in the connection preparation stage described above. This is the content stored in the server 50. The new setting information is shown in FIG. 6, and the initial setting server 50 calls the setting information necessary for the automatic connection shared server 10 in the corresponding storage area by the user confirmation authentication. The transmitted new setting information is stored in the flash memory 16 or HDD 17 in the automatic connection shared server 10 (step 203).
[0058]
FIG. 12 is a diagram showing a processing procedure in step 300 of FIG. When the storage of the setting information is completed, the automatic connection shared server 10 temporarily disconnects the connection with the initial setting ISP 43 and ends the temporary connection with the Internet 44 (step 301). Thereafter, the automatic connection program in the automatic connection shared server 10 is restarted, and connection with the Internet 44 is started with the rewritten new setting information (step 302). At this time, the access point (AP) of the ISP 42, which is the Internet provider with which the automatic connection shared server 10 is contracted, is selected by the new setting information. The ISP 42 performs connection authentication of the automatic connection shared server 10 for which a connection request has been made, and if it has been authenticated, connects to the Internet 44 (step 303). This connection authentication is performed using new setting information, for example, using an IP address, a MAC address, and a password. After this, the main connection is established and the automatic connection shared server 10 is continuously connected to the ISP 42 which is a dedicated Internet provider in the provider company with which the contract is made. The subsequent connections are always connected environments, which continue until the automatic connection shared server 10 is powered off.
[0059]
When the automatic connection shared server 10 is connected to the Internet 44 via the ISP 42, the Internet connection program 88 first requests connection with the host server 60 (step 304). Then, in the host server 60, user confirmation authentication is performed in order to confirm whether or not the automatic connection shared server 10 that has requested connection is the automatic connection shared server 10 that has contracted with the operating company. The user confirmation authentication is performed using a MAC address, a user ID, a password, and the like, and can be opened to the host server 60 as long as it is an automatically connected shared server 10 of a user who has a regular contract. With the above processing, the connection between the automatic connection shared server 10 and the host server 60 is completed via the Internet 44 (step 305).
[0060]
The automatic connection shared server 10 connects to the host server 60, acquires the pattern ID of the software installed in its own machine, downloads the corresponding automatic update program from the update program management table, and starts the automatic update program To do. The automatic update program performs update processing while downloading software and update patches as necessary.
[0061]
FIG. 13 is a diagram showing a processing procedure in step 400 of FIG. When the connection between the automatic connection shared server 10 and the host server 60 is completed, the version check program (VCP 81) of the automatic connection shared server 10 is started (step 401). Then, the version check program (VCP 81) transmits a request for software version confirmation to the host server 60 via the Internet 44 (step 402). In the host server 60, user confirmation authentication of the contracted automatic connection shared server 10 is performed, and the connection with the automatic connection shared server 10 is permitted by the host server 60 (step 403).
[0062]
Thereafter, the host server 60 obtains the Pattern / ID of the software / hardware installed in the target automatic connection shared server 10 from the MAC address of the connected automatic connection shared server 10 (step 404). Then, the Update program management table is referred to from Pattern_ID, and the importance of update information to be applied to the pattern is confirmed (step 405). As a result, it is determined whether an updater is necessary (step 406). When an update is necessary, the version check program (VCP81) sends an automatic update script specified in the Update Program management table to the automatic connection shared server 10. Download and execute the script (step 407). The automatic update script downloads a new version of software from the host server 60 or the like as necessary (step 408). The VCP 81 updates the automatic connection shared server 10 to the latest state using the downloaded automatic update script (step 409). The automatic update script executed from the VCP 81 restarts the service as necessary and restarts the automatic connection shared server 10 (step 410).
[0063]
On the other hand, if no update is required in step 406, the version check is completed, and the automatic connection shared server 10 notifies the host server 60 that the preparation is complete (step 411). At this time, network information or the like may be notified so that the host server 60 can connect to the automatic connection shared server 10.
[0064]
As for the importance level and the determination of update execution, for example, when the importance level is 5, an immediate update is required. Further, for example, when the importance level is 4, an immediate update is necessary, and it can be performed when the network is busy and the utilization rate of the automatic connection shared server 10 at that time is not high. Further, for example, the importance level 3 may be implemented when the update is necessary, the network is not crowded, and the usage rate of the host server 60 and the automatic connection shared server 10 is low. In this way, it is possible to determine whether to perform the update according to the importance, and it is possible to make a determination by checking the importance index, the CPU usage rate at that time, the network usage rate, and the like.
