JP5771741B2 - Communications system - Google Patents

Description

  The present invention relates to a communication system including a plurality of communication devices.

  Communication devices that constitute a communication system require setting data for communication in order to normally communicate with other communication devices in the system. If this setting operation is performed manually for each communication device, it takes a lot of labor. Therefore, conventionally, a technique has been developed for automatically performing setting to each communication device to some extent.

  Patent Document 1 discloses a system that enables a plurality of routers included in a communication network to be centrally initialized, changed, and managed.

  In Patent Document 2, an automatic connection shared server accesses an initial setting server, the initial setting server transmits setting information corresponding to the automatic connection shared server to the automatic connection shared server, and the automatic connection shared server A management system is disclosed in which a terminal is ISP-connected to a network by accessing a host server using setting information.

  In Patent Document 3, a determination is made based on the transmission characteristics of a power line communication signal sent from the existing device, whether or not the existing power line communication device in the power line network is installed in the same house as at least one communication device. There is disclosed a new power line communication apparatus that performs registration by transmitting a registration request to the existing power line communication apparatus when there is a power line communication apparatus installed in the same house.

Japanese Patent Publication “Patent Publication No. 2004-199398 (published July 8, 2004)” Japanese Patent Publication “Patent Publication 2007-053790 (published March 1, 2007)” Japanese Patent Publication “Patent Publication 2009-094768 (April 30, 2009)”

  In the techniques of Patent Literatures 1 and 2, it is necessary to separately prepare a server for setting communication devices. On the other hand, in the technique of Patent Document 3, it is not necessary to prepare such a server, but the setting is automated only for existing power line communication devices. It is necessary to set up communication with.

  Further, Patent Documents 1 to 3 do not disclose or suggest how to delete the communication setting related to the removed device from the device that is not removed when the existing device is removed from the system.

  The present invention has been made to solve the above-described problems, and the object thereof is newly added to an existing communication device in a communication system and the communication system without requiring a server for communication setting. It is an object of the present invention to provide a communication system capable of reducing the user's trouble when setting for mutual communication in both communication apparatuses.

  Another object of the present invention is to reduce a user's trouble when deleting a communication setting related to a communication device removed from the communication system from a communication device not removed without requiring a server for deleting the communication setting. An object of the present invention is to provide a communication system.

In order to solve the above problems, a communication system according to one aspect of the present invention provides:
A communication system comprising a plurality of existing communication devices and a newly added communication device,
Any of the above existing communication devices
A first memory having a first setting table in which a plurality of first setting data necessary for individually communicating with each of the plurality of existing communication devices is registered;
A first reception request signal, which is transmitted from the new communication device and includes second setting data necessary for communicating with the new communication device, and requests registration of the new communication device. Registration request signal receiving means,
First registration means for registering the second setting data included in the received registration request signal in the first setting table;
Transmission means for transmitting the first setting table in which the second setting data is registered to the newly established communication device,
The new communication device is
Input means for receiving input of the third setting data necessary for communicating with any of the existing communication devices and the second setting data;
First registration request signal transmitting means for transmitting the registration request signal to any one of the existing communication devices using the third setting data;
A second memory;
Receiving means for receiving the first setting table transmitted from any of the existing communication devices;
Writing means for writing the received first setting table into the second memory;
Communicate with the other existing communication devices registered in the first setting table in the second memory with respect to each of the other existing communication devices other than one of the existing communication devices. Second registration request signal transmission means for transmitting the registration request signal using the first setting data for performing,
Each of the other existing communication devices other than one of the existing communication devices is
A third memory having a second setting table in which the plurality of first setting data are registered;
Second registration request signal receiving means for receiving the registration request signal transmitted from the newly established communication device;
Second registration means for registering the second setting data included in the received registration request signal in the second setting table;
Each of the existing communication device and the new communication device constructs the same virtual private network,
Each of the first setting data includes at least an IP address of the existing communication device corresponding to the first setting data and a base identifier for identifying the existing communication device in the virtual private network. And
The second setting data is only the IP address of the new communication device,
Any of the existing communication devices is different from all the base identifiers registered in the first setting table, and is a second base identifier for identifying the new communication device in the virtual private network. Is further provided with a base identifier generating means for generating
The first registration means associates the second base identifier with the received second setting data, registers the second base identifier in the first setting table,
The second registration request signal transmitting means transmits the registration request signal including the second base identifier registered in the first setting table in the second memory to each of the other existing To the communication device,
The second registration means registers the second setting data and the second base identifier included in the received registration request signal in the second setting table.

  According to the above configuration, when a new communication device is added to the communication system, the new communication device is automatically registered in all the existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, there exists an effect which can reduce a user's effort at the time of adding a newly installed communication apparatus to a communication system.

  Further, according to the above configuration, when a new communication device is added to the virtual private network, the new communication device is automatically registered in all existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, a user's effort at the time of adding a new communication apparatus to a virtual private network can be reduced.

  Further, according to the above configuration, as long as the user inputs the IP address of the new communication device to the new communication device, the base identifier for the new communication device is automatically generated. Furthermore, the IP address and base identifier of the new communication device are registered in all existing communication devices. In addition, a new communication device is provided with a setting table including a new site identifier. Accordingly, since the user can save time and effort to input the base identifier for the newly installed communication device, the user's time can be further reduced.

In order to solve the above problems, a communication system according to one aspect of the present invention provides:
A communication system comprising a plurality of existing communication devices and a newly added communication device,
Any of the above existing communication devices
A first memory having a first setting table in which a plurality of first setting data necessary for individually communicating with each of the plurality of existing communication devices is registered;
A first reception request signal, which is transmitted from the new communication device and includes second setting data necessary for communicating with the new communication device, and requests registration of the new communication device. Registration request signal receiving means,
First registration means for registering the second setting data included in the received registration request signal in the first setting table;
Transmitting means for transmitting the first setting table in which the second setting data is registered to the newly established communication device;
For each of the other existing communication devices other than any of the existing communication devices, the first first device for communicating with the other existing communication device registered in the first setting table. A second registration request signal transmitting means for transmitting the registration request signal using the setting data;
The new communication device is
Input means for receiving input of the third setting data necessary for communicating with any of the existing communication devices and the second setting data;
First registration request signal transmitting means for transmitting the registration request signal to any one of the existing communication devices using the third setting data;
A second memory;
Receiving means for receiving the first setting table transmitted from any of the existing communication devices;
Writing means for writing the received first setting table into the second memory;
Each of the other existing communication devices other than one of the existing communication devices is
A third memory having a second setting table in which the plurality of first setting data are registered;
Second registration request signal receiving means for receiving the registration request signal transmitted from any of the existing communication devices;
Second registration means for registering the second setting data included in the received registration request signal in the second setting table;
Each of the existing communication device and the new communication device constructs the same virtual private network,
Each of the first setting data includes at least an IP address of the existing communication device corresponding to the first setting data and a base identifier for identifying the existing communication device in the virtual private network. And
The second setting data is only the IP address of the new communication device,
Any of the existing communication devices is different from all the base identifiers registered in the first setting table, and is a second base identifier for identifying the new communication device in the virtual private network. Is further provided with a base identifier generating means for generating
The first registration means associates the second base identifier with the received second setting data, registers the second base identifier in the first setting table,
The second registration request signal transmitting means transmits the registration request signal including the second base identifier registered in the first setting table in the second memory to each of the other existing To the communication device,
The second registration means registers the second setting data and the second base identifier included in the received registration request signal in the second setting table.

  According to the above configuration, when a new communication device is added to the communication system, the new communication device is automatically registered in all the existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, there exists an effect which can reduce a user's effort at the time of adding a newly installed communication apparatus to a communication system.

  Further, in the system of this configuration, the new communication device requests the registration of itself is only one existing communication device. Therefore, it is possible to reduce the processing amount in the newly installed communication device. In addition, compared to the case where a newly installed communication device requests its own registration to another existing communication device, it is also possible to shorten the time until the newly installed communication device is registered in another existing communication device. I can expect.

  Further, according to the above configuration, when a new communication device is added to the virtual private network, the new communication device is automatically registered in all existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, a user's effort at the time of adding a new communication apparatus to a virtual private network can be reduced.

  Further, according to the above configuration, as long as the user inputs the IP address of the new communication device to the new communication device, the base identifier for the new communication device is automatically generated. Furthermore, the IP address and base identifier of the new communication device are registered in all existing communication devices. In addition, a new communication device is provided with a setting table including a new site identifier. Accordingly, since the user can save time and effort to input the base identifier for the newly installed communication device, the user's time can be further reduced.

In order to solve the above problems, a communication system according to one aspect of the present invention provides:
A communication system comprising a plurality of existing communication devices and a newly added communication device,
Any of the above existing communication devices
A first memory having a first setting table in which a plurality of first setting data necessary for individually communicating with each of the plurality of existing communication devices is registered;
A first reception request signal, which is transmitted from the new communication device and includes second setting data necessary for communicating with the new communication device, and requests registration of the new communication device. Registration request signal receiving means,
First registration means for registering the second setting data included in the received registration request signal in the first setting table;
Transmitting means for transmitting the first setting table in which the second setting data is registered to the newly established communication device;
The registration request signal is transmitted to the other existing communication device using the first setting data registered in the first setting table for communicating with the other communication device. Second registration request signal transmission means,
The new communication device is
Input means for receiving input of the third setting data necessary for communicating with any of the existing communication devices and the second setting data;
First registration request signal transmitting means for transmitting the registration request signal to any one of the existing communication devices using the third setting data;
A second memory;
Receiving means for receiving the first setting table transmitted from any of the existing communication devices;
Writing means for writing the received first setting table into the second memory;
Other existing communication devices are as follows:
A third memory having a second setting table in which the plurality of first setting data are registered;
Second registration request signal receiving means for receiving the registration request signal transmitted from any of the existing communication devices;
Second registration means for registering the second setting data included in the received registration request signal in the second setting table;
For the other existing communication device that has not received the registration request signal, the first first device for communicating with the other existing communication device registered in the second setting table. A third registration request signal transmitting means for transmitting the registration request signal using the setting data;
Each existing communication device other than one of the above existing communication devices and the other existing communication device,
A fourth memory storing a third setting table in which the plurality of first setting data are registered;
Third registration request signal receiving means for receiving the registration request signal transmitted from the outside;
Third registration means for registering the second setting data included in the received registration request signal in the third setting table;
For the other existing communication device that has not received the registration request signal, the first first device for communicating with the other existing communication device registered in the third setting table. A fourth registration request signal transmitting means for transmitting the registration request signal using setting data;
Each of the existing communication device and the new communication device constructs the same virtual private network,
Each of the first setting data includes at least an IP address of the existing communication device corresponding to the first setting data and a base identifier for identifying the existing communication device in the virtual private network. And
The second setting data is only the IP address of the new communication device,
Any of the existing communication devices is different from all the base identifiers registered in the first setting table, and is a second base identifier for identifying the new communication device in the virtual private network. Is further provided with a base identifier generating means for generating
The first registration means associates the second base identifier with the received second setting data, registers the second base identifier in the first setting table,
The second registration request signal transmitting means transmits the registration request signal including the second base identifier registered in the first setting table in the first memory to the other existing communication. To the device,
The second registration means registers the second setting data and the second base identifier included in the received registration request signal in the second setting table,
The third registration request signal transmission means receives the registration request signal including the second base identifier registered in the second setting table in the third memory, and the registration request signal. To other yet existing communication devices that are not
The third registration means registers the second setting data and the second base identifier included in the received registration request signal in the third setting table,
The fourth registration request signal transmitting means receives the registration request signal including the second base identifier registered in the third setting table in the fourth memory, and the registration request signal. It is preferable to transmit to another communication apparatus that is not yet installed.

  According to the above configuration, when a new communication device is added to the communication system, the new communication device is automatically registered in all the existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, there exists an effect which can reduce a user's effort at the time of adding a newly installed communication apparatus to a communication system.

  Further, in the system of this configuration, the new communication device requests the registration of itself is only one existing communication device. Therefore, it is possible to reduce the processing amount in the newly installed communication device. In addition, compared to the case where a newly installed communication device requests its own registration to another existing communication device, it is also possible to shorten the time until the newly installed communication device is registered in another existing communication device. I can expect.

  Further, the existing communication device requests only one existing communication device to request registration of the new communication device. That is, one existing communication device requests registration of a new communication device to another existing communication device, and the other existing communication device further includes another existing communication device. Request the device to register a new communication device. In this way, the registration request and registration process for a new communication device are performed in a chain for each existing communication device. As a result, the registration request processing is performed in a distributed manner in each existing communication device, so that the processing burden on each existing communication device is reduced.

  Further, according to the above configuration, when a new communication device is added to the virtual private network, the new communication device is automatically registered in all existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, a user's effort at the time of adding a new communication apparatus to a virtual private network can be reduced.

  Further, according to the above configuration, as long as the user inputs the IP address of the new communication device to the new communication device, the base identifier for the new communication device is automatically generated. Furthermore, the IP address and base identifier of the new communication device are registered in all existing communication devices. In addition, a new communication device is provided with a setting table including a new site identifier. Accordingly, since the user can save time and effort to input the base identifier for the newly installed communication device, the user's time can be further reduced.

In order to solve the above problems, a communication system according to one aspect of the present invention provides:
A communication system comprising a plurality of communication devices,
Each of the above communication devices
A memory having a setting table in which a plurality of setting data necessary for individually communicating with each of the plurality of communication devices is registered;
The communication device removed from the communication system is:
A deletion request signal transmission means for transmitting a deletion request signal for requesting setting deletion of the communication device to be removed to each of the communication devices other than the communication device to be removed among the plurality of communication devices;
Deletion response signal receiving means for receiving a deletion response signal indicating that the setting data for communicating with the communication device to be removed, transmitted from each of the communication devices other than the communication device to be removed, has been successfully deleted. When,
An initialization means for deleting the setting table from the memory after receiving the deletion response signal from all the communication devices other than the communication device to be removed,
Each communication device other than the communication device to be removed is
A deletion request signal receiving means for receiving the deletion request signal;
After receiving the delete request signal, delete means for deleting the setting data for communicating with the communication device to be removed from the setting table;
After deleting the setting data of the communication device to be removed, a deletion response signal indicating successful deletion is transmitted to the communication device to be removed using only the IP address of the communication device to be removed. Delete response signal transmission means,
Each of the above communication devices builds the same virtual private network,
Each of the setting data includes at least an IP address of the communication device corresponding to the setting data and a base identifier for identifying the communication device in the virtual private network.

  According to the above configuration, when a certain communication device is to be removed from the communication system, the setting of the certain communication device is automatically deleted from all communication devices other than the certain communication device. In addition, the setting table of the communication device to be removed is automatically deleted. Thereby, a user's effort at the time of removing a communication apparatus from a communication system can be reduced. In addition, such an automatic deletion process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In addition, each communication device that is not removed includes only the communication device IP address that is removed after the setting data of the removed communication device, that is, the base identifier and IP address of the removed communication device are deleted from the setting table. The delete response signal is transmitted to the communication device to be removed. Thereby, the communication apparatus removed can grasp | ascertain that the setting deletion of the communication apparatus removed in the communication apparatus which is not removed succeeded by having received the deletion response signal.

  In other words, the fact that the deletion response signal is received by communication using only the IP address of the communication device to be removed means that communication using the base identifier of the communication device to be removed cannot be performed in the communication device that is not removed. I mean. This ensures that the setting data including the base identifier of the communication device to be removed has been successfully deleted in the communication device that is not removed.

  Therefore, according to said structure, there exists an effect that the setting deletion of the communication apparatus removed can be reliably performed in each communication apparatus which is not removed.

In order to solve the above problems, a communication system according to one aspect of the present invention provides:
A communication system comprising a plurality of communication devices,
Each of the above communication devices
A memory having a setting table in which a plurality of setting data necessary for individually communicating with each of the plurality of communication devices is registered;
The communication device removed from the communication system is:
First deletion request signal transmitting means for transmitting a deletion request signal for requesting setting deletion of the removed communication device to any one of the plurality of communication devices other than the removed communication device; ,
First deletion response signal receiving means for receiving a deletion response signal indicating that the setting data for communication with the communication device to be removed transmitted from any one of the communication devices has been successfully deleted;
An initialization means for deleting the setting table from the memory after transmitting the deletion request signal,
Any of the above communication devices
First deletion request signal receiving means for receiving the deletion request signal transmitted from the communication device to be removed;
A first deletion means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A second deletion request signal transmitting means for transmitting the deletion request signal to each communication device other than the communication device to be removed and any one of the communication devices among the plurality of communication devices;
Second deletion response signal receiving means for receiving the deletion response signal transmitted from each of the other communication devices;
After deleting the setting data for communicating with the communication device to be removed from the setting table and receiving the deletion response signal transmitted from all the other communication devices, the deletion response signal is The first deletion response signal transmitting means for transmitting to the communication device to be removed using only the IP address of the communication device to be removed;
Each of the other communication devices is
Second deletion request signal receiving means for receiving the deletion request signal transmitted from any one of the communication devices;
A second deleting means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A second deletion response signal transmitting means for transmitting the deletion response signal to any one of the communication devices after deleting the setting data for communicating with the communication device to be removed from the setting table; And
Each of the above communication devices builds the same virtual private network,
Each of the setting data includes at least an IP address of the communication device corresponding to the setting data and a base identifier for identifying the communication device in the virtual private network.

  According to the above configuration, when a certain communication device is to be removed from the communication system, the setting of the certain communication device is automatically deleted from all communication devices other than the certain communication device. In addition, the setting table of the communication device to be removed is automatically deleted. Thereby, a user's effort at the time of removing a communication apparatus from a communication system can be reduced. In addition, such an automatic deletion process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In addition, the communication device that has received the deletion request signal from the communication device to be removed, after setting data of the communication device to be removed, that is, after deleting the base identifier and IP address of the communication device to be removed from the setting table, A deletion response signal is transmitted to the communication device to be removed using only the communication device IP address to be removed. Thereby, the communication apparatus removed can grasp | ascertain that the setting deletion of the communication apparatus removed in the communication apparatus which is not removed succeeded by having received the deletion response signal.

  In other words, the fact that the deletion response signal has been received by communication using only the IP address of the communication device to be removed means that the base identifier of the communication device to be removed in the communication device that has received the deletion request signal from the communication device to be removed. It means that communication using is no longer possible. This ensures that the setting data including the base identifier of the communication device to be removed has been successfully deleted in the communication device that has received the deletion request signal from the communication device to be removed.

  Therefore, according to said structure, there exists an effect that the setting deletion of the removed communication apparatus can be reliably performed in the communication apparatus which received the deletion request signal from the removed communication apparatus.

  Moreover, the communication apparatus to which the removed communication apparatus requests its own setting deletion is only one communication apparatus that is not removed. Therefore, the processing amount in the removed communication device can be reduced. In addition, the time until the settings of the removed communication device are deleted from other non-removed communication devices, compared to the case where the removed communication device requests a plurality of non-removed communication devices to delete their settings. An effect that can be shortened can also be expected.

In order to solve the above problems, a communication system according to one aspect of the present invention provides:
A communication system comprising a plurality of communication devices,
Each of the above communication devices
A memory having a setting table in which a plurality of setting data necessary for individually communicating with each of the plurality of communication devices is registered;
The communication device removed from the communication system is:
First deletion request signal transmitting means for transmitting a deletion request signal for requesting setting deletion of the removed communication device to any one of the plurality of communication devices other than the removed communication device; ,
A deletion response signal receiving means for receiving a deletion response signal indicating successful deletion of the setting data of the communication device to be removed;
An initialization means for deleting the setting table from the memory after transmitting the deletion request signal,
Any of the above communication devices
First deletion request signal receiving means for receiving the deletion request signal transmitted from the communication device to be removed;
A first deletion means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A second deletion request signal transmitting means for transmitting the deletion request signal to a communication device other than the communication device to be removed and any one of the communication devices among the plurality of communication devices;
After deleting the setting data for communicating with the communication device to be removed from the setting table, the communication device to be removed using only the IP address of the communication device to be removed as the deletion response signal. And a deletion response signal transmitting means for transmitting to
Each communication device other than the communication device to be removed and any one of the communication devices,
Second deletion request signal receiving means for receiving the deletion request signal transmitted from the outside;
A second deleting means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A third deletion request signal transmitting means for transmitting the deletion request signal to the other communication device that has not received the deletion request signal;
Each of the above communication devices builds the same virtual private network,
Each of the setting data includes at least an IP address of the communication device corresponding to the setting data and a base identifier for identifying the communication device in the virtual private network.

