JP4107189B2 - Information processing device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an information processing apparatus that performs communication via a network, and more particularly to a communication address configuration method and an information processing apparatus that are suitable for concealing the movement of a caller that performs communication from a third party.
[0002]
[Prior art]
In recent years, in the field of communication, the IP protocol, which is a standard protocol of the Internet, has become a de facto standard protocol and is widely used for applications such as mail and Web access. Although the current mainstream IP protocol is a specification called IPv4 and has an address space of 32 bits, the upper bits are used as subnet addresses to identify regions and organizations in order to facilitate routing on the network. The number of addresses that can be assigned to is not large enough. For this reason, a mechanism for dynamically lending an IP address from a service provider contracted by an end user is used. In addition to the above-described mechanism, a unique IP address assignment (so-called private address) is used in a home or company, and when accessing the Internet outside the home or outside the company, the address of another device on the Internet By converting to unique IP addresses (so-called global addresses) that do not overlap and performing communication, the shortage of available global addresses is addressed. However, due to the rapid increase in the devices connected to the network and the population to be used, the shortage of global addresses cannot be solved only by the dynamic address lending and the use of local addresses. In addition, in applications such as IP phones that are expected to be widely used in the future and applications in which individuals communicate directly with each other, the use of a dynamic address or private address is not appropriate because the other party is designated by an IP address. There's a problem. In order to solve these problems, a specification called IPv6 has been established that greatly expands the address space. The IP address defined in IPv6 has a 128-bit space, and can even assign a global IP address to all devices and sensors all over the world (see, for example, Non-Patent Document 1). . Among these global IP addresses, when assigning an address value of a global IP address used for one-to-one normal communication, a unique value (hereinafter referred to as “unique”) is assigned to each device in the world. In addition, it is required that route control (routing) for delivering a packet to a communication partner via the Internet is easy. For this reason, an address structure as shown in FIG. 2 is used. The first 48 bits of the address are called a public topology, and are assigned a relay point to a set of Internet service providers and users, that is, a number representing a routing destination area. The subsequent 16 bits are called a site topology, and are used to designate a so-called subnet, which is an area further divided from the area designated by the public topology. A portion obtained by combining the public topology 48 bits and the site topology 16 bits is called a prefix. By referring to this prefix, routing can be performed. The last 64 bits are called an interface ID and are used to specify the network interface of each device on the subnetwork. In order for the global IP address to be unique, it is sufficient that the combination of the prefix and the interface ID is unique. However, since it is not easy to manage the interface ID for each prefix value, the interface ID does not depend on the prefix. It is desirable that it is unique. Therefore, for example, the MAC address assigned to the network card is generally used as the interface ID. This is because the MAC address is composed of a number representing a manufacturer and a serial number, and a unique number is assigned at the time of manufacture.
[0003]
By using the unique global IP address described above, communication can be performed without causing problems such as duplication of addresses with other information processing apparatuses, regardless of where the desired communication destination information processing apparatus is on the Internet. be able to.
On the other hand, IBM's T.I. Narten et al. Create a temporary global IP address that is valid only for a connection unit or for a period of one day, one week, etc., by the source information processing device itself randomly creating an interface ID that is the lower 64 bits of the global IP address. Have proposed to protect privacy by using a permanent global IP address (see Non-Patent Document 2).
[0004]
[Non-Patent Document 1]
Marcus Goncalves et al. “Full explanation of IPv6 protocol” Nikkei BP, March 19, 2001 [Non-patent document 2]
T. T. Narten et al. "Extensions to IPv6 Address Autoconfiguration", RFC 3041, January 2001 [0005]
[Problems to be solved by the invention]
However, when a unique interface ID such as a MAC address is used, the same value is used for the interface ID even if the same information processing apparatus is moved to a different prefix and the communication is performed via the Internet. By monitoring the packet, there arises a problem that the information processing apparatus, that is, the information relating to the movement information of the user, can be obtained by a third party without permission.
In addition, the T.A. When the technology of Narten et al. Is used, there is a possibility that the global IP address created at random may overlap with the global IP address of other information processing, and cannot be used safely and securely.
Further, the T.A. When the technology of Narten et al. Is used, there is a problem that an unexpected leakage of privacy occurs when the user forgets to switch the global IP.
In addition, when each information processing apparatus uses a plurality of interface IDs, there is a possibility that a shortage of interface IDs may occur due to the limited number of unique interface IDs.
[0006]
Therefore, an object of the present invention is to provide a communication device that can use different interface IDs depending on the destination.