[0065]
FIG. 14 is a diagram showing a processing procedure in step 500 of FIG. 9, which is a process for the maintenance work of the management company. When the main connection with the Internet 44 is completed, the service configuration program (SCP 82) of the automatic connection shared server 10 is started (Step 501), and connected to the host server 60 via the Internet 44 (Step 502). In the host server 60, user confirmation authentication is performed to confirm whether or not the automatic connection shared server 10 that has made the connection request is the automatic connection shared server 10 contracted with the operating company, and if the confirmation is possible, the connection is permitted. (Step 503). The service configuration program (SCP 82) receives the service configuration information required by the automatic connection shared server 10 from the host server 60, and rewrites the information in the flash memory 16 (step 504). Based on the rewritten service information, the automatic connection shared server 10 starts and operates each service with new contents (step 505).
[0066]
This service differs depending on each automatic connection shared server 10 and differs depending on the contract contents with the operating company. For example, content filtering software for blocking homepages that are not desired to be connected at schools, companies, homes, etc. Software server to enable simultaneous Internet connection on a personal computer, firewall to prevent unauthorized access from the outside, temporarily storing Internet content once accessed, and when there is a request to connect to the same content again There are a cache server that provides the accumulated data from the automatic connection shared server 10 to the PC 31, a virus check software for removing the virus when a new virus is found, and the like. The automatic connection shared server 10 stores the acquired service configuration program (SCP 82) in the flash memory 16, and starts each service in the automatic connection shared server 10 based on this program.
[0067]
The above processing is started as necessary when the system goes down due to a power failure or the like, and accesses the host server 60 from the automatic connection shared server 10 to perform initialization, update, update of service configuration information, and the like. be able to. Therefore, for example, even when the system is down, the setting information before the system down can be acquired from the host server 60 and returned only by turning the power on / off. When the automatic connection shared server 10 is restarted, all information necessary for the initial connection is stored in the PROM 14, and since the storage is a non-volatile character, it must be restarted as long as there is no physical destruction. Can do. In addition, in order to recover even if a failure occurs, it is possible to reduce the time and labor required for initial setting and the like.
[0068]
The rewriting and updating by the service configuration program (SCP 82) shown in step 500 can be performed at regular intervals. That is, in the always-connected environment of the automatic connection shared server 10 and the Internet 44, the host server 60 is accessed from the automatic connection shared server 10 side at regular intervals (for example, once a day or once a week) Software updates and service configuration information may be updated.
[0069]
Next, a case where the setting information of the automatic connection shared server 10 is changed from the user side will be described. It is assumed that the automatic connection shared server 10 and the Internet 44 are always connected. When the user wants to change the network configuration or service setting, the user logs in to the host server 60 from the browser on the PC 31. Then, create a mail account and change network configuration information. Note that the user may contact the maintenance management company that remotely manages the automatic connection shared server 10 by FAX or telephone, and the maintenance management company may set information corresponding to the host server 60.
[0070]
The host server 60 records the information designated by the user as described above in the automatic connection shared server management table 66 in the host server 60 as temporary registration information. The host server 60 accesses the automatic connection shared server 10 based on the temporary registration information and performs setting information change processing. If the setting change process is successful, the temporary registration information is re-recorded in the automatic connection shared server management table 66 as the main registration information. Even if this update process fails, the host server 60 can accurately grasp the status of the target automatic connection shared server 10, so that after the normal recovery process, the update process that failed first is continued. Can be done again. As described above, the setting change of the automatic connection shared server 10 is not directly performed by the user, but is performed by a maintenance operating company (for example, the host server 60).
[0071]
Next, a case where the setting information of the automatic connection shared server 10 is changed from the operating company side will be described. It is assumed that the automatic connection shared server 10 and the Internet 44 are always connected. When a new security hole is found in the firewall, a new service program is released, or a new virus is found, the target automatic connection server in the automatic connection shared server 10 managed by the host server 60 is selected. The version check program (VCP81) installed in the automatic connection shared server 10 is forcibly started by extracting and sequentially accessing. Accordingly, the automatic connection shared server 10 accesses the host server 60 and downloads the update program according to the processing procedure of step 400 in FIG.