  According to the above configuration, when a certain communication device is to be removed from the communication system, the setting of the certain communication device is automatically deleted from all communication devices other than the certain communication device. In addition, the setting table of the communication device to be removed is automatically deleted. Thereby, a user's effort at the time of removing a communication apparatus from a communication system can be reduced. In addition, such an automatic deletion process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In addition, the communication device that has received the deletion request signal from the communication device to be removed, after setting data of the communication device to be removed, that is, after deleting the base identifier and IP address of the communication device to be removed from the setting table, A deletion response signal is transmitted to the communication device to be removed using only the communication device IP address to be removed. Thereby, the communication apparatus removed can grasp | ascertain that the setting deletion of the communication apparatus removed in the communication apparatus which is not removed succeeded by having received the deletion response signal.

  In other words, the fact that the deletion response signal has been received by communication using only the IP address of the communication device to be removed means that the base identifier of the communication device to be removed in the communication device that has received the deletion request signal from the communication device to be removed. It means that communication using is no longer possible. This ensures that the setting data including the base identifier of the communication device to be removed has been successfully deleted in the communication device that has received the deletion request signal from the communication device to be removed.

  Therefore, according to said structure, there exists an effect that the setting deletion of the removed communication apparatus can be reliably performed in the communication apparatus which received the deletion request signal from the removed communication apparatus.

  Moreover, the communication apparatus to which the removed communication apparatus requests its own setting deletion is only one communication apparatus that is not removed. Therefore, the processing amount in the removed communication device can be reduced. In addition, the time until the settings of the removed communication device are deleted from other non-removed communication devices, compared to the case where the removed communication device requests a plurality of non-removed communication devices to delete their settings. An effect that can be shortened can also be expected.

  Furthermore, the other communication device that has received the deletion request signal requests the setting deletion of the communication device to be removed is only one other communication device that is not removed. That is, one non-removable communication device requests the other non-removable communication device to delete the setting of the removed communication device, and the other non-removable communication device is not removed. The communication device is requested to delete the setting of the communication device to be removed. In this way, the setting deletion request and the setting deletion processing for the communication device to be removed are performed in a chain manner for each communication device that is not removed. As a result, the setting deletion request process is performed by being distributed to each communication device that is not removed, so that the processing load on each communication device that is not removed is reduced.

  The communication system according to one aspect of the present invention does not require a server for communication setting, and enables mutual communication in both an existing communication device in the communication system and a communication device newly added to the communication system. There is an effect that it is possible to reduce the trouble of the user when making the setting.

  In addition, the communication system according to another aspect of the present invention does not require a server for communication setting deletion, and the communication setting related to the communication device removed from the communication system is deleted from the communication device not removed by the user. There is an effect that labor can be reduced.

It is a block diagram which shows the principal part structure of the VPN apparatus newly added to the VPN system which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the principal part structure of the VPN system which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the principal part structure of the 1st existing VPN apparatus which comprises the VPN system which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the principal part structure of the 2nd existing VPN apparatus which comprises the VPN system which concerns on the 1st Embodiment of this invention. (A) shows that each of the two existing VPN devices before the newly added VPN device is added to the VPN system according to the first embodiment or the VPN system according to the second embodiment of the present invention. FIG. 4B is a diagram showing a VPN communication setting table, in which (b) shows that a newly installed VPN device is added to the VPN system according to the first embodiment or the VPN system according to the second embodiment of the present invention. It is a figure which shows the setting table for VPN communication formed in the newly installed VPN apparatus in the middle stage, (c) is a VPN system according to the 1st Embodiment of this invention, or 2nd It is a figure which shows the setting table for VPN communication which a newly installed VPN apparatus and two existing VPN apparatuses each have after adding to the VPN system which concerns on embodiment It is a sequence diagram which shows the flow of a process in each VPN apparatus at the time of adding a new VPN apparatus to the VPN system which concerns on the 1st Embodiment of this invention. It is a sequence diagram which shows the other example of the flow of a process in each VPN apparatus at the time of adding a new VPN apparatus to the VPN system which concerns on the 1st Embodiment of this invention. It is a sequence diagram which shows an example of the flow of a process in each VPN apparatus at the time of adding a new VPN apparatus to the VPN system which concerns on the 2nd Embodiment of this invention. It is a sequence diagram which shows the other example of the flow of a process in each VPN apparatus at the time of adding a new VPN apparatus to the VPN system which concerns on the 2nd Embodiment of this invention. It is a block diagram which shows the principal part structure of the VPN system which concerns on the 3rd Embodiment of this invention. It is a block diagram which shows the principal part structure of the 3rd existing VPN apparatus which comprises the VPN system which concerns on the 3rd Embodiment of this invention. (A) shows the setting table for VPN communication that each of the existing three VPN devices has before the new VPN device is added to the VPN system according to the third embodiment of the present invention. FIG. 7B is a diagram illustrating a VPN communication setting table formed in the newly installed VPN device when the newly installed VPN device is added to the VPN system according to the third embodiment of the present invention. (C) is a diagram showing that the newly installed VPN device and the three existing VPN devices after the newly installed VPN device is added to the VPN system according to the third embodiment of the present invention. It is a figure which shows the setting table for existing VPN communication. It is a sequence diagram which shows an example of the flow of a process in each VPN apparatus at the time of adding a new VPN apparatus to the VPN system which concerns on the 3rd Embodiment of this invention. It is a sequence diagram which shows the other example of the flow of a process in each VPN apparatus at the time of adding a new VPN apparatus to the VPN system which concerns on the 3rd Embodiment of this invention. It is a block diagram which shows the principal part structure of the VPN system which concerns on the 4th Embodiment of this invention. It is a block diagram which shows the principal part structure of the VPN apparatus removed from the VPN system which concerns on the 4th Embodiment of this invention. It is a block diagram which shows the principal part structure of the other VPN apparatus which comprises the VPN system which concerns on the 4th Embodiment of this invention. It is a block diagram which shows the principal part structure of the other VPN apparatus which comprises the VPN system which concerns on the 4th Embodiment of this invention. (A) is a figure which shows the setting table for VPN communication which each VPN apparatus has before a certain VPN apparatus is removed from the VPN system which concerns on the 4th Embodiment of this invention, ( FIG. 6B is a diagram illustrating a VPN communication setting table that each VPN device that is not removed after a certain VPN device is removed from the VPN system according to the fourth embodiment of the present invention. It is a sequence diagram which shows the flow of a process in each VPN apparatus at the time of removing a VPN apparatus from the VPN system which concerns on the 4th Embodiment of this invention. It is a sequence diagram which shows the other example of the flow of a process in each VPN apparatus at the time of removing a VPN apparatus from the VPN system which concerns on the 4th Embodiment of this invention. It is a sequence diagram which shows the flow of a process in each VPN apparatus at the time of removing a VPN apparatus from the VPN system which concerns on the 5th Embodiment of this invention. It is a sequence diagram which shows the other example of the flow of a process in each VPN apparatus at the time of removing a VPN apparatus from the VPN system which concerns on the 5th Embodiment of this invention. It is a block diagram which shows the principal part structure of the VPN system which concerns on the 6th Embodiment of this invention. It is a block diagram which shows the principal part structure of the other VPN apparatus which comprises the VPN system which concerns on the 6th Embodiment of this invention. (A) is a figure which shows the setting table for VPN communication which each VPN apparatus has before a certain VPN apparatus is removed from the VPN system which concerns on the 6th Embodiment of this invention, ( b) is a diagram showing a setting table for VPN communication that each VPN device that is not removed after a certain VPN device is removed from the VPN system according to the sixth embodiment of the present invention. It is a sequence diagram which shows the flow of a process in each VPN apparatus at the time of removing a VPN apparatus from the VPN system which concerns on the 6th Embodiment of this invention. It is a sequence diagram which shows the other example of the flow of a process in each VPN apparatus at the time of removing a VPN apparatus from the VPN system which concerns on the 6th Embodiment of this invention.

Embodiment 1
A first embodiment according to the present invention will be described below with reference to FIGS.

(VPN system 1)
FIG. 2 is a block diagram showing a main configuration of the VPN system 1 according to the first embodiment of the present invention. As shown in this figure, the VPN system 1 includes a VPN device 2 (new communication device), a VPN device 4 (existing communication device), and a VPN device 6 (existing communication device). The VPN device 2, the VPN device 4, and the VPN device 6 are connected to each other through a communication line 10. This communication line is a wide area line of the Internet in this embodiment.

(About VPN)
In the present embodiment, the VPN device 2, the VPN device 4, and the VPN device 6 are all communication devices (for example, routers) for constructing the same virtual private network (VPN). The VPN device 4 and the VPN device 6 have already been added in the VPN system 1 and the same VPN has been constructed. A plurality of PCs 12 are connected to the VPN apparatus 4, and these PCs 12 can communicate with each other through the VPN apparatus 4. On the other hand, a plurality of PCs 12 are also connected to the VPN apparatus 6, and these PCs 12 can communicate with each other through the VPN apparatus 6.

  In this embodiment, arbitrary PCs 12 in the same VPN can communicate with each other. That is, the PC 12 connected to the VPN device 4 and the PC 12 connected to the VPN device 6 can communicate with each other. At that time, the VPN apparatus 4 and the VPN apparatus 6 relay the communication between them. For example, when the PC 12 connected to the VPN device 4 communicates with the PC 12 connected to the VPN device 6, the former PC 12 first transmits communication data to the VPN device 4. The VPN device 4 transmits the received communication data to the VPN device 6. The VPN apparatus 6 analyzes the received communication data and identifies the destination PC 12. Then, communication data is transmitted to the specified PC 12. In this way, communication between the PCs 12 in the same VPN and connected to different VPN devices is realized.

  A VPN apparatus 2 shown in FIG. 1 is newly added to the VPN system 1. When the addition is completed, the VPN apparatus 2 constructs the same VPN together with the VPN apparatus 4 and the VPN apparatus 6. Therefore, if the PC 12 is connected to the VPN apparatus 2, the PC 12 is added to the VPN.

(VPN device 2)
FIG. 1 is a block diagram showing a main configuration of a VPN apparatus 2 newly added to the VPN system 1 according to the first embodiment of the present invention. As shown in this figure, the VPN apparatus 2 includes an input unit 21 (input unit), an authentication unit 22 (authentication request signal transmission unit, authentication result signal reception unit), a setting registration unit 23 (reception unit, writing unit), A setting registration request unit 24 (first registration request signal transmission unit), a local communication unit 25, a wide area communication unit 26 (reception unit), and a setting database 27 are provided. The local communication unit 25 communicates with each PC 12 directly connected to the VPN apparatus 2. The wide area communication unit 26 communicates with the VPN device 4 or the VPN device 6 in the VPN system 1 individually. The setting database 27 is formed in a nonvolatile memory (second memory) (not shown) in the VPN device 2. The setting database 27 may be formed in a volatile memory. Details of the individual members will be described later.

  FIG. 3 is a block diagram showing a main configuration of the VPN apparatus 4 constituting the VPN system 1 according to the first embodiment of the present invention. As shown in this figure, the VPN apparatus 4 includes an input unit 41, an authentication unit 42 (authentication request signal receiving means, authentication means, authentication result signal transmitting means), and a setting registration unit 43 (first registration request signal receiving means, A first registration unit, a transmission unit, a base identifier generation unit), a setting registration request unit 44 (second registration request signal transmission unit), a local communication unit 45, a wide area communication unit 46 (transmission unit), and a setting database 47. I have. The local communication unit 45 communicates with each PC 12 directly connected to the VPN apparatus 4. The wide area communication unit 46 communicates with the VPN device 2 or the VPN device 6 in the VPN system 1 individually. The setting database 47 is formed in a nonvolatile memory (first memory) (not shown) in the VPN device 4. The setting database 47 may be formed in a volatile memory. Details of the individual members will be described later.

  FIG. 4 is a block diagram showing a main configuration of the VPN apparatus 6 constituting the VPN system 1 according to the first embodiment of the present invention. As shown in this figure, the VPN apparatus 6 includes an input unit 61, an authentication unit 62, a setting registration unit 63 (second registration request signal receiving unit, second registration unit), and a setting registration request unit 64 (third Registration request signal transmission means), a local communication unit 65, a wide area communication unit 66, and a setting database 67. The local communication unit 65 communicates with each PC 12 directly connected to the VPN device 6. The wide area communication unit 66 communicates with the VPN device 2 or the VPN device 4 in the VPN system 1 individually. The setting database 67 is formed in a nonvolatile memory (not shown) in the VPN device 6. The setting database 67 may be formed in a volatile memory. Details of the individual members will be described later.

  As will be described in detail later, in the present embodiment, the VPN apparatus 2 requests both the VPN apparatus 4 and the VPN apparatus 6 to register the setting of the VPN apparatus 2. Therefore, in the present embodiment, the setting registration request unit 24 corresponds to both the first registration request signal transmission unit and the second registration request signal transmission unit described in the claims.

(Setting table)
FIG. 5A shows a VPN communication setting table that the VPN apparatus 4 and the VPN apparatus 6 have before the VPN apparatus 2 is added to the VPN system 1 according to the first embodiment of the present invention. FIG. In this setting table, a plurality of setting data necessary for individually communicating with a plurality of existing VPN apparatuses in the VPN system 1 are registered. Specifically, in the setting table shown in FIG. 5A, the base ID, base name, and IP address of the VPN apparatus 4 are registered in association with each other. This base ID is an identifier for identifying the VPN apparatus 4 in the VPN system 1 which is the same VPN. These IP addresses and base IDs are a kind of setting data necessary for communicating with the VPN apparatus 4. In the VPN system 1, a unique base ID is assigned to each added VPN device. In this embodiment, the value of the base ID of the VPN apparatus 4 is “1”.

  Note that the value of the base ID of the VPN device 4 is not necessarily a numerical value, and may be any character string that can identify the VPN device 4. Further, the site name of the VPN device 4 may serve as a site ID. In other words, the base name (VPN-4) can be used as the base ID.

  In the setting table shown in FIG. 5A, the base ID, base name, and IP address of the VPN apparatus 6 are also registered in association with each other. This base ID is an identifier for identifying the VPN apparatus 6 in the VPN system 1 which is the same VPN. These IP address and base ID are a kind of setting data necessary for communicating with the VPN apparatus 6. In the present embodiment, the value of the base ID of the VPN device 6 is “2”.

  Note that the value of the base ID of the VPN device 6 is not necessarily a numerical value, and may be any character string that can identify the VPN device 6. Further, the base name of the VPN device 6 may serve as a base ID. In other words, the site name (VPN-6) can be used as the site ID.

  Before the VPN apparatus 2 is added to the VPN system 1, the setting database 47 of the VPN apparatus 4 is provided with a setting table shown in FIG. The VPN apparatus 4 can communicate with the VPN apparatus 6 by using the IP address and base ID of the VPN apparatus 6 registered in this setting table. On the other hand, before the VPN apparatus 2 is added to the VPN system 1, the setting database 67 of the VPN apparatus 6 is also provided with the setting table shown in FIG. The VPN apparatus 6 can communicate with the VPN apparatus 4 by using the IP address and base ID of the VPN apparatus 4 registered in this setting table.

  On the other hand, before the VPN apparatus 2 is added to the VPN system 1, the setting database 27 of the VPN apparatus 2 is not provided with the setting table shown in FIG. Therefore, the VPN apparatus 2 cannot communicate with the VPN apparatus 4 and the VPN apparatus 6 individually. As will be described in detail later, in the middle of adding the VPN apparatus 2 to the VPN system 1, a setting table shown in FIG. 5B is formed in the setting database 27 of the VPN apparatus 2. FIG. 5B is a diagram showing a VPN communication setting table formed in the VPN apparatus 2 in the middle of adding the VPN apparatus 2 to the VPN system 1 according to the first embodiment of the present invention. .

  FIG. 5C shows VPNs that the VPN device 2, the VPN device 4, and the VPN device 6 have after the VPN device 2 is added to the VPN system 1 according to the first embodiment of the present invention. It is a figure which shows the setting table for communication (a 1st setting table, a 2nd setting table, a 3rd setting table). As will be described in detail later, when the VPN apparatus 2 is added to the VPN system 1, the IP address, base ID, and base name of the VPN apparatus 2 are automatically displayed in the setting table in the setting database 47 of the VPN apparatus 4. be registered. In the present embodiment, the value of the base ID of the VPN device 2 is “3”. Similarly, the IP address and base ID of the VPN apparatus 2 are automatically registered in the setting table in the setting database 67 of the VPN apparatus 6. Further, the setting table shown in FIG. 5C is automatically formed in the setting table in the setting database 27 of the VPN apparatus 2. In this way, the VPN device 2, the VPN device 4, and the VPN device 6 each have exactly the same setting table. As a result, these devices can perform one-to-one communication with each other using the data in the setting table.

  Note that the value of the base ID of the VPN device 2 is not necessarily a numerical value, and may be any character string that can identify the VPN device 2. Further, the site name of the VPN device 2 may serve as a site ID. In other words, the site name (VPN-2) can be used as the site ID.

(Addition of VPN device 2)
FIG. 6 is a sequence diagram showing a flow of processing in the VPN apparatus 2, the VPN apparatus 4, and the VPN apparatus 6 when a new VPN apparatus 2 is added to the VPN system 1 according to the first embodiment of the present invention. is there.

  The user of the VPN device 2 inputs the IP address and base ID of the VPN device 2 through the input unit 21 of the VPN device 2 in advance. The user can input the IP address and base ID using an input device such as a keyboard. Alternatively, an IP address and a base ID can be prepared in an external memory such as a USB memory, and the VPN apparatus 2 can read the IP address and the base ID from this external memory. That is, the VPN apparatus 2 is provided in advance with the IP address and base ID of the VPN apparatus 2 in some form.

  The user also inputs the IP address of any existing VPN device (in the example of FIG. 6, the VPN device 4) in the VPN system 1 through the input unit 21 of the VPN device 2. This IP address is a kind of setting data necessary for communicating with the VPN apparatus 4. The VPN device 2 can communicate with the VPN device 4 by using the IP address of the VPN device 4.

  Referring to FIG. 6, first, the user connects VPN device 2 to communication line 10, and further turns on power to VPN device 2 (step S1). Thereby, the VPN apparatus 2 is started. After the start-up is completed, the VPN device 2 requests the VPN device 4 for setting registration of the VPN device 2 (step S2). At this time, the setting registration request unit 24 generates a registration request signal that includes the IP address and base ID of the VPN device 2 and requests registration of the VPN device 2. The setting registration request unit 24 outputs the generated registration request signal to the wide area communication unit 26. The wide area communication unit 26 transmits a registration request signal to the VPN apparatus 4 using the IP address of the VPN apparatus 4.

(Register VPN device 2 in VPN device 4)
The registration request signal transmitted from the VPN device 2 is received by the wide area communication unit 46 of the VPN device 4 and output to the setting registration unit 43. At this time, the setting database 47 stores the setting table shown in FIG. The setting registration unit 43 registers the setting of the VPN device 2 (step S3). At that time, the setting registration unit 43 registers the IP address and base ID of the VPN apparatus 2 included in the received registration request signal in the setting table in the setting database 47. Thereby, the setting table in the setting database 47 is updated from that shown in FIG. 5A to that shown in FIG.