Another object of the present invention is to provide a communication device in which switching of an interface ID according to a destination is performed without a user forgetting it.
Another object of the present invention is to provide service means for managing an interface ID and dynamically assigning it to an information processing apparatus or its communication apparatus.
[0007]
[Means for Solving the Problems]
The object can be achieved by the configuration described in the claims as an example.
[0008]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
First, the overall system configuration will be described. FIG. 1 is a configuration example of an information processing apparatus according to the present invention. 1 is an information processing device, 8 is a router, 7 is a display device, and 9 is the Internet. The information processing apparatus 1 includes a CPU 2, a storage device 3, a network controller 4, a main memory 5, a display controller 6, and a keyboard controller 18. A display device 7 is connected to the display controller 6, a keyboard 19 is connected to the keyboard controller 18, and the network controller 4 is connected to the router 8. The OS 11, the IP communication processing program 12, the IP address setting program 13, and the application program 14 are loaded from the storage device 3 into the main memory 5 according to instructions from the CPU 2, and the CPU 2 executes the programs. FIG. 3 is a diagram illustrating an example of the interface ID table 30 stored in the storage device 3 in the present embodiment. The interface ID table 30 stores a plurality of unique interface IDs 24.
[0009]
Next, the flow of the IP address setting program 13 for determining the IP address 20 using the interface ID table 30 will be described with reference to FIG. First, in step 410, the router notification message broadcast from the router 8 is received via the network controller 4. In step 420, the network ID included in the router notification message is extracted and acquired. In step 430, the network ID is set as the prefix 23 of the IP address. In step 440, the interface ID table 30 is referred to, and a list of interface IDs 24 is displayed on the display device 7 via the display controller 6. In step 450, the user views the display and selects a desired interface ID 24 using the keyboard 19. In the subsequent step 460, the selected interface ID 24 is set as the interface ID 24 to be used, and the process ends in step 490.
[0010]
FIG. 5 shows an example of a screen displayed on the display unit 7 in the previous step 450. A list display screen 50 including a plurality of interface IDs 24 is displayed on the display screen, and the user selects one interface ID 24 using the previous keyboard 19.
Through the above processing, the user can select the interface ID 24, which is a part of the IP address 20 used for communication, from a plurality of values. Therefore, the value of the unique interface ID 24 varies depending on the location and the like. Can be used. As a result, by monitoring the packet on the Internet 9 for the location of the user, it is possible to hide the place where the packet is sent, that is, the location of the user.
[0011]
Next, a second embodiment of the present invention will be described.
FIG. 6 is a diagram illustrating an example of the interface ID table 30a stored in the storage device 3 in the second embodiment. The interface ID table 30a stores a plurality of combinations of the prefix 23 and the interface ID 24.
[0012]
Next, the flow of the IP address setting program 13a for determining the IP address 20 using the interface ID table 30a will be described with reference to FIG. First, in step 710, the router notification message broadcast from the router 8 is received via the network controller 4. In step 720, the network ID included in the router notification message is extracted and acquired. In step 730, the network ID is set as the prefix 23 of the IP address. Next, in step 740, the interface ID table 30a is searched to check whether there is a prefix 23 that matches the value of the prefix 23 set in step 730. In step 750, it is determined whether or not there is a matching prefix 23 as a result of the investigation, and if it exists, in step 760, the interface ID 24 corresponding to the prefix 23 is extracted from the interface ID table 30a. On the other hand, if there is no matching prefix 23 in step 750, the MAC address assigned to the network controller 4 is extracted in step 755. In step 770, either the interface ID 24 extracted in step 760 or the MAC address extracted in step 755 is set as the interface ID 24 used for communication. In step 790, the IP address setting process ends.
[0013]
Through the above processing, the interface ID 24 which is a part of the IP address 20 used for communication can be automatically switched according to the value of the prefix 23 notified from the router 8. A different unique interface ID 24 value can be used by the user. As a result, by monitoring the packet on the Internet 9 for the location of the user, it is possible to hide the place where the packet is sent, that is, the location of the user.
[0014]
Next, a third embodiment of the present invention will be described.
In this embodiment, the interface ID 24 selected by the user in the first embodiment can be selected by the name of the place to be used. FIG. 8 shows an example of an interface ID table 30c in which use location information 83 is added for each interface ID 24 to the interface ID table 30 in the first embodiment. Further, in this embodiment, by using the interface ID table 30c, as shown in the list display screen 50c in FIG. 9 instead of the list display screen 50 in the first embodiment shown in FIG. Display in correspondence with names. By the change described above, the user can easily select and use the unique interface ID 24 from the place name to be used.