[0072]
Next, the operation as a cache server in the automatic connection shared server 10 will be described. As shown in FIG. 2, the automatic connection shared server 10 includes a RAM 15 and an HDD 17. These function as a cache server, and the RAM 15 and the HDD 17 can temporarily store Internet content including streaming data once accessed by the PC 31 via the Internet 44. When the PC 31 requests to access the same content again, the content stored in the RAM 15 or the HDD 17 may be returned. The content stored in the original server and the content in the original server are automatically synchronized every specified period, or the synchronization check process is performed whenever there is a request from the PC 31 side. Can be delivered. By accumulating content in the cache, it is not necessary to communicate with the Internet 44 to request the same content, so that communication line consumption can be saved and content response time can be shortened. For example, the HDD 17 can be configured so that only cache data is stored, and programs important for the operation of the automatic connection shared server 10 are not stored. The data stored in the HDD 17 can be erased at any time.
[0073]
Next, a modification of the present embodiment will be described.
FIG. 15 is a diagram showing a first modification of the present embodiment. In this modification, the initial setting of the automatic connection shared server 10 is not connected to the Internet 44 but is performed by a dedicated initial setting server 72. An access point (AP) 71 is connected to the public network 41, and this AP 71 belongs to a maintenance company. An initial setting server 72 is directly connected to the AP 71 via a dedicated line or the like, and the initial setting server 72 has the same function as the initial setting server 50 shown in FIG.
[0074]
In this configuration, when the automatic connection shared server 10 is turned on, the automatic connection program stored in the PROM 14 is activated to connect the modem 33 to the AP 71 via the public line network 41. If connected to the AP 71, the initial setting server 72 authenticates the connection of the automatic connection shared server 10. If the automatic connection shared server 10 has a maintenance contract, the connection is permitted. Thereafter, the initial setting server 72 sends connection information for network connection stored in advance for the automatic connection shared server 10. The automatic connection shared server 10 stores the acquired new connection information in the flash memory 16, temporarily disconnects the connection between the automatic connection shared server 10 and the AP 71, and ends the temporary connection. Then, it starts up again, starts up the automatic connection shared server 10 with the new connection information, connects to the Internet provider (ISP 42), and starts this connection. The subsequent processing is the same as the processing after step 300 in FIG.
[0075]
FIG. 16 is a diagram showing a second modification example of the present embodiment. In this modification, the maintenance operating company also serves as the provider company of the always-on connection environment of the automatic connection shared server 10. In this case, the modem 33 is connected to the Internet provider (ISP 42) through the public line network 41, and the ISP 42 is connected to the initial setting / use host server 73 through the Internet 44. The initial setting shared host server 73 has the two capabilities of the host server 60 and the initial setting server 50 in FIG.
[0076]
In this second modification, when the automatic connection shared server 10 is turned on, it is connected to the access point of the ISP 42 by the automatic connection program, and the constant connection environment is set as it is. Next, the automatic connection shared server 10 issues a connection request to the initial setting shared host server 73, and the initial setting shared host server 73 stores the network setting information stored in advance in the automatic connection shared server 10 when the user confirmation authentication is completed. Send out, and then continue processing such as software upgrade. That is, the processing from step 100 to step 500 is performed consistently without temporarily interrupting the network connection in the flow in FIG.
[0077]
FIG. 17 is a diagram showing a third modification example of the present embodiment. In this modification, two modems (modem 33 and modem 37) are connected to the line port 12 of the automatic connection shared server 10, and an access point (AP) 74 is connected to the modem 37 via a public line or a dedicated line. Further, an initial setting server 50 is connected to the AP 74 through a dedicated line. In this third modification, when the automatic connection shared server 10 is turned on and started up, the automatic connection shared server 10 and the initial setting server 50 are first connected by the modem 37 to communicate connection information necessary for Internet connection. can do. With this configuration, the modem 37 can use a modem having a low communication speed, and can be reliably connected to the AP 74.