  After the registration of the VPN device 2 is completed, the VPN device 4 notifies the VPN device 2 to that effect (step S4). Specifically, the wide area communication unit 46 transmits a registration completion signal indicating that the registration of the VPN device 2 is completed to the VPN device 2. At that time, the wide area communication unit 46 reads the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 4 from the setting table in the setting database 47 and includes them in the registration completion signal.

  The wide area communication unit 26 of the VPN apparatus 2 receives the registration completion signal and outputs it to the setting registration unit 23. The setting registration unit 23 acquires the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 4 included in the registration completion signal, and stores a setting table including these in the setting database 27. Form. Thereby, a setting table shown in FIG. 5B is formed in the setting database 27. As a result, the VPN apparatus 2 registers the settings for individually communicating with the VPN apparatus 4 in the VPN apparatus 2.

  After forming the setting table, the VPN apparatus 2 requests the VPN apparatus 4 to read the setting table in the VPN apparatus 4 (step S5). Specifically, the setting registration unit 23 generates a signal for requesting reading of the setting table and outputs the signal to the wide area communication unit 26. The wide area communication unit 26 transmits this signal to the VPN device 4. The wide area communication unit 46 of the VPN apparatus 4 receives this signal. Thereby, the wide area communication unit 46 reads the setting table in the setting database 47 and transmits it to the VPN apparatus 2 (step S6).

  The wide area communication unit 26 of the VPN device 2 receives the setting table transmitted from the VPN device 4. The wide area communication unit 26 outputs the received setting table to the setting registration unit 23. The setting registration unit 23 writes the received setting table in the setting database 27. At that time, the current setting table in the setting database 27 is updated to the received setting table. As a result, the setting table in the setting database 27 is replaced with that shown in FIG. 5C from that shown in FIG. Thereby, the VPN apparatus 2 registers the setting for communicating with the VPN apparatus 6 in the VPN apparatus 2 (step S7).

(Register the VPN device 2 in the VPN device 6)
After completing the setting registration, the VPN apparatus 2 requests setting registration of the VPN apparatus 2 from the VPN apparatus 6 that exists in the VPN system 1 and is different from the VPN apparatus 4 (step S8). At that time, the setting registration request unit 24 outputs a registration request signal to the wide area communication unit 26. The wide area communication unit 26 acquires the IP address of the VPN device 6 from the setting table in the setting database 27. Then, the wide area communication unit 26 transmits a registration request signal to the VPN device 6 using the acquired IP address of the VPN device 6.

  The wide area communication unit 66 of the VPN device 6 receives the registration request signal transmitted from the VPN device 2 and outputs it to the setting registration unit 63. At this time, the setting database 67 stores the setting table shown in FIG. The setting registration unit 63 registers the setting of the VPN device 2 (step S9). At that time, the setting registration unit 63 registers the IP address and base ID of the VPN device 2 included in the received registration request signal in the setting table in the setting database 67. As a result, the setting table in the setting database 67 is updated from that shown in FIG. 5A to that shown in FIG.

  After completing the registration of the VPN device 2, the VPN device 6 notifies the VPN device 2 to that effect (step S10). Specifically, the wide area communication unit 66 transmits a signal indicating that the registration of the VPN device 2 is completed to the VPN device 2.

(Function and effect)
As described above, in the VPN system 1 of the present embodiment, when adding a new VPN device 2 to the VPN system 1, the VPN device 2 is automatically registered in all existing VPN devices 4 and 6. Is done. Further, a setting table in which the VPN device 4 and the VPN device 6 are registered is automatically provided to the VPN device 2. Thereby, a user's effort at the time of adding the newly installed VPN apparatus 2 to the VPN system 1 can be reduced. In addition, such an automatic registration process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In the VPN system 1 according to the present embodiment, the existing VPN devices are only two VPN devices 4 and 6. However, there may be three or more existing VPN devices. Even in this case, the VPN apparatus 2 uses the IP address and the base identifier for each existing VPN apparatus registered in the setting table provided from the VPN apparatus 4 in order to each existing VPN apparatus. In order, registration of the VPN apparatus 2 is requested. Thereby, the VPN apparatus 2 can be automatically registered with respect to all (three or more) existing VPN apparatuses existing in the VPN system 1.

(Enter base ID of VPN device 4)
In the present embodiment, the user inputs the IP address of the VPN device 4 in advance to the VPN device 2, but does not input the base ID of the VPN device 4. However, the user may input the base ID of the VPN apparatus 4 in advance. At that time, the setting registration unit 23 immediately forms a setting table including the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 4 input by the user in the setting database 27. As a result, before the VPN apparatus 2 requests the VPN apparatus 4 to perform setting registration, the VPN apparatus 2 is set for VPN communication with the VPN apparatus 4. In this case, the wide area communication unit 46 transmits to the VPN device 2 a registration completion signal not including the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 6 in step S4.

(Enter only the IP address)
In the present embodiment, the user inputs the IP address and base ID of the VPN device 2 in advance to the VPN device 2. However, even if the user inputs only the IP address of the VPN apparatus 2 and does not input the base ID of the VPN apparatus 2, the VPN apparatus 2 is added to the VPN system 1 without any problem.

  When the user does not input the base ID of the VPN apparatus 2, the process shown in FIG. 6 is changed as follows. First, in step S2, the setting registration request unit 24 generates a registration request signal that includes the IP address of the VPN device 2 but does not include the base ID of the VPN device 2. In step S3, the setting registration unit 43 acquires only the IP address of the VPN apparatus 2 from the received registration request signal. Next, the setting registration unit 43 refers to the setting table in the setting database 47 and identifies one value different from the values of all registered base IDs. For example, since “1” and “2” are registered as base ID values in the setting table shown in FIG. 5A, “3” different from these is specified. Then, this value is determined to be the base ID of the VPN apparatus 2. Thereby, the setting registration unit 43 registers the IP address of the VPN device 2 acquired from the registration request signal and the base ID of the VPN device 2 determined by itself in the setting table in the setting database 47. As a result, the setting table in the setting database 47 is updated from that shown in FIG. 5A to that shown in FIG.

  The process in step S4 is not changed. That is, the wide area communication unit 46 reads the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 4 from the setting table in the setting database 47 and includes them in the registration completion signal. As a result, the base ID of the VPN device 2 that the user has not input in advance is provided to the VPN device 2. As a result, the VPN apparatus 2 can automatically acquire the base ID of the VPN apparatus 2 and register it in itself even though the base ID of the VPN apparatus 2 is not input by the user.

  In step S8 of FIG. 6, the setting registration request unit 24 acquires the base ID of the VPN apparatus 2 registered in the setting table in the setting database 27, and generates a registration request signal including this. As a result, a registration request signal including the IP address and base ID of the VPN device 2 is transmitted to the VPN device 6. Therefore, the VPN apparatus 6 does not need to determine the base ID of the VPN apparatus 2 by itself. That is, the IP address and base ID of the VPN device 2 included in the received registration request signal may be registered in the setting table in the setting database 67.

  According to the above configuration, as long as the user inputs the IP address of the VPN device 2 to the VPN device 2, the base ID for the VPN device 2 is automatically generated. Further, the IP address and base ID of the VPN device 2 are registered in the VPN device 4 and the VPN device 6. The VPN device 2 is provided with a setting table including the base ID of the VPN device 2. Therefore, since the user can save time and effort for inputting the base identifier for the VPN apparatus 2, the user's time and labor can be further reduced.

  In step S2, the setting registration request unit 24 may include a base ID having a value of “0” in the registration request signal to be generated. This base ID is a temporary base ID dedicated to registration, and is not used when VPN devices perform VPN communication. It is used only when the VPN apparatus 2 and the VPN apparatus 4 communicate with each other in order to register the VPN apparatus 2 in the VPN apparatus 4. Even when the registration request signal includes a base ID having a value of “0”, the setting registration unit 43 of the VPN device 4 determines a value that is not registered in the setting table at all as the value of the base ID for the VPN device 2. To do.

(Authentication process)
FIG. 7 is a sequence diagram illustrating another example of the processing flow in the VPN apparatus 2, the VPN apparatus 4, and the VPN apparatus 6 when the VPN apparatus 2 is added to the VPN system 1 according to the first embodiment of the present invention. FIG. In the example of this figure, an authentication process is performed between the VPN device 2 and the VPN device 4 before registering the VPN device 2 in the VPN device 4. Further, before registering the VPN apparatus 2 in the VPN apparatus 6, an authentication process is also performed between the VPN apparatus 2 and the VPN apparatus 6. By these authentication processes, it is possible to prevent an unauthorized VPN apparatus 2 from being added to the VPN system 1 beforehand.

  Referring to FIG. 7, when the user turns on the power of VPN device 2 (step S11), VPN device 2 first authenticates VPN device 2 before sending a registration request signal to VPN device 4. Request is made to the device 4 (step S12). At this time, the authentication unit 22 of the VPN apparatus 2 generates an authentication request signal that includes authentication data (authentication ID and password) used for the authentication process of the VPN apparatus 2 and requests authentication of the VPN apparatus 2, The data is output to the communication unit 26. These authentication ID and password are for authenticating the connection to the VPN system 1 and are prepared in advance in the VPN apparatus 2. The user of the VPN apparatus 2 inputs these authentication ID and password through the input unit 21 of the VPN apparatus 2 in advance. Thereby, the input authentication ID and password are stored in a nonvolatile memory (not shown) in the VPN apparatus 2. Note that the input authentication ID and password may be stored in a volatile memory. The wide area communication unit 26 transmits an authentication request signal to the VPN apparatus 4 using the IP address of the VPN apparatus 4 input by the user.

  The wide area communication unit 46 of the VPN apparatus 4 receives the authentication request signal transmitted from the VPN apparatus 2. The wide area communication unit 46 outputs the received authentication request signal to the authentication unit 42. The authentication unit 42 acquires the authentication ID and password in the authentication request signal. Further, an authentication ID and password for authenticating the connection to the VPN system 1, which are prepared in a non-illustrated non-volatile memory (or volatile memory) in the VPN device 4, are read. Then, the authentication IDs and the passwords are compared, and it is determined whether or not they match each other. If both match, the authentication unit 42 authenticates the VPN device 2.

  When the VPN device 4 succeeds in authenticating the VPN device 2, the VPN device 4 notifies the VPN device 2 to that effect (step S13). Specifically, the authentication unit 42 generates an authentication result signal indicating that the VPN device 2 has been authenticated, and outputs it to the wide area communication unit 46. The wide area communication unit 46 transmits an authentication result signal to the VPN device 2.

  The wide area communication unit 26 of the VPN device 2 receives the authentication result signal transmitted from the VPN device 4. The wide area communication unit 26 outputs the received authentication result signal to the authentication unit 22. The authentication unit 22 analyzes the authentication result signal and specifies that the authentication of the VPN device 2 has succeeded. As a result, the authentication unit 22 notifies the setting registration request unit 24 that the VPN device 2 has been authenticated by the VPN device 4. In response, the setting registration request unit 24 requests the VPN apparatus 4 to register the VPN apparatus 2 (step S14). The processing from step S14 to S19 shown in FIG. 7 is the same as the processing from S2 to S7 shown in FIG.

  After the setting table shown in FIG. 5C is provided in the setting database 27, the VPN apparatus 2 requests the VPN apparatus 6 to authenticate the VPN apparatus 2 before sending the registration request signal to the VPN apparatus 6 (step). S20). At this time, the authentication unit 22 of the VPN apparatus 2 generates an authentication request signal that includes authentication data (authentication ID and password) used for the authentication process of the VPN apparatus 2 and requests authentication of the VPN apparatus 2, The data is output to the communication unit 26. The wide area communication unit 26 transmits an authentication request signal to the VPN apparatus 6 using the IP address and base ID of the VPN apparatus 6 registered in the setting table in the setting database 27.

  The wide area communication unit 66 of the VPN device 6 receives the authentication request signal transmitted from the VPN device 2. The wide area communication unit 66 outputs the received authentication request signal to the authentication unit 62. The authentication unit 62 acquires the authentication ID and password in the authentication request signal. Further, an authentication ID and password for authenticating the connection to the VPN system 1, which are prepared in a non-illustrated non-volatile memory (or volatile memory) in the VPN device 6, are read. Then, the authentication IDs and the passwords are compared, and it is determined whether or not they match each other. If both match, the authentication unit 62 authenticates the VPN device 2.

  When the VPN device 6 succeeds in authenticating the VPN device 2, the VPN device 6 notifies the VPN device 2 to that effect (step S21). Specifically, the authentication unit 62 generates an authentication result signal indicating that the VPN device 2 has been authenticated, and outputs it to the wide area communication unit 66. The wide area communication unit 66 transmits an authentication result signal to the VPN device 2.

  The wide area communication unit 26 of the VPN device 2 receives the authentication result signal transmitted from the VPN device 6. The wide area communication unit 26 outputs the received authentication result signal to the authentication unit 22. The authentication unit 22 analyzes the authentication result signal and specifies that the authentication of the VPN device 2 in the VPN device 6 is successful. As a result, the authentication unit 22 notifies the setting registration request unit 24 that the VPN device 2 has been authenticated by the VPN device 6. In response to this, the setting registration request unit 24 requests the VPN device 6 to register the VPN device 2 (step S22). The processing from step S22 to S24 shown in FIG. 7 is the same as the processing from S8 to S10 shown in FIG.

(Intermediate stage setting table)
In the present embodiment and each modification thereof, the VPN apparatus 2 does not have to form the setting table in the intermediate stage shown in FIG. In this case, in step S <b> 6, the VPN apparatus 4 provides the VPN apparatus 2 with a setting table including setting data for all VPN apparatuses. In step S7, the VPN apparatus 2 writes the setting table provided from the VPN apparatus 4 in the setting database 27 in which the setting table shown in FIG. 5B is not formed. As a result, in step S7, settings for individually communicating with the VPN apparatus 4 and settings for individually communicating with the VPN apparatus 6 are performed on the VPN apparatus 2 at once.

[Embodiment 2]
A second embodiment according to the present invention will be described below with reference to FIGS. In addition, the same code | symbol is attached | subjected to each member which is common in 1st Embodiment mentioned above, and detailed description is abbreviate | omitted.

  The configuration of the VPN system 1 in the present embodiment is the same as that of the first embodiment. However, the processing procedure when registering the VPN apparatus 2 in the VPN apparatus 4 and the VPN apparatus 6 is different from that in the first embodiment. In the present embodiment, the VPN device 2 requests only the VPN device 4 to register the VPN device 2. On the other hand, not the VPN device 2 but the VPN device 4 requests the VPN device 6 to register the VPN device 2. Therefore, in the present embodiment, the setting registration request unit 24 corresponds to the first registration request signal transmission unit described in the claims, while the setting registration request unit 44 includes the first registration request signal transmission unit described in the claims. 2 corresponds to the registration request signal transmission means.

(Addition of VPN device 2)
FIG. 8 shows an example of a processing flow in the VPN device 2, the VPN device 4, and the VPN device 6 when a new VPN device 2 is added to the VPN system 1 according to the second embodiment of the present invention. It is a sequence diagram.

  Since the processes from steps S31 to S37 in FIG. 8 are the same as the processes from steps S1 to S7 in FIG. 6, detailed description thereof is omitted. The VPN apparatus 4 registers the IP address and base ID of the VPN apparatus 2 in the setting table in step S33, and then transmits the VPN apparatus 2 to the VPN apparatus 6 existing in the VPN system 1 and different from the VPN apparatus 4. A setting registration is requested (step S38). At that time, the setting registration request unit 44 reads the IP address and base ID of the VPN apparatus 2 from the setting table. Then, a registration request signal that includes these IP addresses and base IDs and requests registration of the VPN device 2 is generated. The setting registration request unit 44 outputs the generated setting registration request signal to the wide area communication unit 46. The wide area communication unit 46 acquires the IP address of the VPN device 6 from the setting table in the setting database 47. Then, the wide area communication unit 46 transmits a registration request signal to the VPN device 6 using the acquired IP address of the VPN device 6.

  The wide area communication unit 66 of the VPN device 6 receives the registration request signal transmitted from the VPN device 4 and outputs it to the setting registration unit 63. At this time, the setting database 67 stores the setting table shown in FIG. The setting registration unit 63 registers the setting of the VPN device 2 in the VPN device 6 (step S39). At that time, the setting registration unit 63 registers the IP address and base ID of the VPN device 2 included in the received registration request signal in the setting table in the setting database 67. As a result, the setting table in the setting database 67 is updated from that shown in FIG. 5A to that shown in FIG.

  After completing the registration of the VPN device 2, the VPN device 6 notifies the VPN device 4 to that effect (step S40). Specifically, the wide area communication unit 66 transmits a signal indicating that the registration of the VPN device 2 is completed to the VPN device 4.

(Function and effect)
As described above, also in the VPN system 1 of the present embodiment, when trying to add a new VPN device 2 to the VPN system 1, the VPN device 2 automatically adds to all the existing VPN devices 4 and VPN devices 6. be registered. Further, a setting table in which the VPN device 4 and the VPN device 6 are registered is automatically provided to the VPN device 2. Thereby, a user's effort at the time of adding the newly installed VPN apparatus 2 to a communication system can be reduced. In addition, such an automatic registration process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  Further, in the VPN system 1 of the present embodiment, the VPN apparatus 4 is the only party to which the VPN apparatus 2 requests its registration. Therefore, the processing amount in the VPN apparatus 2 can be reduced. In addition, compared with the case where the VPN device 2 requests its registration to both the VPN device 4 and the VPN device 6, it can be expected that the time until the VPN device 2 is registered in the VPN device 6 can be shortened. .

  In the VPN system 1 according to the present embodiment, the existing VPN devices are only two VPN devices 4 and 6. However, there may be three or more existing VPN devices. Even in this case, the VPN apparatus 4 sequentially registers the VPN apparatus 2 with respect to each existing VPN apparatus using the IP address and base identifier for each existing VPN apparatus registered in the setting table in order. Request. Thereby, the VPN apparatus 2 can be automatically registered with respect to all (three or more) existing VPN apparatuses existing in the VPN system 1.

(Enter only the IP address)
In the present embodiment, the user inputs the IP address and base ID of the VPN device 2 in advance to the VPN device 2. However, even if the user inputs only the IP address of the VPN apparatus 2 and does not input the base ID of the VPN apparatus 2, the VPN apparatus 2 is added to the VPN system 1 without any problem.

  When the user does not input the base ID of the VPN apparatus 2, the process shown in FIG. 8 is changed as follows. First, in step S32, the setting registration request unit 24 generates a registration request signal that includes the IP address of the VPN device 2 but does not include the base ID of the VPN device 2. In step S33, the setting registration unit 43 acquires only the IP address of the VPN apparatus 2 from the received registration request signal. Next, the setting registration unit 43 refers to the setting table in the setting database 47 and identifies one value different from the values of all registered base IDs. For example, since “1” and “2” are registered as base ID values in the setting table shown in FIG. 5A, “3” different from these is specified. Then, this value is determined to be the base ID of the VPN apparatus 2. Thereby, the setting registration unit 43 registers the IP address of the VPN device 2 acquired from the registration request signal and the base ID of the VPN device 2 determined by itself in the setting table in the setting database 47. As a result, the setting table in the setting database 47 is updated from that shown in FIG. 5A to that shown in FIG.

  The process in step S34 is not different from the process in step S4. That is, the wide area communication unit 46 reads the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 4 from the setting table in the setting database 47 and includes them in the registration completion signal. As a result, the base ID of the VPN device 2 that the user has not input in advance is provided to the VPN device 2. The VPN apparatus 2 can automatically acquire the base ID of the VPN apparatus 2 and register it to itself, even though the base ID of the VPN apparatus 2 is not input by the user.

  In step S38 of FIG. 8, the setting registration request unit 44 acquires the IP address and base ID of the VPN apparatus 2 registered in the setting table in the setting database 47, and generates a registration request signal including these. As a result, a registration request signal including the IP address and base ID of the VPN device 2 is transmitted from the VPN device 4 to the VPN device 6. Therefore, the VPN apparatus 6 does not need to determine the base ID of the VPN apparatus 2 by itself. That is, the IP address and base ID of the VPN device 2 included in the received registration request signal may be registered in the setting table in the setting database 67.

