JP4055055B2 - Network device and network control method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a network device and a network control method, and more particularly to a network device and a network control method capable of reducing network management.
[0002]
[Prior art]
At the connection point between the service provider network and the user network, the user needs to obtain the consent of the service provider when controlling the devices on the service provider network. In this case, the configuration was changed after adjusting the change contents with the service provider.
[0003]
[Problems to be solved by the invention]
However, in such a network control method, it takes time for emergency response in the event of a failure, and it is necessary to set traffic control such that the connection conditions change by time or day of the week. The network administrator has to check for each setting, and there is a problem that both the service provider (network administrator) and the user take time for network management work.
[0004]
The present invention has been made in view of the above problems, and a main object thereof is to provide a network device and a network control method capable of improving the above problems.
[0005]
[Means for solving problems]
In order to achieve the above object, a network device of the present invention is a network device that connects a service providing side network and a user side network, and manages at least user data including user specifying information and a permitted command list. Data management means, connection control means for performing user authentication with reference to access control to the network and the user specifying information, determination of permission / denial of a command transmitted with reference to the permission command list, and the command And a command processing means for processing each of the commands, and when the preset permission command is transmitted, the network device is controlled by the user side network , In addition, it manages command execution date and time or execution cycle. A timer management means, when the time designation command is sent, the execution time or execution cycle user specifies the network device by the user-side network is shall be controlled.
[0007]
The network control method of the present invention is a network control method in a network device that connects a service-providing network and a user-side network, and includes at least user identification information and permission set by the service-providing network. Registering user data including a command list; notifying the user of the registered user identification information; authenticating the user for access from the user side network; and the allowed command list. A step of determining permission / denial of a command transmitted from the user with reference, a step of distributing the permitted command, and a step of processing the distributed command, and using a preset permission command By Serial to allow the control of the network device by a user-side network, further, when receiving the setting request timed command from a user, acquiring an execution time or an execution period of the command execution of the acquired command And managing the execution of a command input according to the date and time or execution cycle, and the network device can be controlled by the user side network at the set execution date and time or execution cycle .
[0009]
As described above, according to the present invention, in the configuration setting of a network device such as a router, the network management side that provides the network service creates the permitted command list for each user, and enables the corresponding configuration setting for each user. Accordingly, it is possible to freely set a configuration change such as traffic control according to the usage conditions (time, day of the week, etc.) of each user on the user side, thereby reducing the network management work time.
[0010]
DETAILED DESCRIPTION OF THE INVENTION
In a preferred embodiment of the network device according to the present invention, a user data management unit that performs command management and password management, a telnet protocol process, and a network device that connects the service providing side network and the user side network. Telnet / serial connection control unit that performs serial access control, user authentication using a password, CLI management, and command control that determines command permission / rejection by referring to the permitted command list and distributes commands Unit, a command processing unit for processing each command, and a timer management unit for managing the execution time or execution interval of the command, and a command transmitted from the user side network and a preset permission command To determine permission / denial by comparing with the list Ri, it is possible to control the network devices from the user side network.
[0011]
【Example】
In order to describe the above-described embodiment of the present invention in more detail, an example of the present invention will be described with reference to FIGS. FIG. 1 is a diagram schematically illustrating a configuration of a network device according to an embodiment of the present invention, and FIGS. 2 to 4 are flowcharts illustrating a network control method according to the present embodiment.
[0012]
As shown in FIG. 1, a network device 10 of this embodiment connects a service providing side network and a user side network, and includes a command control unit 1, a user data management unit 2, and telnet / serial connection control. The unit 3 is composed of a command processing unit 4 and a timer management unit 5.
[0013]
The command control unit 1 performs CLI (Command Line Interface) management and command distribution processing via serial and telnet. Further, the command control unit 1 determines permission / rejection of the input command based on the user data of the user data management unit 2.
[0014]
The user data management unit 2 performs command management and password management that can be controlled for each user. The information for each user is set by the network service provider.
[0015]
The telnet / serial connection control unit 3 performs telnet protocol processing and serial access control. Further, when accessing from the user, the login name and password are confirmed based on the management information of the user data management unit 2.
[0016]
Each command processing unit 4 performs processing corresponding to the command distributed by the command control unit 1.
[0017]
The timer management unit 5 manages the time for executing the time designation command, is set by the user data management unit 2 at the time of registration of the time designation command, and notifies the user data management unit 2 of the timer when the corresponding time is reached. .
[0018]
The operation of the network device 10 having the above configuration will be described in detail with reference to FIGS. FIG. 2 is a flowchart showing a setting and deletion procedure for allowing the service provider to control the network device 10 to the user, and FIG. 3 is based on the user information set by the service provider. FIG. 5 is a flowchart showing a procedure for controlling a network device 10 by a corresponding user. FIG. 4 is a flowchart showing control when the corresponding user inputs a timed command.