[0078]
As described above, in the server for automatic connection to the Internet 44 to which the present embodiment is applied, connection information necessary for the initial connection is stored in the non-volatile storage circuit (PROM 14), and the first connection is determined based on the information. It can be carried out. The first connection information is not erased unless it is physically destroyed, and even if the automatic connection shared server 10 stops temporarily due to a power failure or fails due to some software trouble, it is restarted. Can be connected automatically. For this reason, it is possible to overcome the obstacle and restart the system at any time without allocating specialized maintenance personnel or engineers. Moreover, even if it is an always-connected server in a private home or a small company, the recovery can be automatically performed.
[0079]
Further, in this server remote management system, from the user side, the server can be set by the host side server (initial setting server 50 and host server 60) managed by the operating company. It is not necessary to set the hardware and software of the server 10, and the automatic connection shared server 10 can be maintained and managed in the best state from connection to the Internet 44 to maintenance. Even if the automatic connection shared server 10 goes down, the server setting information is stored in the host side server (initial setting server 50), so that it can be easily restored to the state before the down by a simple reconfiguration process. be able to.
[0080]
On the other hand, by regularly accessing the host server 60 from the automatic connection shared server 10 or by allowing the host server 60 to access the automatic connection shared server 10 in an always connected environment, each server (automatic The connection shared server 10) can be managed centrally, and the support cost can be greatly reduced. Further, since the version of each server (automatic connection shared server 10) can also be managed on the host server 60 side, it is possible to easily cope with version upgrade of all servers (automatic connection shared server 10).
[0081]
In this way, when the user connects the automatic connection shared server 10 to the Internet 44, it is not necessary to perform an initial setting operation. In the always-connected operation, the operating company can automatically upgrade the software, change or add software, and the user can always operate the PC 31 and the Internet device 32 with the latest software.
[0082]
【The invention's effect】
As described above, according to the present invention, the connection server connected to the Internet can be set with high certainty. In addition, even if the service cannot be provided due to a failure, it can be easily recovered.
[Brief description of the drawings]
FIG. 1 is a diagram showing an overall configuration of an automatic connection shared server remote management system to which the present embodiment is applied.
FIG. 2 is a diagram showing a configuration of an automatic connection shared server.
FIG. 3 is a diagram showing contents stored in a PROM which is a read-only storage medium.
FIG. 4 is a diagram showing contents stored in a writable storage medium of the automatic connection shared server.
FIG. 5 is a diagram showing a configuration of an initial setting server.
FIG. 6 is a diagram illustrating an example of information stored in an automatic connection shared server management table of an initial setting server.
FIG. 7 is a diagram showing a configuration of a host server.
FIGS. 8A to 8E are diagrams illustrating examples of various types of information stored in a host server.
FIG. 9 is a diagram showing a basic processing procedure for automatically connecting an automatic connection shared server to the Internet and managing maintenance.
FIG. 10 is a diagram showing a processing procedure in step 100 of FIG. 9;
FIG. 11 is a diagram showing a processing procedure in step 200 of FIG. 9;
12 is a diagram showing a processing procedure in step 300 of FIG. 9;
FIG. 13 is a diagram showing a processing procedure in step 400 of FIG. 9;
FIG. 14 is a diagram showing a processing procedure in step 500 of FIG. 9;
FIG. 15 is a diagram showing a first modified example in the present embodiment.
FIG. 16 is a diagram showing a second modification example of the present embodiment.