  According to the above configuration, as long as the user inputs the IP address of the VPN device 2 to the VPN device 2, the base ID for the VPN device 2 is automatically generated. Further, the IP address and base ID of the VPN device 2 are registered in the VPN device 4 and the VPN device 6. The VPN device 2 is provided with a setting table including the base ID of the VPN device 2. Therefore, since the user can save time and effort for inputting the base identifier for the VPN apparatus 2, the user's time and labor can be further reduced.

  In step S32, the setting registration request unit 24 may include the base ID having a value of “0” in the registration request signal to be generated. This base ID is a temporary base ID dedicated to registration, and is not used when VPN devices perform VPN communication. It is used only when the VPN apparatus 2 and the VPN apparatus 4 communicate with each other in order to register the VPN apparatus 2 in the VPN apparatus 4. Even when the registration request signal includes a base ID having a value of “0”, the setting registration unit 43 of the VPN device 4 determines a value that is not registered in the setting table at all as the value of the base ID for the VPN device 2. To do.

(Authentication process)
FIG. 9 is a sequence diagram illustrating another example of the processing flow in the VPN apparatus 2, the VPN apparatus 4, and the VPN apparatus 6 when the VPN apparatus 2 is added to the VPN system 1 according to the second embodiment of the present invention. FIG. In the example of this figure, an authentication process is performed between the VPN device 2 and the VPN device 4 before registering the VPN device 2 in the VPN device 4. This authentication process can prevent an unauthorized VPN device 2 from being added to the VPN system 1 in advance. In the example of FIG. 9, it is assumed that the authentication process is completed between the VPN apparatus 4 and the VPN apparatus 6 before the VPN apparatus 2 transmits a registration request signal to the VPN apparatus 4.

  Since the processes from steps S41 to S49 shown in FIG. 9 are the same as the processes from steps S11 to S19 shown in FIG. 7, detailed description thereof is omitted. When the processing in step S45 is completed, the setting registration request unit 44 of the VPN apparatus 4 is notified in advance that the VPN apparatus 4 has been authenticated by the VPN apparatus 6. That is, since the authentication process has already been completed between the VPN device 4 and the VPN device 6, the VPN device 4 does not require the VPN device 6 to authenticate the VPN device 4 again at this timing, and the VPN device 2. Is requested to the VPN apparatus 6. The processing from step S50 to S52 shown in FIG. 9 is the same as the processing from step S38 to S40 shown in FIG.

  After the process of step S49 is completed, the VPN apparatus 2 requests the VPN apparatus 6 for authentication of the VPN apparatus 2 in order to communicate with the VPN apparatus 6 (step S53). The processing from step S53 to S54 is the same as the processing from step S20 to S21 shown in FIG. After the process of step S54 is completed, the VPN apparatus 2 can normally communicate with the VPN apparatus 6.

[Embodiment 3]
A third embodiment according to the present invention will be described below with reference to FIGS. In addition, the same code | symbol is attached | subjected to each member which is common in 1st Embodiment or 2nd Embodiment mentioned above, and detailed description is abbreviate | omitted.

  FIG. 10 is a block diagram showing a main configuration of the VPN system 1a according to the present embodiment. As shown in this figure, the VPN system 1a includes a VPN device 2, a VPN device 4, a VPN device 6, and a VPN device 8 (existing communication device). The VPN device 2, the VPN device 4, the VPN device 6, and the VPN device 8 are connected to each other through a communication line 10. Since the configurations of the VPN device 2, the VPN device 4, and the VPN device 6 are the same as those of the first embodiment described above, detailed description thereof is omitted.

  In the present embodiment, the VPN device 8 is a communication device (for example, a router) for constructing the same virtual private network (VPN) with other VPN devices. The VPN apparatus 8 has already been added to the VPN system 1a, and a VPN has been constructed. A plurality of PCs 12 are connected to the VPN apparatus 8, and these PCs 12 can communicate with each other via the VPN apparatus 8.

  The VPN apparatus 2 shown in FIG. 10 is newly added to the VPN system 1a. When the addition is completed, the VPN apparatus 2 constructs the same VPN together with the VPN apparatus 4, the VPN apparatus 6, and the VPN apparatus 8.

(VPN device 8)
FIG. 11 is a block diagram showing a main configuration of the VPN apparatus 8 constituting the VPN system 1a according to the third embodiment of the present invention. As shown in this figure, the VPN apparatus 8 includes an input unit 81, an authentication unit 82, a setting registration unit 83 (third registration request signal receiving unit, third registration unit), and a setting registration request unit 84 (fourth registration unit). Registration request signal transmission means), a local communication unit 85, a wide area communication unit 86, and a setting database 87. The local communication unit 85 communicates with each PC 12 directly connected to the VPN device 8. The wide area communication unit 86 individually communicates with the VPN device 4, the VPN device 6, or the VPN device 8 in the VPN system 1a. The setting database 87 is formed in a non-illustrated nonvolatile memory (fourth memory) in the VPN apparatus 8. The setting database 87 may be formed in a volatile memory. Details of the individual members will be described later.

  Although described in detail later, in the present embodiment, the VPN apparatus 2 requests only the VPN apparatus 4 to register the VPN apparatus 2. The VPN device 4 requests only the VPN device 6 to register the VPN device 2. The VPN device 6 requests only the VPN device 8 to register the VPN device 2. Accordingly, in the present embodiment, the setting registration request unit 24 corresponds to the first registration request signal transmission unit described in the claims, and the setting registration request unit 44 includes the second registration request signal transmission unit described in the claims. Corresponding to the registration request signal transmission means, the setting registration request section 64 corresponds to the third registration request signal transmission means described in the claims.

(Setting table)
FIG. 12A shows VPNs that the VPN device 4, the VPN device 6, and the VPN device 8 have before the VPN device 2 is added to the VPN system 1a according to the third embodiment of the present invention. It is a figure which shows the setting table for communication. In this setting table, a plurality of setting data necessary for individually communicating with a plurality of existing VPN apparatuses in the VPN system 1a are registered. Specifically, in the setting table shown in FIG. 12A, the base ID, base name, and IP address of the VPN apparatus 4 are registered in association with each other. This base ID is an identifier for identifying the VPN apparatus 4 in the VPN system 1a which is the same VPN. These IP addresses and base IDs are a kind of setting data necessary for communicating with the VPN apparatus 4. In the VPN system 1a, a unique base ID is assigned to each added VPN device. In this embodiment, the value of the base ID of the VPN apparatus 4 is “1”.

  Note that the value of the base ID of the VPN device 4 is not necessarily a numerical value, and may be any character string that can identify the VPN device 4. Further, the site name of the VPN device 4 may serve as a site ID. In other words, the base name (VPN-4) can be used as the base ID.

  In the setting table shown in FIG. 12A, the base ID, base name, and IP address of the VPN apparatus 6 are also registered in association with each other. This base ID is an identifier for identifying the VPN apparatus 6 in the VPN system 1a which is the same VPN. These IP address and base ID are a kind of setting data necessary for communicating with the VPN apparatus 6. In the present embodiment, the value of the base ID of the VPN device 6 is “2”.

  Note that the value of the base ID of the VPN device 6 is not necessarily a numerical value, and may be any character string that can identify the VPN device 6. Further, the base name of the VPN device 6 may serve as a base ID. In other words, the site name (VPN-6) can be used as the site ID.

  In the setting table shown in FIG. 12A, the base ID, base name, and IP address of the VPN device 8 are also registered in association with each other. This base ID is an identifier for identifying the VPN apparatus 8 in the VPN system 1a which is the same VPN. These IP address and base ID are a kind of setting data necessary for communicating with the VPN apparatus 8. In the present embodiment, the value of the base ID of the VPN apparatus 8 is “3”.

  Note that the value of the base ID of the VPN device 8 is not necessarily a numerical value, and may be any character string that can identify the VPN device 8. Further, the site name of the VPN device 8 may serve as a site ID. In other words, the site name (VPN-8) can be used as the site ID.

  On the other hand, before the VPN apparatus 2 is added to the VPN system 1a, the setting database 27 of the VPN apparatus 2 is not provided with the setting table shown in FIG. Therefore, the VPN apparatus 2 cannot communicate with the VPN apparatus 4, the VPN apparatus 6, and the VPN apparatus 8 individually. As will be described in detail later, in the middle of adding the VPN apparatus 2 to the VPN system 1a, a setting table shown in FIG. 12B is formed in the setting database 27 of the VPN apparatus 2. FIG. 12B is a diagram showing a VPN communication setting table formed in the VPN apparatus 2 in the middle of adding the VPN apparatus 2 to the VPN system 1a according to the third embodiment of the present invention. .

  FIG. 12 (c) shows that the VPN apparatus 2, the VPN apparatus 4, the VPN apparatus 6, and the VPN apparatus 8 after the VPN apparatus 2 is added to the VPN system 1a according to the third embodiment of the present invention. It is a figure which shows the setting table (1st setting table, 2nd setting table, 3rd setting table) for the VPN communication currently performed. As will be described in detail later, when the VPN apparatus 2 is added to the VPN system 1a, the IP table, the base ID, and the base name of the VPN apparatus 2 are automatically displayed in the setting table in the setting database 47 of the VPN apparatus 4. be registered. In the present embodiment, the value of the base ID of the VPN device 2 is “4”. Similarly, the IP address and base ID of the VPN apparatus 2 are automatically registered in the setting table in the setting database 67 of the VPN apparatus 6. Further, the IP address and base ID of the VPN apparatus 2 are automatically registered in the setting table in the setting database 87 of the VPN apparatus 8.

  Also, the setting table shown in FIG. 12C is generated in the setting table in the setting database 27 of the VPN apparatus 2. In this way, the VPN device 2, the VPN device 4, the VPN device 6, and the VPN device 8 each have exactly the same setting table. As a result, these devices can perform one-to-one communication with each other using the data in the setting table.

(Addition of VPN device 2)
FIG. 13 shows the flow of processing in the VPN apparatus 2, VPN apparatus 4, VPN apparatus 6, and VPN apparatus 8 when adding a new VPN apparatus 2 to the VPN system 1a according to the third embodiment of the present invention. FIG.

  The user of the VPN device 2 inputs the IP address and base ID of the VPN device 2 through the input unit 21 of the VPN device 2 in advance. The user can input the IP address and base ID using an input device such as a keyboard. Alternatively, an IP address and a base ID can be prepared in an external memory such as a USB memory, and the VPN apparatus 2 can read the IP address and the base ID from this external memory. That is, the VPN apparatus 2 is provided in advance with the IP address and base ID of the VPN apparatus 2 in some form.

  The user also inputs the IP address of the existing VPN device 4 through the input unit 21 of the VPN device 2. This IP address is a kind of setting data necessary for communicating with the VPN apparatus 4. The VPN device 2 can communicate with the VPN device 4 by using the IP address of the VPN device 4.

  With reference to FIG. 13, the user first connects the VPN apparatus 2 to the communication line 10, and further turns on the power of the VPN apparatus 2 (step S61). Thereby, the VPN apparatus 2 is started. After the start-up is completed, the VPN device 2 requests the VPN device 4 for setting registration of the VPN device 2 (step S62). At this time, the setting registration request unit 24 generates a registration request signal that includes the IP address and base ID of the VPN device 2 and requests registration of the VPN device 2. The setting registration request unit 24 outputs the generated registration request signal to the wide area communication unit 26. The wide area communication unit 26 transmits a registration request signal to the VPN apparatus 4 using the IP address of the VPN apparatus 4.

(Register VPN device 2 in VPN device 4)
The registration request signal transmitted from the VPN device 2 is received by the wide area communication unit 46 of the VPN device 4 and output to the setting registration unit 43. The setting registration unit 43 registers the setting of the VPN device 2 (step S63). At that time, the setting registration unit 43 registers the IP address and base ID of the VPN apparatus 2 included in the received registration request signal in the setting table in the setting database 47. As a result, the setting table is updated from that shown in FIG. 12A to that shown in FIG.

  After completing the registration of the VPN device 2, the VPN device 4 notifies the VPN device 2 to that effect (step S64). Specifically, the wide area communication unit 46 transmits a registration completion signal indicating that the registration of the VPN device 2 is completed to the VPN device 2. At that time, the wide area communication unit 46 reads the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 4 from the setting table in the setting database 47 and includes them in the registration completion signal.

  The wide area communication unit 26 of the VPN apparatus 2 receives the registration completion signal and outputs it to the setting registration unit 23. The setting registration unit 23 acquires the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 4 included in the registration completion signal, and stores a setting table including these in the setting database 27. Form. As a result, the setting table shown in FIG. As a result, the VPN apparatus 2 registers the settings for individually communicating with the VPN apparatus 4 in the VPN apparatus 2.

  After forming the setting table, the VPN apparatus 2 requests the VPN apparatus 4 to read the setting table in the VPN apparatus 4 (step S65). Specifically, the setting registration unit 23 generates a signal for requesting reading of the setting table and outputs the signal to the wide area communication unit 26. The wide area communication unit 26 transmits this signal to the VPN device 4. The wide area communication unit 46 of the VPN apparatus 4 receives this signal. Thereby, the wide area communication unit 46 reads the setting table in the setting database 47 and transmits it to the VPN apparatus 2 (step S66).

  The wide area communication unit 26 of the VPN device 2 receives the setting table transmitted from the VPN device 4. The wide area communication unit 26 outputs the received setting table to the setting registration unit 23. The setting registration unit 23 writes the received setting table in the setting database 27. At that time, the current setting table in the setting database 27 is updated to the received setting table. As a result, the setting table in the setting database 27 is replaced with that shown in FIG. 12C from that shown in FIG. Thereby, the VPN apparatus 2 registers the setting for individually communicating with the VPN apparatus 6 and the setting for individually communicating with the VPN apparatus 8 in the VPN apparatus 2 (step S67).

(Register the VPN device 2 in the VPN device 6)
After completing the setting registration of the VPN apparatus 2, the VPN apparatus 4 requests the VPN apparatus 6 existing in the VPN system 1a, which is different from the VPN apparatus 4, to register the setting of the VPN apparatus 2 (step S68). . At that time, the setting registration request unit 44 reads the IP address and base ID of the VPN apparatus 2 from the setting table. Then, a registration request signal that includes these IP addresses and base IDs and requests registration of the VPN device 2 is generated. The setting registration request unit 44 outputs the generated setting registration request signal to the wide area communication unit 46. The wide area communication unit 46 acquires the IP address of the VPN device 6 from the setting table in the setting database 47. Then, the wide area communication unit 46 transmits a registration request signal to the VPN device 6 using the acquired IP address of the VPN device 6.

  The wide area communication unit 66 of the VPN device 6 receives the registration request signal transmitted from the VPN device 4 and outputs it to the setting registration unit 63. At this point, the setting database 67 stores the setting table shown in FIG. The setting registration unit 63 registers the setting of the VPN device 2 (step S69). At that time, the setting registration unit 63 registers the IP address and base ID of the VPN device 2 included in the received registration request signal in the setting table in the setting database 67. As a result, the setting table in the setting database 67 is updated from that shown in FIG. 12A to that shown in FIG.

  After completing the registration of the VPN device 2, the VPN device 6 notifies the VPN device 4 to that effect (step S70). Specifically, the wide area communication unit 66 transmits a signal indicating that the registration of the VPN device 2 is completed to the VPN device 4. Next, the VPN apparatus 6 requests setting registration of the VPN apparatus 2 to the VPN apparatus 8 existing in the VPN system 1a and different from the VPN apparatus 4 and the VPN apparatus 6 (step S71). At that time, the setting registration request unit 64 reads the IP address and base ID of the VPN apparatus 2 from the setting table. Then, a registration request signal that includes these IP addresses and base IDs and requests registration of the VPN device 2 is generated. The setting registration request unit 64 outputs the generated setting registration request signal to the wide area communication unit 66. The wide area communication unit 66 acquires the IP address of the VPN device 8 from the setting table in the setting database 67. Then, the wide area communication unit 66 transmits a registration request signal to the VPN device 8 using the acquired IP address of the VPN device 8.

  The registration request signal transmitted from the VPN device 6 is received by the wide area communication unit 86 of the VPN device 8 and output to the setting registration unit 83. At this point, the setting database 87 stores the setting table shown in FIG. The setting registration unit 83 registers the setting of the VPN device 2 (step S72). At that time, the setting registration unit 83 registers the IP address and base ID of the VPN apparatus 2 included in the received registration request signal in the setting table in the setting database 87. Thereby, the setting table in the setting database 87 is updated from that shown in FIG. 12A to that shown in FIG.

  After completing the registration of the VPN device 2, the VPN device 8 notifies the VPN device 6 to that effect (step S73). Specifically, the wide area communication unit 86 transmits a signal indicating that the registration of the VPN device 2 is completed to the VPN device 6.

(Function and effect)
As described above, in the VPN system 1a according to the present embodiment, when the newly installed VPN device 2 is to be added to the VPN system 1a, the VPN device 2 has all the existing VPN devices 4, VPN devices 6, and VPN devices 8. Automatically registered. Further, a setting table in which the VPN device 4, the VPN device 6, and the VPN device 8 are registered is automatically provided to the VPN device 2. Thereby, a user's effort at the time of adding the newly installed VPN apparatus 2 to the VPN system 1a can be reduced. In addition, such an automatic registration process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  Moreover, in the VPN system 1a of this embodiment, the VPN apparatus 4 is the only party to which the VPN apparatus 2 requests its registration. Therefore, the processing amount in the VPN apparatus 2 can be reduced. In addition, the time until the VPN device 2 is registered in the VPN device 4 can be shortened as compared with the case where the VPN device 2 requests the VPN device 4, the VPN device 6, and the VPN device 8 to register themselves. Can also be expected.

  Furthermore, the VPN apparatus 6 is the only party to which the VPN apparatus 4 requests registration of the VPN apparatus 2. That is, one VPN apparatus 4 requests the other VPN apparatus 6 to register the VPN apparatus 2, and the VPN apparatus 6 requests another VPN apparatus 8 to register the VPN apparatus 2. In this way, the registration request and registration process of the VPN device 2 are performed in a chain manner for each existing VPN device. As a result, the registration request process is performed by being distributed to each of the VPN apparatus 4, the VPN apparatus 6, and the VPN apparatus 8, so that the processing load on the VPN apparatus 4, the VPN apparatus 6, and the VPN apparatus 8 is reduced.

  In the VPN system 1a according to the present embodiment, there are only three existing VPN apparatuses, the VPN apparatus 4, the VPN apparatus 6, and the VPN apparatus 8. However, there may be four or more existing VPN devices. In this case, among the VPN devices that have completed the registration of the VPN device 2, the existing VPN device (for example, the VPN device 8) identified by the largest base ID is replaced with another existing VPN device identified by the next largest base ID. The VPN apparatus (for example, the VPN apparatus 8 ') is requested to register the VPN apparatus 2 using the IP address and base identifier of the other existing VPN apparatus registered in the setting table. By performing such a process in order for each existing VPN apparatus, the VPN apparatus 2 is automatically registered with respect to all (four or more) existing VPN apparatuses existing in the VPN system 1a. Can do.

(Successful completion of setting registration)
In the present embodiment, the VPN device 8 is the last VPN device that registers the VPN device 2. Therefore, there is no need to send a registration request signal to another VPN device. In the VPN system 1a according to the present embodiment, the VPN device 8 can know that the VPN device 8 is the last VPN device that registers the VPN device 2 by the following procedure.