[0019]
First, a control command setting method and a deletion method of the network device 10 will be described with reference to FIG.
[0020]
In step S101, the telnet / serial connection control unit 3 receives a user information setting command from the service provider.
[0021]
Next, in step S102, the command control unit 1 obtains information from the telnet / serial connection control unit 3, and requests the service provider to set a login name, password, and permitted command list. This request may be input in a conversational format or may be set at a time. The allowed command list may check permission / rejection for all commands, but in order to simplify the setting, prepare several types (templates) for which permission / rejection is checked in advance. It is also possible to select a format. In order to enhance security, a network address setting of the user access source may be added.
[0022]
Next, when a setting instruction is received from the service provider in step S103, the command control unit 1 checks whether or not forced termination is performed in step S104. ) Is returned (step S105). This forced termination is used when user information is set in a conversational format, or when setting is invalidated in the middle.
[0023]
As a result of checking whether or not it is forced termination, if it is not forced termination, the existing user data information is acquired from the user data management unit 2 (step S106). Then, in step S107, the command control unit 1 checks whether there is no data overlapping with existing data, including character check, and whether the data can be handled as normal data.
[0024]
If the check result is abnormal, the user's login name, password, and permission command list are requested to be re-entered in step S102. If the setting data is normal, the user data set in the user data management unit 2 is stored. The normal result is stored (step S108), and the normal result is returned as a user-oriented information setting command response (normal) (step S109). The user data management unit 2 can store a plurality of user data.
[0025]
Next, the procedure when a user information deletion command is received from the service provider is shown below.
[0026]
First, the telnet / serial connection control unit 3 receives a user information deletion command from the service provider. The command control unit 1 obtains the information and makes a request for specifying the login name and password of the user to be deleted in step S111. This request may be input in a conversational format or may be set at a time.
[0027]
Next, when deletion data from the service provider is specified in step S112, the user data management unit 2 that has obtained the information from the command control unit 1 performs deletion processing of the corresponding user data in step S113, Thereafter, the command response is returned (step S114). At this time, if there is no data to be deleted, or if the data cannot be deleted normally, a message to that effect is returned.
[0028]
In this way, the service provider can save and delete the login name, password, and allowed command list for the user data management unit 2 of the network device 10.
[0029]
Next, with reference to FIG. 3, a procedure for the user to control the network device 10 based on the user information set by the service provider will be described.
[0030]
First, in the flowchart of FIG. 2, the service provider sets information for the user in the network device 10, and notifies the user of the login name and password. In FIG. 3, it is assumed that the user accesses the telnet / serial connection control unit 3 (step S201).
[0031]
In this case, first, the telnet / serial connection control unit 3 requests the user to specify a login name and waits for a response (step S202). After the login name is designated by the user (step S203), a password designation is requested and a response is waited (step S204). After the password is specified by the user (step S205), all existing login names and password data are acquired from the user data management unit 2 (step S206), and in step S207, the corresponding login name and password are compared. (At this time, if the access source network address is additionally designated in S102 of FIG. 2, this network address is also compared. Access is permitted only when all three values match.) It will be.)
[0032]
If no login name or password matches, or if no user data has been registered, access is denied in step S208. If there is data whose login name and password match, the user data (login name and password) being accessed is temporarily reserved 10 in the command control unit 1 in step S209, and access with the corresponding user data is performed in step S210. Allow.
[0033]
Next, the process when a certain command is received from the user (step S211) will be described below.
[0034]
The command control unit 1 that has received this information acquires the command data of the corresponding user from the user data management unit 2 (step S212). This is to check whether the specified command is permitted to be input from the user name and password. The command control unit 1 that has obtained this result determines whether or not the input of the command specified in step S213 is permitted. If command input is not permitted, (NG) is returned as a command response for the user (step S214). If command input is permitted, command distribution processing is performed (step S215), and the corresponding command processing unit 4 is notified.
[0035]
The notified command processing unit 4 performs processing corresponding to the corresponding command (step S216), creates a command response (step S217), and returns a command response (OK) for the user (step S218).
[0036]
As described above, since the command control unit 1 determines permission / denial of a command with reference to a preset permitted command list, the user side network may control the network device 10 using a predetermined command. It becomes possible, and the network management work of the network administrator can be reduced.
[0037]
Next, with reference to FIG. 4, the control procedure when the corresponding user inputs a timed command will be described.
[0038]
The timed command is a setting command for executing a command specified by determining a time to be executed. First, in step S301, the telnet / serial connection control unit 3 receives a timed command setting request from the user. In response to this, in step S302, the command control unit 1 returns a designation request as to whether to designate a command execution cycle or a date and time. Accordingly, the telnet / serial connection control unit 3 receives a designation instruction for one of the period / date from the user (step S303), and the command control unit 1 that receives the instruction instructs the command input interval when the period is designated, If the date is specified, a request for specifying the command input date is returned to the user (step S304). Then, the telnet / serial connection control unit 3 receives an instruction to specify the input interval / input date / time from the user (step S305), and the command control unit 1 receiving the instruction specifies a command to be input at the time specified in step S304. Is returned to the user (step S306). When the input command is designated by the user, the command control unit 1 notifies the user data management unit 2 that all the data for processing the timed command has been prepared.