FIG. 17 is a diagram showing a third modification example of the present embodiment.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 10 ... Automatic connection shared server, 11 ... LAN port, 12 ... Line port, 13 ... CPU, 14 ... PROM, 15 ... RAM, 16 ... Flash memory, 17 ... HDD (Hard Disk Drive), 21 ... OS storage area, 22 ... Initial connection storage area, 23 ... Initial connection information storage area, 31 ... Personal computer (PC), 32 ... Internet equipment, 33 ... Modem, 41 ... Public network, 42 ... Internet provider (ISP), 43 ... Initial setting ISP , 44 ... Internet, 50 ... initial setting server, 51 ... OS, 52 ... user server authentication program, 53 ... user server setting information acquisition program, 55 ... automatic connection shared server management table, 60 ... host server, 61 ... OS, 62 ... Software update management program, 63 ... Installation pattern management program Ram, 64 ... update implementation determining program, 65 ... user server authentication program, 66 ... automatic connection sharing server management table, 67 ... software updates, 68 ... installed pattern management table, 69 ... Software Library

Claims (11)

An internet connection server that can connect any terminal not connected to the Internet to the network and is provided between the Internet provider and the terminal to automatically connect the terminal to the Internet,
Connection starting means for starting connection with the server for initial setting based on the initial connection information set in advance;
Setting information acquisition means for acquiring setting information necessary for the main connection from the initial setting server that has been connected by the connection start means;
Cutting means for cutting off the connection started by the connection start means;
An Internet connection server, comprising: main connection starting means for starting main connection based on the setting information acquired by the setting information acquiring means. The setting information acquisition means acquires connection information for an Internet provider with a user contract,
2. The Internet connection server according to claim 1, wherein the main connection start unit connects to the Internet provider based on the connection information. Downloading means for downloading the upgraded software from the host server where the main connection is started by the main connection starting means;
2. The Internet connection server according to claim 1, wherein the server is operated by the software downloaded by the download unit. An internet connection server that can connect any terminal not connected to the Internet to the network and is provided between the Internet provider and the terminal to automatically connect the terminal to the Internet,
A non-volatile memory storing information for initially connecting to the Internet as preset initial information;
An Internet connection server, comprising: a writable storage medium that stores network setting information obtained from a server connected to the Internet based on information stored in the nonvolatile memory.   5. The Internet connection server according to claim 4, wherein the non-volatile memory stores information for executing a temporary connection to an Internet provider for initial setting. Any terminal that is not connected to the Internet can be connected to the network, and network setting information that is unique between each Internet connection server provided between the Internet provider and the terminal to automatically connect the terminal to the Internet. Setting information holding means to hold;
A user confirmation authentication means for confirming whether or not the Internet connection server that has made the Internet connection request is a legitimate user with a contract;
When the user confirmation / authentication means determines that the user is a legitimate user, the network setting information of the Internet connection server held in the setting information holding means is transmitted to the Internet connection server that has made the Internet connection request. An initial setting server comprising: network setting information transmitting means. The Internet connection server for automatically internet connection the terminal is placed between the Internet-connected is any terminal not network connectable Internet provider and the terminal, a host server for remote management,
Software information holding means for holding software necessary for the operation of the terminal for Internet connection of the terminal and update information of the software;
Confirmation request receiving means for receiving a version confirmation request from a predetermined Internet connection server that is always connected after being initially set ;
Version information transmitting means for transmitting the latest software version information held in the software information holding means to the Internet connection server for which a version confirmation request has been made by the confirmation request receiving means;
A host server comprising: software providing means for providing predetermined software held in the software information holding means based on a request from the Internet connection server.   8. The user confirmation authentication means for confirming whether or not the Internet connection server that has received the version confirmation request by the confirmation request receiving means is a legitimate user who has contracted. Host server. The Internet connection server for automatically internet connection the terminal is placed between the Internet-connected is any terminal not network connectable Internet provider and the terminal, a host server for remote management,
Connection request receiving means for receiving a connection request from a predetermined Internet connection server;
User authentication confirmation means for confirming whether the predetermined Internet connection server is a legitimate user who has contracted;
A host server comprising: transmission means for transmitting service configuration information of an Internet connection server when the user authentication confirmation means confirms that the user is a legitimate user. An internet connection server that can connect any terminal not connected to the network to the network and is provided between the Internet provider and the terminal to automatically connect the terminal to the Internet;
An initial setting Internet provider comprising an access point connected to the Internet connection server based on preset initial connection information;
An initial setting server for holding network setting information necessary for the Internet connection server to make a main connection;
The initial setting Internet provider performs connection authentication of the Internet connection server for which a connection request has been made, and connects to the Internet when authentication is successful,
The initial setting server performs user confirmation authentication as to whether or not the Internet connection server that has made a connection request is a contracted server, and if the authentication is successful, the Internet via the initial setting Internet provider A remote management system for an Internet connection server, characterized in that the network setting information is provided to a connection server.   The Internet connection server temporarily disconnects the connection with the initial setting Internet provider after the network setting information is obtained from the initial setting server, and requests a new connection based on the network setting information. The remote management system for an Internet connection server according to claim 10.

Images