  First, in step S68, the setting registration request unit 44 of the VPN apparatus 4 receives a registration request signal including information for specifying a VPN apparatus (here, the VPN apparatus 4) that has already completed setting registration of the VPN apparatus 2 as a VPN. Transmit to device 6. At that time, for example, the base ID or name of the VPN apparatus 4 is included in the registration request signal. On the other hand, the setting registration request unit 64 of the VPN apparatus 6 includes a registration request signal including information for specifying the VPN apparatus (here, the VPN apparatus 4 and the VPN apparatus 6) that has already completed the setting registration of the VPN apparatus 2 in step S71. Is transmitted to the VPN apparatus 8. At that time, for example, the base ID or name of the VPN device 4 and the base ID or name of the VPN device 6 are included in the registration request signal.

  The setting registration unit 83 of the VPN device 8 refers to the information included in the received registration request signal that identifies the VPN device that has already completed the setting registration of the VPN device 2 and the setting table in the setting database 87. By this, it is known that the VPN device that has not completed registration of the VPN device 2 is only the VPN device 8. Thereby, the VPN apparatus 8 can know that it is itself (VPN apparatus 8) that performs the setting registration of the VPN apparatus 2 last in the VPN system 1a. As a result, it is possible to prevent a situation in which a registration request signal is erroneously transmitted to a VPN device that has finished setting registration of the VPN device 2. In other words, the setting registration of the VPN apparatus 2 can be completed normally.

(Enter base ID of VPN device 4)
In the present embodiment, the user inputs the IP address of the VPN device 4 in advance to the VPN device 2, but does not input the base ID of the VPN device 4. However, the user may input the base ID of the VPN apparatus 4 in advance. At that time, the setting registration unit 23 immediately forms a setting table including the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 4 input by the user in the setting database 27. Thereby, before the VPN apparatus 2 requests | requires setting registration with respect to the VPN apparatus 4, the setting for communicating with the VPN apparatus 4 separately is performed with respect to the VPN apparatus 2. FIG. Further, in this case, the wide area communication unit 46 transmits a registration completion signal not including the IP address and base ID of the VPN apparatus 2 and the IP address and base ID of the VPN apparatus 4 to the VPN apparatus 2 in step S64. .

(Enter only the IP address)
In the present embodiment, the user inputs the IP address and base ID of the VPN device 2 in advance to the VPN device 2. However, even if the user inputs only the IP address of the VPN apparatus 2 and does not input the base ID of the VPN apparatus 2, the VPN apparatus 2 is added to the VPN system 1a without any problem.

  When the user does not input the base ID of the VPN apparatus 2, the process shown in FIG. 13 is changed as follows. First, in step S62, the setting registration request unit 24 generates a registration request signal that includes the IP address of the VPN device 2 but does not include the base ID of the VPN device 2. In step S63, the setting registration unit 43 acquires only the IP address of the VPN apparatus 2 from the received registration request signal. Next, the setting registration unit 43 refers to the setting table in the setting database 47 and identifies one value different from the values of all registered base IDs. For example, since “1”, “2”, and “3” are registered as the base ID values in the setting table shown in FIG. 12A, “4” different from these is specified. Then, this value is determined to be the base ID of the VPN apparatus 2. Thereby, the setting registration unit 43 registers the IP address of the VPN device 2 acquired from the registration request signal and the base ID of the VPN device 2 determined by itself in the setting table in the setting database 47. As a result, the setting table in the setting database 47 is updated from that shown in FIG. 12A to that shown in FIG.

  The process in step S64 is not changed. That is, the wide area communication unit 46 reads the IP address and base ID of the VPN device 2 and the IP address and base ID of the VPN device 4 from the setting table in the setting database 47 and includes them in the registration completion signal. As a result, the base ID of the VPN device 2 that the user has not input in advance is provided to the VPN device 2. As a result, the VPN apparatus 2 can automatically acquire the base ID of the VPN apparatus 2 and register it in itself even though the base ID of the VPN apparatus 2 is not input by the user.

  In step S68 of FIG. 13, the setting registration request unit 44 acquires the IP address and base ID of the VPN apparatus 2 registered in the setting table in the setting database 47, and generates a registration request signal including these. As a result, a registration request signal including the IP address and base ID of the VPN device 2 is transmitted from the VPN device 4 to the VPN device 6. Therefore, the VPN apparatus 6 does not need to determine the base ID of the VPN apparatus 2 by itself. That is, the IP address and base ID of the VPN device 2 included in the received registration request signal may be registered in the setting table in the setting database 67.

  Further, in step S71 of FIG. 13, the setting registration request unit 64 may transmit the registration request signal received from the VPN apparatus 4 to the VPN apparatus 8 as it is. This is because the registration request signal already contains the IP address and base ID of the VPN apparatus 2. As a result, the IP address and base ID of the VPN apparatus 2 are normally registered in the VPN apparatus 8 as well.

  According to the above configuration, as long as the user inputs the IP address of the VPN device 2 to the VPN device 2, the base ID for the VPN device 2 is automatically generated. Further, the IP address and base ID of the VPN device 2 are registered in the VPN device 4, the VPN device 6, and the VPN device 8. The VPN device 2 is provided with a setting table including the base ID of the VPN device 2. Therefore, since the user can save time and effort for inputting the base identifier for the VPN apparatus 2, the user's time and labor can be further reduced.

(Authentication process)
FIG. 14 shows another process flow in the VPN apparatus 2, the VPN apparatus 4, the VPN apparatus 6, and the VPN apparatus 8 when adding the VPN apparatus 2 to the VPN system 1a according to the third embodiment of the present invention. It is a sequence diagram which shows an example. In the example of this figure, an authentication process is performed between the VPN device 2 and the VPN device 4 before registering the VPN device 2 in the VPN device 4. By this authentication process, it is possible to prevent an unauthorized VPN apparatus 2 from being added to the VPN system 1a.

  In the example of FIG. 14, it is assumed that the authentication process is completed between the VPN apparatus 4 and the VPN apparatus 6 before the VPN apparatus 2 transmits a registration request signal to the VPN apparatus 4. Similarly, it is assumed that the authentication process is completed between the VPN device 6 and the VPN device 8.

  Since the processes from steps S81 to S83 shown in FIG. 14 are the same as the processes from S11 to S13 shown in FIG. 7, detailed description thereof will be omitted. Further, the processing from step S84 to S96 shown in FIG. 14 is the same as the processing from S62 to S73 shown in FIG.

  When the processing in step S85 is completed, the setting registration request unit 44 of the VPN apparatus 4 is notified in advance that the VPN apparatus 4 has been authenticated by the VPN apparatus 6. That is, since the authentication process has already been completed between the VPN device 4 and the VPN device 6, the VPN device 4 does not require the VPN device 6 to authenticate again at this timing, and the VPN device 2 registers the VPN device 2. Request to 6.

  At the time when the process of step S92 is completed, the setting registration request unit 64 of the VPN apparatus 6 is notified in advance that the VPN apparatus 6 has been authenticated by the VPN apparatus 8. That is, since the authentication process has already been completed between the VPN apparatus 6 and the VPN apparatus 8, the VPN apparatus 6 does not require the VPN apparatus 8 to authenticate again at this timing, and the VPN apparatus 2 registers the VPN apparatus 2. 8 will be requested.

  After the process of step S89 is completed, the VPN apparatus 2 asks the VPN apparatus 6 for authentication of the VPN apparatus 2 in order to communicate with the VPN apparatus 6. It is not always necessary to ask the VPN apparatus 6 for authentication prior to the VPN apparatus 8. You may ask the VPN apparatus 8 for authentication first.

  The VPN device 2 transmits an authentication request signal to the VPN device 6 (step S97). Since the process performed at this time is the same as the process of step S20 shown in FIG. 7, detailed description is abbreviate | omitted. After transmitting the authentication request signal to the VPN device 6, the VPN device 2 immediately communicates with the VPN device 8 without waiting for the authentication result signal from the VPN device 6. Authentication is requested (step S98). That is, the VPN device 2 requests the VPN device 6 and the VPN device 8 to authenticate the VPN device 2 in parallel. At this time, the authentication unit 22 of the VPN apparatus 2 outputs an authentication request signal to the wide area communication unit 26. The wide area communication unit 26 transmits an authentication request signal to the VPN apparatus 8 using the IP address and base ID of the VPN apparatus 8 registered in the setting table in the setting database 27.

  When the VPN device 6 succeeds in the authentication of the VPN device 2, the VPN device 6 notifies the VPN device 2 to that effect (step S99). Since the process performed at this time is the same as the process of step S21 shown in FIG. 7, detailed description is abbreviate | omitted. Thereafter, the VPN apparatus 2 can normally communicate with the VPN apparatus 6.

  The wide area communication unit 86 of the VPN device 8 receives the authentication request signal transmitted from the VPN device 2. The wide area communication unit 86 outputs the received authentication request signal to the authentication unit 82. The authentication unit 82 acquires the authentication ID and password in the authentication request signal. Further, the authentication ID and password for authenticating the connection to the VPN system 1a, which are prepared in a non-illustrated non-volatile memory (or volatile memory) in the VPN apparatus 8, are read. Then, the authentication IDs and the passwords are compared, and it is determined whether or not they match each other. If both match, the authentication unit 82 authenticates the VPN device 2.

  When the VPN device 8 succeeds in the authentication of the VPN device 2, the VPN device 8 notifies the VPN device 2 to that effect (step S100). Specifically, the authentication unit 82 generates an authentication result signal indicating that the VPN device 2 has been authenticated, and outputs it to the wide area communication unit 86. The wide area communication unit 86 transmits an authentication result signal to the VPN device 2.

  The wide area communication unit 26 of the VPN apparatus 2 receives the authentication result signal transmitted from the VPN apparatus 8. The wide area communication unit 26 outputs the received authentication result signal to the authentication unit 22. The authentication unit 22 analyzes the authentication result signal and specifies that the authentication of the VPN device 2 has succeeded. Thereafter, the VPN apparatus 2 can normally communicate with the VPN apparatus 8.

(Intermediate stage setting table)
In the present embodiment and its modifications, the VPN apparatus 2 does not have to form the setting table in the intermediate stage shown in FIG. In this case, in step S <b> 66, the VPN apparatus 4 provides the VPN apparatus 2 with a setting table including setting data for all VPN apparatuses. In step S67, the VPN apparatus 2 writes the setting table provided from the VPN apparatus 4 in the setting database 27 in which the setting table shown in FIG. As a result, in step S67, the settings for individually communicating with the VPN apparatus 4, the settings for individually communicating with the VPN apparatus 6, and the settings for individually communicating with the VPN apparatus 8 are stored in the VPN apparatus 2. For one at a time.

[Embodiment 4]
A fourth embodiment according to the present invention will be described below with reference to FIGS. In addition, the same code | symbol is attached | subjected to each member which is common in 1st Embodiment mentioned above, and detailed description is abbreviate | omitted.

  FIG. 15 is a block diagram showing a main configuration of a VPN system 1b according to the fourth embodiment of the present invention. As shown in this figure, the VPN system 1b includes a VPN device 2a (communication device), a VPN device 4a (communication device), and a VPN device 6a (communication device). The VPN device 2a, the VPN device 4a, and the VPN device 6a are connected to each other through the communication line 10. This communication line is a wide area line of the Internet in this embodiment.

(About VPN)
In the present embodiment, the VPN device 2a, the VPN device 4a, and the VPN device 6a are all communication devices (for example, routers) for constructing the same virtual private network (VPN). The VPN device 2a, the VPN device 4a, and the VPN device 6a have all been added to the VPN system 1b, and the same VPN has been constructed. Since the communication method between the VPN devices in the VPN system 1b is the same as that of the VPN system 1 according to the first embodiment, a detailed description thereof will be omitted.

  In the present embodiment, each VPN device is preferably added to the VPN system 1b by the procedure described in the first embodiment or the second embodiment. However, the present embodiment is not limited to this, and each VPN device may be added to the VPN system 1b by a conventional procedure.

  In this embodiment, a procedure when the VPN apparatus 2a shown in FIG. 15 is removed from the VPN system 1b will be described. When the VPN device 2a is removed from the VPN system 1b, the setting data for communicating with the VPN device 2a is automatically deleted from the VPN device 4a and the VPN device 6a. Accordingly, the VPN device 4a and the VPN device 6a cannot attempt VPN communication with the VPN device 2a after the removal of the VPN device 2a.

(VPN device 2a)
FIG. 16 is a block diagram showing a main configuration of a VPN apparatus 2a constituting the VPN system 1b according to the fourth embodiment of the present invention. As shown in this figure, the VPN apparatus 2a includes a setting deletion unit 28 (initialization means) and a setting deletion request unit 29 (deletion request) in addition to the members included in the VPN apparatus 2 according to the first embodiment. A signal transmission unit, a first deletion request signal transmission unit, a deletion response signal reception unit, a first deletion response signal reception unit), and a setting deletion start request unit 30 (deletion start request signal transmission unit).

(VPN device 4a)
FIG. 17 is a block diagram showing a main configuration of a VPN apparatus 4a constituting the VPN system 1b according to the fourth embodiment of the present invention. As shown in this figure, the VPN apparatus 4a includes a setting deletion unit 48 (deletion means, first deletion means, deletion request signal reception) in addition to the members included in the VPN apparatus 4 according to the first embodiment. Means, first deletion request signal receiving means, deletion response signal transmitting means, first deletion response signal transmitting means), setting deletion request section 49 (second deletion request signal transmitting means, second deletion response signal receiving means) ), And a setting deletion start request unit 50 (deletion start request signal transmitting means).

(VPN device 6a)
FIG. 18 is a block diagram showing a main configuration of a VPN apparatus 6a constituting the VPN system 1b according to the fourth embodiment of the present invention. As shown in this figure, the VPN apparatus 6a includes a setting deletion unit 68 (deletion means, second deletion means, and deletion request signal reception) in addition to the members included in the VPN apparatus 6 according to the first embodiment. Means, second deletion request signal receiving means, deletion response signal transmitting means, second deletion response signal transmitting means), setting deletion request section 69 (third deletion request signal transmitting means), and setting deletion start request section 70. (Deletion start request signal transmission means).

(Setting table)
FIG. 19A shows VPNs that the VPN device 2a, the VPN device 4a, and the VPN device 6a have before the VPN device 2a is removed from the VPN system 1b according to the fourth embodiment of the present invention. It is a figure which shows the setting table for communication. This setting table is the same as that shown in FIG. The VPN apparatus 2a, the VPN apparatus 4a, and the VPN apparatus 6a can perform VPN communication with each of the other VPN apparatuses by using a setting table that the VPN apparatus 2a, the VPN apparatus 4a, and the VPN apparatus 6a have.

  FIG. 19B shows a VPN communication setting table for the VPN apparatus 4a and the VPN apparatus 6a after the VPN apparatus 2a is removed from the VPN system 1b according to the fourth embodiment of the present invention. FIG. This setting table is the same as that shown in FIG. As will be described in detail later, when the VPN device 2a is removed from the VPN system 1b, the setting table of the VPN device 4a and the VPN device 6a is automatically changed from that shown in FIG. 19 (a) to that shown in FIG. 19 (b). Updated. That is, the setting data for VPN communication with the VPN device 2a is automatically deleted from the setting table.

(Removal of VPN device 2a)
FIG. 20 is a sequence diagram illustrating a processing flow in the VPN device 2a, the VPN device 4a, and the VPN device 6a when the VPN device 2a is removed from the VPN system 1b according to the fourth embodiment of the present invention.

  In the present embodiment, the administrator of the VPN device 2a inputs an instruction for removing the VPN device 2a from the VPN system 1b to the VPN device 2a through the input unit 21. When the input unit 21 receives this input, the VPN apparatus 2a requests the VPN apparatus 4a to delete the setting for performing VPN communication with the VPN apparatus 2a (step S101). At this time, the setting deletion request unit 29 generates a signal (deletion request signal) for requesting the setting deletion of the VPN apparatus 2a. The setting deletion request unit 29 outputs the generated deletion request signal to the wide area communication unit 26.

  The wide area communication unit 26 accesses the setting database 27 and acquires setting data necessary for VPN communication with the VPN apparatus 4a from the setting table. In this embodiment, the base ID and IP address of the VPN apparatus 4a are acquired from the setting table shown in FIG. The wide area communication unit 26 transmits a deletion request signal to the VPN apparatus 4a using the base ID and IP address of the VPN apparatus 4a. Thus, the deletion request signal is transmitted by VPN communication using the base ID.

(Delete the setting of the VPN device 2a from the VPN device 4a)
The deletion request signal transmitted from the VPN device 2 a is received by the wide area communication unit 46 of the VPN device 4 a and output to the setting deletion unit 48. The setting deletion unit 48 deletes the setting of the VPN device 2a (step S102). At this time, the setting deletion unit 48 deletes the setting data registered in the setting table in the setting database 47 for VPN communication with the VPN apparatus 2a from the setting table. Specifically, the base ID, name, and IP address of the VPN device 2a are all deleted from the setting table. As a result, the setting table in the setting database 47 is updated from that shown in FIG. 19A to that shown in FIG.

(Delete response)
After successfully deleting the setting of the VPN device 2a, the VPN device 4a notifies the VPN device 2a to that effect (step S103). At that time, the setting deletion unit 48 generates a deletion response signal indicating that the deletion of the setting data of the VPN apparatus 2 a has been successful, and outputs it to the wide area communication unit 46. At this time, the setting data (base ID and IP address) for VPN communication with the VPN apparatus 2a is not included in the setting table in the setting database 47. Therefore, the wide area communication unit 46 cannot perform VPN communication using the base ID of the VPN apparatus 2a when transmitting the deletion response signal to the VPN apparatus 2a.

  However, since the VPN apparatus 4a has received the deletion request signal from the VPN apparatus 2a, it knows the IP address of the VPN apparatus 2a used for the communication at that time. Therefore, the wide area communication unit 46 transmits a deletion response signal to the VPN apparatus 2a by communication using only the IP address of the VPN apparatus 2a.

  The setting deletion unit 48 may generate a deletion response signal before deleting the setting data of the VPN device 2a. However, the wide area communication unit 46 always transmits a deletion response signal to the VPN apparatus 2a after the deletion of the setting data is completed.

  The wide area communication unit 26 of the VPN device 2 a receives the deletion response signal transmitted from the VPN device 4 a and outputs it to the setting deletion request unit 29. The setting deletion request unit 29 recognizes that the setting deletion of the VPN apparatus 2a has been normally performed in the VPN apparatus 4a by receiving the deletion response signal from the VPN apparatus 4a. Therefore, the setting deletion request unit 29 next transmits a deletion request signal to the other VPN apparatus 6a configuring the VPN system 1b (step S104).

  At that time, the setting deletion request unit 29 outputs a deletion request signal to the wide area communication unit 26. The wide area communication unit 26 acquires setting data (base ID and IP address) registered in the setting table in the setting database 27 for VPN communication with the VPN apparatus 6a. The wide area communication unit 26 transmits a deletion request signal to the VPN device 6a using the base ID and IP address of the VPN device 6a. Thus, the deletion request signal is transmitted by VPN communication using the base ID.

(Delete the setting of the VPN device 2a from the VPN device 6a)
The deletion request signal transmitted from the VPN device 2 a is received by the wide area communication unit 66 of the VPN device 6 a and output to the setting deletion unit 68. The setting deletion unit 68 deletes the setting of the VPN device 2a from the VPN device 6a (step S105). At this time, the setting deletion unit 68 deletes the setting data registered in the setting table in the setting database 67 for VPN communication with the VPN apparatus 2a from the setting table. Specifically, the base ID, name, and IP address of the VPN device 2a are all deleted from the setting table. As a result, the setting table in the setting database 67 is updated from that shown in FIG. 19A to that shown in FIG.

(Delete response)
After successfully deleting the setting of the VPN device 2a, the VPN device 6a notifies the VPN device 2a to that effect (step S106). At that time, the setting deletion unit 68 generates a deletion response signal indicating that the setting data of the VPN apparatus 2 a has been successfully deleted, and outputs the deletion response signal to the wide area communication unit 66. At this time, the setting data (base ID and IP address) for VPN communication with the VPN apparatus 2 a is not included in the setting table in the setting database 67. Therefore, the wide area communication unit 66 cannot perform VPN communication using the base ID of the VPN device 2a when transmitting the deletion response signal to the VPN device 2a.