In the embodiment described above, an example using the information processing apparatus 1 that includes the network controller 4 and is connected to the Internet 9 via the router 8 has been shown. Mobile phone lines can be used. Further, the information processing apparatus 1 may be a mobile phone itself having an IP communication function.
[0015]
As described above, according to the present invention, an interface ID used as a part of an IP address that is a communication address on a network is not a user's MAC address unique to a device but a plurality of unique interface IDs prepared in advance. Therefore, even if a third party intercepts a communication packet on the network, it is not possible to determine which information processing device is communicating, and the user's privacy can be protected. .
In addition, since the selection of the interface ID can be automatically selected and switched according to the prefix value notified from the connection destination router, not the user, the user can save the trouble of switching, There is an effect that the risk of privacy leakage due to forgetting to switch can be reduced.
[0016]
【The invention's effect】
As described above, according to the present invention, it is possible to protect the privacy of the user on the network and to perform safe communication.
[Brief description of the drawings]
FIG. 1 is a configuration example of an information processing apparatus according to an embodiment of the present invention.
FIG. 2 is a diagram showing an address structure used in IPv6.
FIG. 3 is a diagram illustrating an example of an interface ID table 30 according to the embodiment of this invention.
FIG. 4 is a flowchart showing an example of the operation of IP address setting 13 in the embodiment of the present invention.
FIG. 5 is a diagram showing an example of an interface ID selection screen 50 in the embodiment of the present invention.
FIG. 6 is a diagram showing an example of an interface ID table 30a in the second embodiment of the present invention.
FIG. 7 is a flowchart showing an example of the operation of IP address setting 13a in the second embodiment of the present invention.
FIG. 8 is a diagram showing an example of an interface ID table 30c in the third embodiment of the present invention.
FIG. 9 is a diagram showing an example of an interface ID selection screen 50c in the third embodiment of the present invention.
[Explanation of symbols]
1 Information processing device 4 Network controller 8 Router 9 Internet 23 Prefix 24 Interface ID
30 Interface ID table

Claims (6)

A communication control method for an information processing apparatus,
The information processing apparatus has an interface ID table that stores a plurality of pairs of prefix IDs set based on a network and interface IDs associated with the information processing apparatuses ,
The information processing apparatus includes:
When connected to the network, it sets the prefix ID on the basis of the network,
The interface ID corresponding to the prefix ID extracted from the interface ID table,
On the basis of the said interface ID extracted with the prefix ID that the set, set the communication address, the communication control method characterized by <br/> communicating using the communication address. An information processing apparatus,
Storage means for storing an interface ID table for storing a plurality of pairs of prefix IDs set based on the network and interface IDs associated with the information processing apparatus ;
When connected to the network, sets the prefix ID on the basis of the network, to extract the interface ID corresponding to the prefix ID from the interface ID table to said interface ID extracted with the prefix ID set A communication address setting means for setting a communication address based on:
And communication processing means for performing communication using the communication addresses,
An information processing apparatus comprising: A communication control method for an information processing apparatus,
The information processing apparatus has an interface ID table for storing a plurality of location names and interface IDs as a pair,
The information processing apparatus includes:
When connected to a network , display information corresponding to the interface ID table is output.
Accepting selection of the location name from the display information ;
Obtaining the interface ID corresponding to the name of the selected location from the interface ID table ;
A communication control method characterized <br/> performs communication using the communication addresses with the acquired interface ID. The communication control method according to claim 3,
The information processing apparatus includes:
When connected to a network, set the prefix ID based on the network,
A communication control method, wherein a communication address is set based on the set prefix ID and the acquired interface ID, and communication is performed using the communication address. An information processing apparatus,
Storage means for storing an interface ID table for storing a plurality of place names and interface IDs as a pair ;
When connected to the network, and output means for outputting the display information corresponding to the interface ID table,
Receiving means for receiving selection of the name of the place from the display information ;
Address setting means for acquiring the interface ID corresponding to the selected name of the place from the interface ID table, and setting a communication address having the acquired interface ID ;
And communication processing means for performing communication using the communication addresses,
An information processing apparatus comprising: The information processing apparatus according to claim 5,
The address setting means, when connected to a network, sets the prefix ID based on the network, and sets a communication address based on the set prefix ID and the acquired interface ID, Information processing device.

Images