[0039]
In step S308, the user data management unit 2 sends a timer setting request to the timer management unit 5, and the timer management unit 5 that receives the request starts the timer (step S309). Further, the user data management unit 2 stores all data set by the command in step S310, and returns a command response of the timed command setting request to the user (step S311).
[0040]
After that, the timer management unit 5 requests the user data management unit 2 to process the timed command when the corresponding time is reached, and stops the timer (step S312). In the user data management unit 2, a command search is performed in step S 313, and if there is no corresponding time designation command, an alarm notification indicating that the process could not be processed normally is given to the user (step S 314). For example, command distribution processing is performed in step S315, and command processing (step S316) and command response (step S317) are performed in each command processing unit 4. Receiving the command response, the user data management unit 2 issues an alarm notification to the user indicating that the time designation command has been successfully processed (step S318).
[0041]
In the case of a time designation command that is performed periodically, a corresponding timer setting request (step S308) is made to the timer management unit 5, and the timer management unit 5 starts a timer accordingly (step S309). The cycle command is a repetition of the processing of steps S308, S309, S313 to S317.
[0042]
Finally, when the telnet / serial connection control unit 3 receives a command for designating the deletion of the timed command from the user in step S319, the command control unit 1 and the user data management unit 2 are notified. In step S320, the user data management unit 2 sends a corresponding timer deletion request to the timer management unit 5, and the timer management unit 5 that receives the request deletes the corresponding timer in step S321. Further, the user data management unit 2 deletes the information of the corresponding time designation command in step S322, and returns a command response to the user (step S323).
[0043]
By providing the timer management unit 5 in this way, the execution date and time and execution cycle of the command are managed, and the timed command is executed at the date and time or cycle set by the user, so that the connection conditions change in units of time or day of the week. For traffic control, the network management work of the network administrator can be reduced.
[0044]
【The invention's effect】
As described above, according to the network device and the network control method of the present invention, the user controls the service provider network device at the connection point between the service provider network and the user network connected thereto. As a result, the load of network management work on the service providing side can be reduced. In addition, the degree of freedom of traffic control on the user side is improved, and it becomes possible to automatically cope with a change in the connection condition of the user for each date and day of the week.
[0045]
The reason for this is that, in the past, for the convenience of the user, changing the transfer conditions when transferring from the service provider side network to the user side network, and controlling traffic under various conditions in units of time / day of the week are performed by the user and the service provider. After adjustment and confirmation, either one needs to be set in the network device on the service provider side, and when the user connection conditions change due to time or day conditions, it is necessary to set one by one. This is because the user can freely control the network device on the service providing side, including the setting for inputting a command by specifying a time, and therefore the adjustment between the user and the service provider can be completed in a short time.
[Brief description of the drawings]
FIG. 1 is a diagram schematically showing a configuration of a network device according to an embodiment of the present invention.
FIG. 2 is a flowchart showing the procedure of a control command setting method and deletion method according to an embodiment of the present invention.
FIG. 3 is a flowchart showing a control procedure of a network device according to an embodiment of the present invention.
FIG. 4 is a flowchart showing a control procedure when a timed command according to an embodiment of the present invention is input.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Command control part 2 User data management part 3 Telnet / serial connection control part 4 Each command processing part 5 Timer management part 10 Network equipment

Claims (2)

A network device for connecting a service providing network and a user network,
User data management means for managing user data including at least user identification information and a permission command list, connection control means for performing user authentication with reference to access control to the network and the user identification information, and the permission command A command control means for determining permission / rejection of a command to be transmitted with reference to a list and distributing the command; and a command processing means for processing each of the commands. When transmitted, the network device is controlled by the user side network ,
Furthermore, a timer management means for managing the execution date / time or execution cycle of the command is provided, and when the time designation command is transmitted, the network device is controlled by the user side network at the execution date / time or execution cycle designated by the user. Network equipment characterized by that. A network control method in a network device that connects a service-providing network and a user-side network,
Registering user data including at least user identification information and a permitted command list set by the service providing network, notifying the user of the registered user identification information, and access from the user network Authenticating the user, determining whether to permit / deny a command transmitted from the user with reference to the permitted command list, distributing the permitted command, and distributing the command And enabling the control of the network device by the user-side network by using a preset permission command,
Furthermore, when receiving a setting request for a time designation command from the user, a step of acquiring the execution date and time or execution cycle of the command, and a step of managing the execution of the command input according to the acquired execution date and time or execution cycle of the command A network control method characterized in that the network device can be controlled by the user-side network at a set execution date and time or execution cycle.

Images