  However, since the VPN apparatus 6a has received the deletion request signal from the VPN apparatus 2a, it knows the IP address of the VPN apparatus 2a used for the communication at that time. Therefore, the wide area communication unit 66 transmits a deletion response signal to the VPN apparatus 2a by communication using only the IP address of the VPN apparatus 2a.

  The wide area communication unit 26 of the VPN device 2 a receives the deletion response signal transmitted from the VPN device 6 a and outputs it to the setting deletion request unit 29. The setting deletion request unit 29 recognizes that the setting deletion of the VPN apparatus 2a has been normally performed in the VPN apparatus 6a by receiving the deletion response signal from the VPN apparatus 6a. Further, the setting deletion request unit 29 receives the deletion response signal transmitted from the VPN device 6a, so that the deletion response signal is received from all the VPN devices except the VPN device 2a among the VPN devices constituting the VPN system 1b. Know that you received. As a result, the setting deletion request unit 29 instructs the setting deletion unit 28 to initialize the VPN apparatus 2a.

  In response to this instruction, the setting deletion unit 28 initializes the VPN device 2a (step S107). Specifically, the setting deletion unit 28 completely deletes the setting table from the setting database 27. As a result, the VPN apparatus 2a cannot perform VPN communication with each VPN apparatus in the VPN system 1b.

  The administrator of the VPN apparatus 2a physically removes the VPN apparatus 2a that has been initialized from the VPN system 1b. Thereby, removal of the VPN apparatus 2a from the VPN system 1b is completed. Thereafter, the VPN devices that constitute the VPN system 1b are only the VPN device 4a and the VPN device 6a. The VPN device 4a and the VPN device 6a can also be removed from the VPN system 1b in the same manner as the VPN device 2a by the above-described procedure.

(Function and effect)
As described above, in the VPN system 1b of the present embodiment, when the VPN device 2a is to be removed from the VPN system 1b, the setting of the VPN device 2a is set from all the VPN devices 4a and the VPN devices 6a other than the VPN device 2a. It is automatically deleted. In addition, the setting table of the VPN device 2a is automatically deleted. Thereby, a user's effort at the time of removing the VPN apparatus 2a from the VPN system 1b can be reduced. In addition, such an automatic deletion process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In the VPN system 1b, the VPN apparatus 4a uses only the IP address of the VPN apparatus 2a after the setting data of the VPN apparatus 2a, that is, the base ID and IP address of the VPN apparatus 2a are deleted from the setting table. The delete response signal is transmitted to the VPN apparatus 2a. Thereby, the VPN apparatus 2a can grasp | ascertain that the setting deletion of the VPN apparatus 2a in the VPN apparatus 4a was successful by receiving the deletion response signal.

  In other words, receiving the deletion response signal by communication using only the IP address of the VPN device 2a means that communication using the base ID of the VPN device 2a is no longer possible in the VPN device 4a. This guarantees that the setting data including the base ID of the VPN device 2a has been successfully deleted in the VPN device 4a. The same applies to the VPN device 6a.

  Therefore, the VPN system 1b also has an effect that the setting deletion of the removed VPN apparatus 2a can be reliably performed in the other VPN apparatus 4a and the VPN apparatus 6a.

  In the VPN system 1b according to the present embodiment, there are only two VPN devices that are not removed, the VPN device 4a and the VPN device 6a. However, there may be three or more VPN devices that are not removed. Even in this case, the VPN device 2a to be removed uses the IP address and the base identifier for each VPN device that are not removed and are registered in the setting table in the setting database 27 in order for each VPN device that is not removed. The deletion of the VPN device 2a is requested in order. Thereby, the setting of the VPN apparatus 2a can be automatically deleted in all (three or more) non-removed VPN apparatuses existing in the VPN system 1b.

(Modification)
FIG. 21 is a sequence diagram showing a flow of other processing in the VPN device 2a, the VPN device 4a, and the VPN device 6a when the VPN device 2a is removed from the VPN system 1b according to the fourth embodiment of the present invention. is there.

  In the example of FIG. 21, the administrator of the VPN device 4 a inputs an instruction for removing the VPN device 2 a from the VPN system 1 b to the VPN device 4 a through the input unit 41. When the input unit 41 receives this input, the VPN apparatus 4a requests the VPN apparatus 2a to start setting deletion of the VPN apparatus 2a (step S111). At that time, the setting deletion start request unit 50 generates a signal (deletion start request signal) for requesting the setting deletion start of the VPN apparatus 2a. The setting deletion start request unit 50 outputs the generated deletion start request signal to the wide area communication unit 46.

  The wide area communication unit 46 accesses the setting database 47 and acquires necessary setting data for VPN communication with the VPN apparatus 2a from the setting table. In the present embodiment, the base ID and IP address of the VPN apparatus 2a are acquired from the setting table shown in FIG. The wide area communication unit 46 transmits a deletion start request signal to the VPN apparatus 2a using the base ID and IP address of the VPN apparatus 2a. As described above, the deletion start request signal is transmitted by VPN communication using the base ID.

  The wide area communication unit 26 of the VPN apparatus 2a receives the deletion start request signal transmitted from the VPN apparatus 4a. The wide area communication unit 26 transmits the received deletion start request signal to the setting deletion request unit 29. In response to this, the VPN apparatus 2a requests the VPN apparatus 4a to delete the setting of the VPN apparatus 2a (step S101). The processing from step S101 to S107 shown in FIG. 21 is the same as the processing from step S101 to S107 shown in FIG.

  As shown in FIG. 21, in the present embodiment, the trigger for starting the setting deletion process of the VPN device 2a may be not the VPN device 2a itself to be removed but the VPN device 4a that is not removed. . This eliminates the need for the administrator of the VPN system 1b to go to the place where the VPN apparatus 2a is installed and to input an instruction for removing the VPN apparatus 2a to the VPN apparatus 2a. Therefore, it is possible to further reduce the trouble of removing a desired VPN device from the VPN system 1b.

  Note that the deletion start request signal is not limited to the VPN apparatus 4a to be transmitted to the removed VPN apparatus 2a. That is, any VPN device other than the removed VPN device 2a among the plurality of VPN devices 4a and VPN devices 6a constituting the VPN system 1b may transmit a deletion start request signal to the VPN device 2a. . For example, even if the VPN apparatus 6a instead of the VPN apparatus 4a transmits a deletion start request signal to the VPN apparatus 2a, the same effect can be obtained.

[Embodiment 5]
A fifth embodiment according to the present invention will be described below with reference to FIGS. In addition, the same code | symbol is attached | subjected to each member which is common in 4th Embodiment mentioned above, and detailed description is abbreviate | omitted.

  The configuration of the VPN system 1b in the present embodiment is the same as that of the fourth embodiment. However, the setting deletion procedure when removing the VPN apparatus 2a from the VPN system 1b is different from that of the fourth embodiment. In the present embodiment, the VPN device 2a requests only the VPN device 4a to delete the setting of the VPN device 2a. On the other hand, not the VPN device 2a but the VPN device 4a requests the VPN device 6a to delete the setting of the VPN device 2a. Therefore, in the present embodiment, the setting deletion request unit 29 corresponds to the first deletion request signal transmission unit described in the claims, while the setting deletion request unit 49 corresponds to the first deletion request signal transmission unit described in the claims. This corresponds to the deletion request signal transmission means 2.

(Removal of VPN device 2a)
FIG. 22 is a sequence diagram showing a processing flow in the VPN device 2a, the VPN device 4a, and the VPN device 6a when removing the VPN device 2a from the VPN system 1b according to the fifth embodiment of the present invention.

(Delete the setting of the VPN device 2a from the VPN device 4a)
The processes from Steps S121 to S122 in FIG. 22 are the same as the processes from Steps S101 to S102 in FIG. Through these processes, the setting of the VPN device 2a is deleted from the VPN device 4a.

  As shown in FIG. 22, in this embodiment, the VPN apparatus 4a does not transmit a deletion response signal to the VPN apparatus 2a after successfully deleting the setting of the VPN apparatus 2a. Instead, the VPN apparatus 4a requests the VPN apparatus 6a to delete the setting of the VPN apparatus 2a (step S123).

  At that time, the setting deletion request unit 49 transmits a deletion request signal to the wide area communication unit 46. The wide area communication unit 46 acquires setting data (base ID and IP address) registered in the setting table in the setting database 47 for VPN communication with the VPN apparatus 6a. The wide area communication unit 46 transmits a deletion request signal to the VPN apparatus 6a using the base ID and IP address of the VPN apparatus 6a. Thus, the deletion request signal is transmitted by VPN communication using the base ID.

(Delete the setting of the VPN device 2a from the VPN device 6a)
The deletion request signal transmitted from the VPN device 4 a is received by the wide area communication unit 66 of the VPN device 6 a and output to the setting deletion unit 68. The setting deletion unit 68 deletes the setting of the VPN device 2a from the VPN device 6a (step S124). At this time, the setting deletion unit 68 deletes the setting data registered in the setting table in the setting database 67 for VPN communication with the VPN apparatus 2a from the setting table. Specifically, the base ID, name, and IP address of the VPN device 2a are all deleted from the setting table. As a result, the setting table in the setting database 67 is updated from that shown in FIG. 19A to that shown in FIG.

(Delete response)
After successfully deleting the setting of the VPN device 2a, the VPN device 6a notifies the VPN device 4a to that effect (step S125). At that time, the setting deletion unit 68 generates a deletion response signal indicating that the setting data of the VPN apparatus 4 a has been successfully deleted, and outputs the deletion response signal to the wide area communication unit 66. The wide area communication unit 66 acquires setting data (base ID and IP address) registered in the setting table in the setting database 67 for VPN communication with the VPN apparatus 4a. The wide area communication unit 66 transmits a deletion response signal to the VPN apparatus 4a using the base ID and IP address of the VPN apparatus 4a. Thus, the transmission of the deletion response signal from the VPN apparatus 6a to the VPN apparatus 4a is performed by VPN communication using the base ID.

  The wide area communication unit 46 of the VPN apparatus 4a receives the deletion response signal transmitted from the VPN apparatus 6a. The wide area communication unit 46 outputs the received deletion response signal to the setting deletion request unit 49. Thereby, the setting deletion request part 49 grasps that the setting deletion of the VPN apparatus 2a is successful in the VPN apparatus 6a.

  The setting deletion request unit 49 receives the deletion response signal transmitted from the VPN apparatus 6a, and deletes it from all the VPN apparatuses except for the VPN apparatus 2a and the VPN apparatus 4a among the VPN apparatuses constituting the VPN system 1b. Know that a response signal has been received. Thereby, the VPN apparatus 4a notifies the VPN apparatus 2a that the setting deletion of the VPN apparatus 2a has been successful (step S126).

  The process in step S126 is the same as step S106 in FIG. 21 except that the VPN apparatus that transmits the deletion response signal is not the VPN apparatus 6a but the VPN apparatus 4a. Therefore, the wide area communication unit 46 transmits a deletion response signal to the VPN apparatus 2a by communication using only the IP address of the VPN apparatus 2a.

  The wide area communication unit 26 of the VPN device 2 a receives the deletion response signal transmitted from the VPN device 4 a and outputs it to the setting deletion request unit 29. The setting deletion request unit 29 has received the deletion response signal from the VPN apparatus 4a that is the counterpart of the transmission of the deletion request signal, so that in all the VPN apparatuses 4a and VPN apparatuses 6a other than the VPN apparatus 2a, the VPN apparatus 2a Grasping that the settings were successfully deleted. As a result, the setting deletion request unit 29 instructs the setting deletion unit 28 to initialize the VPN apparatus 2a.

  In response to this instruction, the setting deletion unit 28 initializes the VPN device 2a (step S127). Since this process is the same as the process of step S107 in FIG. 21, detailed description thereof is omitted.

(Function and effect)
As described above, in the VPN system 1b of the present embodiment, when the VPN device 2a is to be removed from the VPN system 1b, the setting of the VPN device 2a is set from all the VPN devices 4a and the VPN devices 6a other than the VPN device 2a. It is automatically deleted. In addition, the setting table of the VPN device 2a is automatically deleted. Thereby, a user's effort at the time of removing the VPN apparatus 2a from the VPN system 1b can be reduced. In addition, such an automatic deletion process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In the VPN system 1b, the VPN apparatus 4a uses only the IP address of the VPN apparatus 2a after the setting data of the VPN apparatus 2a, that is, the base ID and IP address of the VPN apparatus 2a are deleted from the setting table. The delete response signal is transmitted to the VPN apparatus 2a. Thereby, the VPN apparatus 2a can grasp | ascertain that the setting deletion of the VPN apparatus 2a in the VPN apparatus 4a was successful by receiving the deletion response signal. Further, the VPN device 2a can indirectly grasp that the setting deletion of the VPN device 2a in the VPN device 6a is successful by receiving the deletion response signal.

  In other words, receiving the delete response signal by communication using only the IP address of the VPN device 2a means that the VPN device 4a and the VPN device 6a can no longer communicate using the base ID of the VPN device 2a. doing. This guarantees that the setting data including the base ID of the VPN device 2a has been normally deleted in the VPN device 4a and the VPN device 6a.

  Therefore, the VPN system 1b also has an effect that the setting deletion of the removed VPN apparatus 2a can be reliably performed in the other VPN apparatus 4a and the VPN apparatus 6a.

  Further, in the VPN system 1b of the present embodiment, the VPN apparatus 2a is the only party that requests the setting deletion of the VPN apparatus 2a. Therefore, the processing amount in the VPN apparatus 2a can be reduced. In addition, compared with the case where the VPN device 2a requests both the VPN device 4a and the VPN device 6a to delete the setting of the VPN device 2a, an effect of shortening the time until the setting of the VPN device 2a is deleted from the VPN device 6a is also expected. it can.

  In the VPN system 1b according to the present embodiment, there are only two VPN devices that are not removed, the VPN device 4a and the VPN device 6a. However, there may be three or more VPN devices that are not removed. Even in this case, the VPN apparatus 4a uses the IP address and the base identifier for each VPN apparatus other than itself registered in the setting table in the setting database 27 in order, with respect to each non-removed VPN apparatus. Request the setting deletion of the VPN apparatus 2a in order. Thereby, in all (three or more) VPN devices other than the VPN device 2a existing in the VPN system 1b, the setting of the VPN device 2a can be automatically deleted.

(Modification)
FIG. 23 is a sequence diagram showing a flow of other processes in the VPN device 2a, the VPN device 4a, and the VPN device 6a when the VPN device 2a is removed from the VPN system 1b according to the fifth embodiment of the present invention. is there.

  In the example of FIG. 23, the administrator of the VPN apparatus 4a inputs an instruction for removing the VPN apparatus 2a from the VPN system 1b to the VPN apparatus 4a through the input unit 41. When the input unit 41 receives this input, the VPN apparatus 4a requests the VPN apparatus 2a to start setting deletion of the VPN apparatus 2a (step S131). Since this process is the same as step S111 in FIG. 21, detailed description thereof is omitted.

  The wide area communication unit 26 of the VPN apparatus 2a receives the deletion start request signal transmitted from the VPN apparatus 4a. The wide area communication unit 26 transmits the received deletion start request signal to the setting deletion request unit 29. In response to this, the VPN apparatus 2a requests the VPN apparatus 4a to delete the setting of the VPN apparatus 2a (step S121). The processing from step S121 to S127 shown in FIG. 23 is the same as the processing from step S121 to S127 shown in FIG.

  As shown in FIG. 23, in the present embodiment, the trigger for starting the setting deletion processing of the VPN device 2a may be not the VPN device 2a itself to be removed but the VPN device 4a that is not removed. . This eliminates the need for the administrator of the VPN system 1b to go to the place where the VPN apparatus 2a is installed and to input an instruction for removing the VPN apparatus 2a to the VPN apparatus 2a. Therefore, it is possible to further reduce the trouble of removing a desired VPN device from the VPN system 1b.

  Note that the deletion start request signal is not limited to the VPN apparatus 4a to be transmitted to the removed VPN apparatus 2a. That is, any VPN device other than the removed VPN device 2a among the plurality of VPN devices 4a and VPN devices 6a constituting the VPN system 1b may transmit a deletion start request signal to the VPN device 2a. . For example, even if the VPN apparatus 6a instead of the VPN apparatus 4a transmits a deletion start request signal to the VPN apparatus 2a, the same effect can be obtained.

[Embodiment 6]
A sixth embodiment according to the present invention will be described below with reference to FIGS. In addition, the same code | symbol is attached | subjected to each member which is common in 4th Embodiment mentioned above, and detailed description is abbreviate | omitted.

  FIG. 24 is a block diagram showing a main configuration of a VPN system 1c according to the sixth embodiment of the present invention. As shown in this figure, the VPN system 1c includes a VPN device 2a (communication device), a VPN device 4a (communication device), a VPN device 6a (communication device), and a VPN device 8a (communication device). The VPN device 2a, the VPN device 4a, the VPN device 6a, and the VPN device 8a are connected to each other through the communication line 10.

  Since the communication method between the VPN devices in the VPN system 1c is the same as that of the VPN system 1 according to the first embodiment, a detailed description thereof is omitted. Further, the configurations of the VPN device 2a, the VPN device 4a, and the VPN device 6a are the same as those of the fourth embodiment described above, and thus detailed description thereof is omitted.

  In the present embodiment, each VPN device is preferably added to the VPN system 1c by the procedure described in any of the first to third embodiments. However, the present embodiment is not limited to this, and each VPN device may be added to the VPN system 1c by a conventional procedure.

  In this embodiment, the VPN apparatus 8a is a communication apparatus (for example, a router) for constructing the same virtual private network (VPN) with other VPN apparatuses. The VPN apparatus 8a has already been added to the VPN system 1c, and a VPN has been constructed.

  In this embodiment, a procedure when the VPN apparatus 2a shown in FIG. 25 is removed from the VPN system 1c will be described. When the VPN apparatus 2a is removed from the VPN system 1c, the setting data for communicating with the VPN apparatus 2a is automatically deleted from the VPN apparatus 4a, the VPN apparatus 6a, and the VPN apparatus 8a. Accordingly, the VPN device 4a, the VPN device 6a, and the VPN device 8a cannot attempt VPN communication with the VPN device 2a after the VPN device 2a is removed.

(VPN device 8a)
FIG. 25 is a block diagram showing a main configuration of a VPN apparatus 8a constituting the VPN system 1c according to the sixth embodiment of the present invention. As shown in this figure, the VPN apparatus 8a includes a setting deletion unit 88 (deletion means, second deletion means, deletion request signal reception) in addition to each member provided in the VPN apparatus 8 according to the third embodiment. Means, second deletion request signal receiving means, deletion response signal transmitting means, second deletion response signal transmitting means), setting deletion request section 89 (third deletion request signal transmission means), and setting deletion start request section 90. (Deletion start request signal transmission means).

  As will be described in detail later, in the present embodiment, the VPN apparatus 2a requests only the VPN apparatus 4a to delete the setting of the VPN apparatus 2. The VPN device 4a requests only the VPN device 6a to delete the setting of the VPN device 2a. The VPN device 6a requests only the VPN device 8a to delete the setting of the VPN device 2a. Therefore, in the present embodiment, the setting deletion request unit 29 corresponds to the first deletion request signal transmission unit described in the claims, and the setting deletion request unit 49 corresponds to the second deletion request signal transmission unit described in the claims. Corresponding to the deletion request signal transmission means, the setting deletion request unit 69 corresponds to the third deletion request signal transmission means described in the claims.

(Setting table)
FIG. 26 (a) shows that the VPN apparatus 2a, the VPN apparatus 4a, the VPN apparatus 6a, and the VPN apparatus 8a before the VPN apparatus 2a is removed from the VPN system 1c according to the sixth embodiment of the present invention. It is a figure which shows the setting table for VPN communication currently performed. This setting table is the same as that shown in FIG. The VPN device 2a, the VPN device 4a, the VPN device 6a, and the VPN device 8a can perform VPN communication with each of the other VPN devices by using the setting table of the VPN device 2a, the VPN device 4a, the VPN device 6a, and the VPN device 8a.

  FIG. 26B shows VPNs that the VPN device 4a, the VPN device 6a, and the VPN device 8a have after the VPN device 2a is removed from the VPN system 1c according to the sixth embodiment of the present invention. It is a figure which shows the setting table for communication. This setting table is the same as that shown in FIG. As will be described in detail later, when the VPN apparatus 2a is removed from the VPN system 1c, the setting tables of the VPN apparatus 4a, the VPN apparatus 6a, and the VPN apparatus 8a are changed from those shown in FIG. 26 (a) to FIG. 26 (b). It is automatically updated to the one shown in That is, the setting data for VPN communication with the VPN device 2a is automatically deleted from the setting table.

(Removal of VPN device 2a)
FIG. 27 is a sequence showing a process flow in the VPN device 2a, the VPN device 4a, the VPN device 6a, and the VPN device 8a when removing the VPN device 2a from the VPN system 1c according to the sixth embodiment of the present invention. FIG.

  In the present embodiment, the administrator of the VPN apparatus 2a inputs an instruction for removing the VPN apparatus 2a from the VPN system 1c to the VPN apparatus 2a through the input unit 21. When the input unit 21 receives this input, the VPN device 2a requests the VPN device 4a to delete the setting of the VPN device 2a (step S141). At this time, the setting deletion request unit 29 generates a signal (deletion request signal) for requesting the setting deletion of the VPN apparatus 2a. The setting deletion request unit 29 outputs the generated deletion request signal to the wide area communication unit 26.

  The wide area communication unit 26 accesses the setting database 27 and acquires necessary setting data for VPN communication with the VPN apparatus 4a from the setting table. In the present embodiment, the base ID and IP address of the VPN apparatus 4a are acquired from the setting table shown in FIG. The wide area communication unit 26 transmits a deletion request signal to the VPN apparatus 4a using the base ID and IP address of the VPN apparatus 4a. Thus, the deletion request signal is transmitted by VPN communication using the base ID.

(Delete the setting of the VPN device 2a from the VPN device 4a)
The deletion request signal transmitted from the VPN device 2 a is received by the wide area communication unit 46 of the VPN device 4 a and output to the setting deletion unit 48. The setting deletion unit 48 deletes the setting of the VPN device 2a (step S142). At this time, the setting deletion unit 48 deletes the setting data registered in the setting table in the setting database 47 for VPN communication with the VPN apparatus 2a from the setting table. Specifically, the base ID, name, and IP address of the VPN device 2a are all deleted from the setting table. As a result, the setting table in the setting database 47 is updated from that shown in FIG. 26A to that shown in FIG.

(Delete response)
After successfully deleting the setting of the VPN device 2a, the VPN device 4a notifies the VPN device 2a to that effect (step S143). At that time, the setting deletion unit 48 generates a deletion response signal indicating that the deletion of the setting data of the VPN apparatus 2 a has been successful, and outputs it to the wide area communication unit 46.

  At this time, the setting data (base ID and IP address) for VPN communication with the VPN apparatus 2a is not included in the setting table in the setting database 47. Therefore, the wide area communication unit 46 cannot perform VPN communication using the base ID of the VPN apparatus 2a when transmitting the deletion response signal to the VPN apparatus 2a.

  However, since the VPN apparatus 4a has received the deletion request signal from the VPN apparatus 2a, it knows the IP address of the VPN apparatus 2a used for the communication at that time. Therefore, the wide area communication unit 46 transmits a deletion response signal to the VPN apparatus 2a by communication using only the IP address of the VPN apparatus 2a.

  The wide area communication unit 26 of the VPN device 2 a receives the deletion response signal transmitted from the VPN device 4 a and outputs it to the setting deletion request unit 29. The setting deletion request unit 29 has received the deletion response signal from the VPN apparatus 4a that is the counterpart of the transmission of the deletion request signal, so that at least the VPN apparatus 4a has successfully deleted the setting of the VPN apparatus 2a To figure out. As a result, the setting deletion request unit 29 instructs the setting deletion unit 28 to initialize the VPN apparatus 2a.

  In response to this instruction, the setting deletion unit 28 initializes the VPN device 2a (step S144). Specifically, the setting deletion unit 28 completely deletes the setting table from the setting database 27. As a result, the VPN device 2a cannot perform VPN communication with each VPN device in the VPN system 1c.

  The administrator of the VPN apparatus 2a physically removes the VPN apparatus 2a that has been initialized from the VPN system 1c. Thereby, removal of the VPN apparatus 2a from the VPN system 1c is completed. Thereafter, the VPN devices that constitute the VPN system 1c are only the VPN device 4a, the VPN device 6a, and the VPN device 8a.

  As shown in FIG. 27, in this embodiment, the VPN device 2a is initialized before the setting deletion of the VPN device 2a is completed in the VPN device 6a and the VPN device 8a. However, the present embodiment is not limited to this. For example, the VPN device 2a is not immediately initialized, but after a certain time has elapsed after receiving the deletion response signal from the VPN device 4a, the VPN device 6a and the VPN device 8a set the VPN device 2a. It is also possible to initialize the VPN apparatus 2a after the deletion is completed.

  In addition, the VPN apparatus 2a indirectly grasps that the setting deletion of the VPN apparatus 2a is completed in the other VPN apparatus by detecting that the VPN communication connection with the other VPN apparatus is disconnected. be able to. Therefore, the VPN apparatus 2a may initialize the VPN apparatus 2a after detecting that all the VPN communication connections between the other VPN apparatus 4a, the VPN apparatus 6a, and the VPN apparatus 8a are broken.

  The VPN apparatus 4a notifies the VPN apparatus 2a that the setting deletion of the VPN apparatus 2a was successful, and then requests the VPN apparatus 6a, which is different from the VPN apparatus 4a existing in the VPN system 1c, to delete the setting of the VPN apparatus 2a. (Step S145). At that time, the setting deletion request unit 49 transmits a deletion request signal to the wide area communication unit 46. The wide area communication unit 46 acquires setting data (base ID and IP address) registered in the setting table in the setting database 47 for VPN communication with the VPN apparatus 6a. The wide area communication unit 46 transmits a deletion request signal to the VPN apparatus 6a using the base ID and IP address of the VPN apparatus 6a. Thus, the deletion request signal is transmitted by VPN communication using the base ID.

(Delete the setting of the VPN device 2a from the VPN device 6a)
The deletion request signal transmitted from the VPN device 4 a is received by the wide area communication unit 66 of the VPN device 6 a and output to the setting deletion unit 68. The setting deletion unit 68 deletes the setting of the VPN device 2a (step S146). At this time, the setting deletion unit 68 deletes the setting data registered in the setting table in the setting database 67 for VPN communication with the VPN apparatus 2a from the setting table. Specifically, the base ID, name, and IP address of the VPN device 2a are all deleted from the setting table. As a result, the setting table in the setting database 67 is updated from that shown in FIG. 26A to that shown in FIG.

(Delete response)
After successfully deleting the setting of the VPN device 2a, the VPN device 6a notifies the VPN device 4a to that effect (step S147). At that time, the setting deletion unit 68 generates a deletion response signal indicating that the setting data of the VPN apparatus 2 a has been successfully deleted, and outputs the deletion response signal to the wide area communication unit 66. The wide area communication unit 66 acquires setting data (base ID and IP address) registered in the setting table in the setting database 67 for VPN communication with the VPN apparatus 4a. The wide area communication unit 66 transmits a deletion response signal to the VPN apparatus 4a using the base ID and IP address of the VPN apparatus 4a. Thus, the transmission of the deletion response signal from the VPN apparatus 6a to the VPN apparatus 4a is performed by VPN communication using the base ID.

  The wide area communication unit 46 of the VPN apparatus 4a receives the deletion response signal transmitted from the VPN apparatus 6a. The wide area communication unit 46 outputs the received deletion response signal to the setting deletion request unit 49. Thereby, the setting deletion request part 49 grasps that the setting deletion of the VPN apparatus 2a is successful in the VPN apparatus 6a. In the present embodiment, the VPN apparatus 4a does not perform any process triggered by the reception of the deletion response signal. That is, only the deletion response signal is received. However, the VPN device 4a may perform processing such as recording in a predetermined log file that the deletion response signal has been received from the VPN device 6a.

  The VPN apparatus 6a notifies the VPN apparatus 4a that the setting of the VPN apparatus 2a has been successfully deleted, and then sets the VPN apparatus 2a in a VPN apparatus 8a that is different from the VPN apparatus 4a and the VPN apparatus 6a existing in the VPN system 1c. Deletion is requested (step S148). At that time, the setting deletion request unit 69 transmits a deletion request signal to the wide area communication unit 66. The wide area communication unit 66 acquires setting data (base ID and IP address) registered in the setting table in the setting database 67 for VPN communication with the VPN apparatus 8a. The wide area communication unit 66 transmits a deletion request signal to the VPN apparatus 8a using the base ID and IP address of the VPN apparatus 8a. Thus, the deletion request signal is transmitted by VPN communication using the base ID.

(Delete the setting of the VPN device 2a from the VPN device 8a)
The wide area communication unit 86 of the VPN device 8a receives the deletion request signal transmitted from the VPN device 6a and outputs it to the setting deletion unit 88. The setting deletion unit 88 deletes the setting of the VPN device 2a (step S149). At that time, the setting deletion unit 88 deletes the setting data registered in the setting table in the setting database 87 for VPN communication with the VPN apparatus 2a from the setting table. Specifically, the base ID, name, and IP address of the VPN device 2a are all deleted from the setting table. As a result, the setting table in the setting database 87 is updated from that shown in FIG. 26A to that shown in FIG.

(Delete response)
After successfully deleting the setting of the VPN device 2a, the VPN device 8a notifies the VPN device 6a to that effect (step S150). At that time, the setting deletion unit 88 generates a deletion response signal indicating that the setting data of the VPN device 2 a has been successfully deleted, and outputs the deletion response signal to the wide area communication unit 86. The wide area communication unit 86 acquires setting data (base ID and IP address) registered in the setting table in the setting database 87 for VPN communication with the VPN apparatus 6a. The wide area communication unit 86 transmits a deletion response signal to the VPN apparatus 6a using the base ID and IP address of the VPN apparatus 6a. As described above, the deletion response signal is transmitted from the VPN apparatus 8a to the VPN apparatus 6a by VPN communication using the base ID.

  The wide area communication unit 66 of the VPN device 6a receives the deletion response signal transmitted from the VPN device 8a. The wide area communication unit 66 outputs the received deletion response signal to the setting deletion request unit 69. Thereby, the setting deletion request unit 69 grasps that the setting deletion of the VPN apparatus 2a is successful in the VPN apparatus 8a. In the present embodiment, the VPN apparatus 6a does not perform any processing triggered by the reception of the deletion response signal. That is, only the deletion response signal is received. However, the VPN device 6a may perform processing such as recording in a predetermined log file that the deletion response signal has been received from the VPN device 8a.

  When the setting deletion of the VPN apparatus 2a is completed in the VPN apparatus 8a, the setting deletion of the VPN apparatus 2a in all the VPN apparatuses constituting the VPN system 1c that are not removed is completed.

(Function and effect)
As described above, in the VPN system 1c of the present embodiment, when the VPN device 2a is to be removed from the VPN system 1, the settings of the VPN device 2a are all the VPN devices 4a other than the VPN device 2a, the VPN device 6a, And automatically deleted from the VPN apparatus 8a. In addition, the setting table of the VPN device 2a is automatically deleted. Thereby, a user's effort at the time of removing the VPN apparatus 2a from the VPN system 1c can be reduced. In addition, such an automatic deletion process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In the VPN system 1c, the VPN apparatus 4a uses only the IP address of the VPN apparatus 2a after deleting the setting data of the VPN apparatus 2a, that is, the base ID and IP address of the VPN apparatus 2a from the setting table. The delete response signal is transmitted to the VPN apparatus 2a. Thereby, the VPN apparatus 2a can grasp | ascertain that the setting deletion of the VPN apparatus 2a in the VPN apparatus 4a was successful by receiving the deletion response signal.

  In other words, receiving the deletion response signal by communication using only the IP address of the VPN device 2a means that communication using the base ID of the VPN device 2a is no longer possible in the VPN device 4a. This guarantees that the setting data including the base ID of the VPN device 2a has been successfully deleted in the VPN device 4a.

  Therefore, the VPN system 1c also has an effect that the setting deletion of the removed VPN apparatus 2a can be reliably performed at least in the VPN apparatus 4a.

  In addition, the VPN apparatus 2a indirectly grasps that the setting deletion of the VPN apparatus 2a is completed in the other VPN apparatus by detecting that the VPN communication connection with the other VPN apparatus is disconnected. be able to. Therefore, the VPN apparatus 2a may initialize the VPN apparatus 2a after detecting that all the VPN communication connections between the other VPN apparatus 4a, the VPN apparatus 6a, and the VPN apparatus 8a are broken.

  Further, in the VPN system 1c of the present embodiment, the VPN apparatus 2a is the only party that requests the deletion of its own settings from the VPN apparatus 4a. Therefore, the processing amount in the VPN apparatus 2a can be reduced. Compared with the case where the VPN device 2a requests the VPN device 4a, the VPN device 6a, and the VPN device 8a to delete the setting of itself, the time until the setting of the VPN device 2 is deleted from the VPN device 4a is longer. An effect that can be shortened can also be expected.

  Furthermore, the VPN apparatus 4a is the only party to which the VPN apparatus 4a requests to delete the setting of the VPN apparatus 2a. That is, one VPN apparatus 4a requests the other VPN apparatus 6a to delete the setting of the VPN apparatus 2a, and the VPN apparatus 6a requests another VPN apparatus 8a to delete the setting of the VPN apparatus 2a. As described above, the setting deletion request and the setting deletion processing of the VPN apparatus 2a are performed in a chain manner for each VPN apparatus that is not removed. As a result, the setting deletion request process is performed by being distributed to each of the VPN apparatus 4a, the VPN apparatus 6a, and the VPN apparatus 8a, so that the processing load on the VPN apparatus 4a, the VPN apparatus 6a, and the VPN apparatus 8a is reduced. .

  In the VPN system 1c according to the present embodiment, there are only three VPN devices that are not removed, the VPN device 4a, the VPN device 6a, and the VPN device 8a. However, there may be four or more VPN devices that are not removed. In this case, among the VPN devices that have completed setting deletion of the VPN device 2a, the VPN device identified by the largest base ID (for example, the VPN device 8a) is another existing VPN device that is identified by the next largest base ID. (For example, the VPN apparatus 8a ′) is requested to delete the setting of the VPN apparatus 2a using the IP address and base ID of the other existing VPN apparatus registered in the setting table. The VPN device 2a automatically deletes the settings of all (four or more) non-removed VPN devices existing in the VPN system 1c by sequentially performing the processes that are not removed. Can do.

(Modification)
FIG. 28 shows another processing flow in the VPN device 2a, the VPN device 4a, the VPN device 6a, and the VPN device 8a when the VPN device 2a is removed from the VPN system 1c according to the sixth embodiment of the present invention. FIG.

  In the example of FIG. 28, the administrator of the VPN device 4 a inputs an instruction for removing the VPN device 2 a from the VPN system 1 c to the VPN device 4 a through the input unit 41. When the input unit 41 receives this input, the VPN apparatus 4a requests the VPN apparatus 2a to delete the setting of the VPN apparatus 2a (step S151). At that time, the setting deletion start request unit 50 generates a signal (deletion start request signal) for requesting the setting deletion start of the VPN apparatus 2a. The setting deletion start request unit 50 outputs the generated deletion start request signal to the wide area communication unit 46.

  The wide area communication unit 46 accesses the setting database 47 and acquires necessary setting data for VPN communication with the VPN apparatus 2a from the setting table. In the present embodiment, the base ID and IP address of the VPN apparatus 2a are acquired from the setting table shown in FIG. The wide area communication unit 46 transmits a deletion start request signal to the VPN apparatus 2a using the base ID and IP address of the VPN apparatus 2a. As described above, the deletion start request signal is transmitted by VPN communication using the base ID.

  The wide area communication unit 26 of the VPN apparatus 2a receives the deletion start request signal transmitted from the VPN apparatus 4a. The wide area communication unit 26 transmits the received deletion start request signal to the setting deletion request unit 29. In response to this, the VPN apparatus 2a requests the VPN apparatus 4a to delete the setting of the VPN apparatus 2a (step S141). The processing from step S141 to S150 shown in FIG. 28 is the same as the processing from step S141 to S150 shown in FIG.

  As shown in FIG. 28, in the present embodiment, the trigger for starting the setting deletion process of the VPN device 2a may be not the VPN device 2a itself to be removed but the VPN device 4a that is not removed. . This eliminates the need for the administrator of the VPN system 1c to go to the place where the VPN apparatus 2a is installed and to input an instruction for removing the VPN apparatus 2a to the VPN apparatus 2a. Therefore, it is possible to further reduce the trouble of removing a desired VPN device from the VPN system 1c.

  Note that the deletion start request signal is not limited to the VPN apparatus 4a to be transmitted to the removed VPN apparatus 2a. That is, any one of the plurality of VPN devices 4a, VPN devices 6a, and VPN devices 8a that constitute the VPN system 1c and that is not removed may transmit a deletion start request signal to the VPN device 2a. . For example, even if the VPN apparatus 6a instead of the VPN apparatus 4a transmits a deletion start request signal to the VPN apparatus 2a, the same effect can be obtained.

[Additional Notes]
The present invention is not limited to the embodiments described above. Those skilled in the art can make various modifications to the present invention within the scope of the claims. That is, a new embodiment can be obtained by combining appropriately changed technical means within the scope of the claims.

(Setting data provided to the VPN device 2)
In the first to third embodiments, the VPN device 4 to the VPN device 2 are not limited to the setting table described above, and may be provided with other arbitrary setting data necessary for performing VPN communication. For example, information for identifying the VPN to which the user belongs and settings related to an encryption method used for VPN communication may be automatically provided from the VPN device 4 to the VPN device 2. Furthermore, even if it is not necessary for performing VPN communication, other common setting data, for example, SNMP settings (functions that can be equivalent to settings from the web), SYSLOG settings (IP address of remote log server) ), The MTU setting (the maximum frame length permitted to be transmitted), and the like may be automatically provided from the VPN apparatus 4 to the VPN apparatus 2.

  On the other hand, some setting data is set in advance in the VPN apparatus 4 but not provided in the VPN apparatus 2. For example, its own PPPoE username and password. The user name and password are data necessary for the VPN device to connect to the Internet, and must be individually set for each VPN device. Also, the Ethernet (registered trademark) port setting is not provided from the VPN apparatus 4 to the VPN apparatus 2. This is because each VPN apparatus needs to be individually set in accordance with a device that is directly connected to the VPN apparatus such as the PC 12. Also, the management port IP address is not provided from the VPN apparatus 4 to the VPN apparatus 2. This is because a different IP address is assigned to each device. Further, the bandwidth control setting is not provided from the VPN device 4 to the VPN device 2. This is because this setting needs to be determined for each VPN apparatus according to the line contract.

(Restriction of base ID)
As described above, in the first to third embodiments, when the user inputs only the IP address of the VPN device 2, the setting registration unit 43 determines the base ID of the VPN device 2. Here, in the VPN device 4, the setting registration unit 43 determines the base ID of the VPN device 2 by selecting any one from at least one base ID prepared in advance in the VPN device 4. Good. That is, the base ID is not determined at all, but the base ID is determined within a previously limited range.

  For example, only a certain range of numbers (for example, 3 to 8) need be prepared in advance as selectable base IDs. Or only a specific number (for example, 5) may be prepared beforehand. By these measures, registration of the VPN apparatus 2 to the communication system 1 can be controlled more flexibly. For example, the number of VPN apparatuses 2 that can be newly registered can be limited to the number of base IDs prepared in advance. It is also possible to assign a specific base ID to the specific VPN device 2.

  For example, when a VPN apparatus 2 used at a certain important base is registered in the VPN system 1, it is assumed that the fifth base ID is intentionally assigned to the VPN apparatus 2. It is assumed that the fifth base ID is a higher-rank base ID and should be assigned to a VPN device used at an important base. Therefore, it is not desired to assign to other VPN devices used at less important sites.

  Therefore, the administrator devise as follows when newly registering the VPN apparatus 2 used in an important base in the communication system 1. First, the administrator determines a date on which work for adding the VPN apparatus 2 to the VPN system 1 is performed. Then, the operator who installs the VPN apparatus 2 at the site is instructed to perform the installation work of the VPN apparatus 2 on the determined date.

  The administrator operates the VPN apparatus 4 on the day when the VPN apparatus 2 is installed, so that the base IDs that can be assigned to the newly established VPN apparatus 2 in the VPN apparatus 4 are only the base IDs having a value of 5. Set to Thereby, in the VPN apparatus 4, the base ID which the setting registration part 43 can select is restrict | limited only to the 5th base ID.

  The trader installs the VPN apparatus 2 on the day instructed by the administrator and connects to the VPN system 1 through the communication line 10 over the network. Accordingly, the installed VPN apparatus 2 requests the VPN apparatus 4 to register the setting of the VPN apparatus 2. At that time, in the VPN apparatus 4, the base IDs that can be assigned to the VPN apparatus 2 are limited to only the fifth base ID. Accordingly, the VPN apparatus 4 determines the fifth base ID as the base ID used for VPN communication with the VPN apparatus 2. As a result, the fifth base ID is intentionally assigned to the VPN apparatus 2 installed at the important base. The above device can also be used when the VPN apparatus 2 is added to the VPN system 1a.

(Disability relocation)
In the first to third embodiments, by restricting the base IDs that can be assigned to the newly installed VPN device in advance, it is possible to easily realize trouble transfer of the failed VPN device. The trouble transfer referred to here is a series of procedures for removing a failed VPN device, adding a replacement VPN device to the VPN system 1, and returning the communication settings in each VPN device to the original state.

  In the first embodiment, after the VPN device 2 is added to the VPN system 1, trouble transfer when the VPN device 2 fails is performed by the following procedure. It is assumed that the third base ID is assigned to the failed VPN apparatus 2. First, the trader removes the failed VPN apparatus 2 from the VPN system 1. The administrator of the VPN system 1 deletes the setting data for performing VPN communication with the VPN device 2 in the VPN device 4 and the VPN device 6.

  By operating the VPN apparatus 4, the administrator performs setting so that the base ID that can be assigned to the newly established VPN apparatus 2 is only the base ID having a value of 3 in the VPN apparatus 4. Thereby, in the VPN apparatus 4, the base ID which the setting registration part 43 can select becomes only the base ID assigned to the VPN apparatus 2 removed after the failure.

  The trader installs a new VPN apparatus 2 in place of the removed VPN apparatus 2 at the same base as the removed VPN apparatus 2 and connects to the VPN system 1 through the communication line 10 over the network. Thereby, the setting registration process in the first embodiment is started, and the VPN apparatus 2 is added to the VPN system 1.

  At that time, the installed VPN apparatus 2 requests the VPN apparatus 4 to register the setting of the VPN apparatus 2. Here, in the VPN apparatus 4, the base IDs that can be assigned to the VPN apparatus 2 are limited to only the third base ID. Therefore, the setting registration unit 43 determines the third base ID as the base ID used for VPN communication with the VPN apparatus 2.

  As a result, the same base ID as the base ID assigned to the VPN apparatus 2 before the failure is intentionally assigned to the newly added VPN apparatus 2. In other words, the new VPN device 2 takes over the settings for the VPN device 2 before the failure that was installed at the same base as it is. As a result, the setting table in the VPN device 2, the VPN device 4, and the VPN device 6 returns to the state before the removed VPN device 2 fails.

  The trouble transfer of the VPN apparatus 2 in the VPN system 1 is completed by the above procedure. In the second embodiment and the third embodiment, it goes without saying that trouble transfer of the VPN apparatus 2 is possible by the same reasoning as described above.

  In the first to third embodiments, the administrator does not have to delete the setting data for the VPN device 6. In this case, the determination unit (site identifier determination unit, first site identifier determination unit) (not shown) of the VPN apparatus 6 is registered in the setting table in the setting database 67 when receiving the registration request signal at the time of trouble transfer. It is determined whether or not the base ID of the existing VPN apparatus 2 matches the base ID of the VPN apparatus 2 included in the received registration request signal. If it is determined that they match, the setting registration unit 63 uses the base ID and IP address for VPN communication with the VPN device 2 registered in the setting table in the setting database 67 as the received registration request signal. Update to included base ID and IP address. This eliminates the need for the administrator of the VPN system 1 to go to the place where the VPN device 6 is installed and delete the setting data for VPN communication with the VPN device 2. Therefore, it is possible to reduce the trouble of the manager at the time of trouble relocation.

  In the third embodiment, the administrator does not have to delete the setting data for the VPN device 8. In this case, a determination unit (second base identifier determination unit) (not shown) of the VPN apparatus 8 receives the registration request signal at the time of trouble transfer, and the VPN apparatus 2 registered in the setting table in the setting database 87 It is determined whether the site ID matches the site ID of the VPN device 2 included in the received registration request signal. When it is determined that they match, the setting registration unit 83 uses the base ID and IP address for VPN communication with the VPN apparatus 2 registered in the setting table in the setting database 87 as the received registration request signal. Update to included base ID and IP address. This eliminates the need for the administrator of the VPN system 1 to go to the installation location of the VPN device 8 and delete the setting data for performing VPN communication with the VPN device 2. Therefore, it is possible to reduce the trouble of the manager at the time of trouble relocation.

(Other examples of obstacle relocation)
When the troubled VPN apparatus 2 is transferred to the trouble, the administrator does not have to delete the setting of the broken VPN apparatus 2 from the VPN apparatus 4 and the VPN apparatus 6. In this case, trouble transfer is realized by the following procedure.

  First, the trader removes the broken VPN apparatus 2 from the VPN system 1. At this time, the administrator of the VPN system 1 does not delete the setting data for performing VPN communication with the VPN device 2 from the VPN device 4 and the VPN device 6. Therefore, the base ID and IP address of the removed VPN apparatus 2 remain in the setting tables of the VPN apparatus 4 and the VPN apparatus 6 as they are.

  The trader installs a new VPN apparatus 2 in place of the removed VPN apparatus 2 at the same base as the removed VPN apparatus 2 and connects to the VPN system 1 through the communication line 10 over the network. Thereby, the setting registration process in the first embodiment is started, and the VPN apparatus 2 is added to the VPN system 1. At that time, the trader sets the IP address of the new VPN device 2 to be the same as the IP address of the removed VPN device 2.

  The VPN device 2 transmits a registration request signal including the IP address of the VPN device 2 to the VPN device 4. In the VPN device 4, the setting registration unit 43 determines whether or not the IP address of the VPN device 2 included in the registration request signal has been registered in the setting table in the setting database 47. As described above, when the broken VPN apparatus 2 is removed, the administrator of the VPN system 1 does not delete the base ID and IP address of the broken VPN apparatus 2 from the setting table of the VPN apparatus 4. Therefore, the IP address of the VPN device 2 included in the registration request signal received from the new VPN device 2 (which is equal to the IP address of the removed VPN device 2) remains registered in the setting table of the VPN device 4. It is.

  Therefore, the setting registration unit 43 determines that the IP address of the new VPN device 2 has been registered in the setting table. Accordingly, the setting registration unit 43 determines the base ID assigned to the new VPN device 2 as the base ID of the broken VPN device 2 that has been registered in the setting table. As a result, the same base ID as the base ID assigned to the VPN apparatus 2 before the failure is intentionally assigned to the new VPN apparatus 2 installed at the same base.

  In the setting table of the VPN apparatus 4, the IP address and base ID for VPN communication with the VPN apparatus 2 before the failure remain registered. If these IP addresses and base IDs are used, VPN communication with the newly added VPN apparatus 2 can be performed. Therefore, the setting registration unit 43 determines to use the current setting table as it is. Further, the current setting table in the setting database 47 is transmitted to the new VPN device 2. The VPN device 2 stores the received setting table in the setting database 27. Thereby, the new VPN apparatus 2 can continue the same setting table as the setting table which the removed VPN apparatus 2 had as it is.

  The trouble transfer of the VPN apparatus 2 in the VPN system 1 is completed by the above procedure. In the second embodiment and the third embodiment, it goes without saying that trouble transfer of the VPN apparatus 2 is possible by the same reasoning as described above.

[Summary]
In order to solve the above problems, the communication system according to the first aspect of the present invention provides
A communication system comprising a plurality of existing communication devices and a newly added communication device,
Any of the above existing communication devices
A first memory having a first setting table in which a plurality of first setting data necessary for individually communicating with each of the plurality of existing communication devices is registered;
A first reception request signal, which is transmitted from the new communication device and includes second setting data necessary for communicating with the new communication device, and requests registration of the new communication device. Registration request signal receiving means,
First registration means for registering the second setting data included in the received registration request signal in the first setting table;
Transmission means for transmitting the first setting table in which the second setting data is registered to the newly established communication device,
The new communication device is
Input means for receiving input of the third setting data necessary for communicating with any of the existing communication devices and the second setting data;
First registration request signal transmitting means for transmitting the registration request signal to any one of the existing communication devices using the third setting data;
A second memory;
Receiving means for receiving the first setting table transmitted from any of the existing communication devices;
Writing means for writing the received first setting table into the second memory;
Communicate with the other existing communication devices registered in the first setting table in the second memory with respect to each of the other existing communication devices other than one of the existing communication devices. Second registration request signal transmission means for transmitting the registration request signal using the first setting data for performing,
Each of the other existing communication devices other than one of the existing communication devices is
A third memory having a second setting table in which the plurality of first setting data are registered;
Second registration request signal receiving means for receiving the registration request signal transmitted from the newly established communication device;
Second registration means for registering the second setting data included in the received registration request signal in the second setting table;
Each of the existing communication device and the new communication device constructs the same virtual private network,
Each of the first setting data includes at least an IP address of the existing communication device corresponding to the first setting data and a base identifier for identifying the existing communication device in the virtual private network. And
The second setting data is only the IP address of the new communication device,
Any of the existing communication devices is different from all the base identifiers registered in the first setting table, and is a second base identifier for identifying the new communication device in the virtual private network. Is further provided with a base identifier generating means for generating
The first registration means associates the second base identifier with the received second setting data, registers the second base identifier in the first setting table,
The second registration request signal transmitting means transmits the registration request signal including the second base identifier registered in the first setting table in the second memory to each of the other existing To the communication device,
The second registration means registers the second setting data and the second base identifier included in the received registration request signal in the second setting table.

  According to the above configuration, when a new communication device is added to the communication system, the new communication device is automatically registered in all the existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, there exists an effect which can reduce a user's effort at the time of adding a newly installed communication apparatus to a communication system.

  Further, according to the above configuration, when a new communication device is added to the virtual private network, the new communication device is automatically registered in all existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, a user's effort at the time of adding a new communication apparatus to a virtual private network can be reduced.

  Further, according to the above configuration, as long as the user inputs the IP address of the new communication device to the new communication device, the base identifier for the new communication device is automatically generated. Furthermore, the IP address and base identifier of the new communication device are registered in all existing communication devices. In addition, a new communication device is provided with a setting table including a new site identifier. Accordingly, since the user can save time and effort to input the base identifier for the newly installed communication device, the user's time can be further reduced.

In the communication system according to the second aspect of the present invention, in the communication system according to the first aspect,
It is preferable that the base identifier generating unit generates the second base identifier by selecting any one of at least one base identifier prepared in advance.

  According to said structure, registration of the newly installed communication apparatus to a communication system can be controlled more flexibly. For example, the number of communication devices that can be newly registered can be limited to the number of base identifiers prepared in advance. It is also possible to assign a specific site identifier to a specific newly installed communication device.

In the communication system according to the third aspect of the present invention, in the communication system according to the first or second aspect,
Any of the existing communication apparatuses further includes a determination unit that determines whether or not the IP address included in the registration request signal received from the new communication apparatus has been registered in the setting table. And
When it is determined that the IP address has been registered in the setting table, the transmission unit preferably transmits the current setting table in the first memory to the newly established communication device.

  According to the above configuration, the existing communication device that has failed can be replaced with a new communication device that takes over the settings of the existing communication device without any trouble.

In the communication system according to the fourth aspect of the present invention, in the communication system according to any one of the first to third aspects,
Each of the other existing communication devices other than any one of the existing communication devices determines whether or not the second base identifier included in the received registration request signal has been registered in the second setting table. A base identifier determination means for determining whether or not
When it is determined that the second identifier has been registered in the second setting table, the second registration unit is configured to store the second setting data registered in the second setting table and the second setting data. It is preferable to update the second site identifier to the second setting data and the second site identifier included in the received registration request signal.

  According to the above configuration, when a communication device that has failed once after being registered in the communication system is replaced with a new communication device, registration of each of the other existing communication devices other than any of the existing communication devices is performed. Information is also automatically updated. As a result, the administrator of the communication system goes to the installation location of each of the other existing communication devices other than the one of the existing communication devices, and the registration information of the failed communication device is stored in each of the other existing communication devices. Since it is not necessary to delete from the setting table in the communication apparatus, it is possible to reduce the labor of the administrator.

In order to solve the above problems, a communication system according to the fifth aspect of the present invention provides
A communication system comprising a plurality of existing communication devices and a newly added communication device,
Any of the above existing communication devices
A first memory having a first setting table in which a plurality of first setting data necessary for individually communicating with each of the plurality of existing communication devices is registered;
A first reception request signal, which is transmitted from the new communication device and includes second setting data necessary for communicating with the new communication device, and requests registration of the new communication device. Registration request signal receiving means,
First registration means for registering the second setting data included in the received registration request signal in the first setting table;
Transmitting means for transmitting the first setting table in which the second setting data is registered to the newly established communication device;
For each of the other existing communication devices other than any of the existing communication devices, the first first device for communicating with the other existing communication device registered in the first setting table. A second registration request signal transmitting means for transmitting the registration request signal using setting data,
The new communication device is
Input means for receiving input of the third setting data necessary for communicating with any of the existing communication devices and the second setting data;
First registration request signal transmitting means for transmitting the registration request signal to any one of the existing communication devices using the third setting data;
A second memory;
Receiving means for receiving the first setting table transmitted from any of the existing communication devices;
Writing means for writing the received first setting table into the second memory;
Each of the other existing communication devices other than one of the existing communication devices is
A third memory having a second setting table in which the plurality of first setting data are registered;
Second registration request signal receiving means for receiving the registration request signal transmitted from any of the existing communication devices;
Second registration means for registering the second setting data included in the received registration request signal in the second setting table;
Each of the existing communication device and the new communication device constructs the same virtual private network,
Each of the first setting data includes at least an IP address of the existing communication device corresponding to the first setting data and a base identifier for identifying the existing communication device in the virtual private network. And
The second setting data is only the IP address of the new communication device,
Any of the existing communication devices is different from all the base identifiers registered in the first setting table, and is a second base identifier for identifying the new communication device in the virtual private network. Is further provided with a base identifier generating means for generating
The first registration means associates the second base identifier with the received second setting data, registers the second base identifier in the first setting table,
The second registration request signal transmitting means transmits the registration request signal including the second base identifier registered in the first setting table in the second memory to each of the other existing To the communication device,
The second registration means registers the second setting data and the second base identifier included in the received registration request signal in the second setting table.

  According to the above configuration, when a new communication device is added to the communication system, the new communication device is automatically registered in all the existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, there exists an effect which can reduce a user's effort at the time of adding a newly installed communication apparatus to a communication system.

  Further, in the system of this configuration, the new communication device requests the registration of itself is only one existing communication device. Therefore, it is possible to reduce the processing amount in the newly installed communication device. In addition, compared to the case where a newly installed communication device requests its own registration to another existing communication device, it is also possible to shorten the time until the newly installed communication device is registered in another existing communication device. I can expect.

  Further, according to the above configuration, when a new communication device is added to the virtual private network, the new communication device is automatically registered in all existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, a user's effort at the time of adding a new communication apparatus to a virtual private network can be reduced.

  Further, according to the above configuration, as long as the user inputs the IP address of the new communication device to the new communication device, the base identifier for the new communication device is automatically generated. Furthermore, the IP address and base identifier of the new communication device are registered in all existing communication devices. In addition, a new communication device is provided with a setting table including a new site identifier. Accordingly, since the user can save time and effort to input the base identifier for the newly installed communication device, the user's time can be further reduced.

In the communication system according to the sixth aspect of the present invention, in the communication system according to the fifth aspect,
It is preferable that the base identifier generating unit generates the second base identifier by selecting any one of at least one base identifier prepared in advance.

  According to said structure, registration of the newly installed communication apparatus to a communication system can be controlled more flexibly. For example, the number of communication devices that can be newly registered can be limited to the number of base identifiers prepared in advance. It is also possible to assign a specific site identifier to a specific newly installed communication device.

In the communication system according to the seventh aspect of the present invention, in the communication system according to the fifth or sixth aspect,
Any of the existing communication apparatuses further includes a determination unit that determines whether or not the IP address included in the registration request signal received from the new communication apparatus has been registered in the setting table. And
When it is determined that the IP address has been registered in the setting table, the transmission unit preferably transmits the current setting table in the first memory to the newly established communication device.

According to the above configuration, the existing communication device that has failed can be replaced with a new communication device that takes over the settings of the existing communication device without trouble. In the communication system according to the eighth aspect of the present invention, In the communication system according to any one of the fifth to seventh aspects,
Each of the other existing communication devices other than any one of the existing communication devices determines whether or not the second base identifier included in the received registration request signal has been registered in the second setting table. A base identifier determination means for determining whether or not
When it is determined that the second identifier has been registered in the second setting table, the second registration unit is configured to store the second setting data registered in the second setting table and the second setting data. It is preferable to update the second site identifier to the second setting data and the second site identifier included in the received registration request signal.

  According to the above configuration, when a communication device that has failed once after being registered in the communication system is replaced with a new communication device, registration of each of the other existing communication devices other than any of the existing communication devices is performed. Information is also automatically updated. As a result, the administrator of the communication system goes to the installation location of each of the other existing communication devices other than the one of the existing communication devices, and the registration information of the failed communication device is stored in each of the other existing communication devices. Since it is not necessary to delete from the setting table in the communication apparatus, it is possible to reduce the labor of the administrator.

In order to solve the above problems, a communication system according to the ninth aspect of the present invention
A communication system comprising a plurality of existing communication devices and a newly added communication device,
Any of the above existing communication devices
A first memory having a first setting table in which a plurality of first setting data necessary for individually communicating with each of the plurality of existing communication devices is registered;
A first reception request signal, which is transmitted from the new communication device and includes second setting data necessary for communicating with the new communication device, and requests registration of the new communication device. Registration request signal receiving means,
First registration means for registering the second setting data included in the received registration request signal in the first setting table;
Transmitting means for transmitting the first setting table in which the second setting data is registered to the newly established communication device;
The registration request signal is transmitted to the other existing communication device using the first setting data registered in the first setting table for communicating with the other communication device. Second registration request signal transmission means,
The new communication device is
Input means for receiving input of the third setting data necessary for communicating with any of the existing communication devices and the second setting data;
First registration request signal transmitting means for transmitting the registration request signal to any one of the existing communication devices using the third setting data;
A second memory;
Receiving means for receiving the first setting table transmitted from any of the existing communication devices;
Writing means for writing the received first setting table into the second memory;
Other existing communication devices are as follows:
A third memory having a second setting table in which the plurality of first setting data are registered;
Second registration request signal receiving means for receiving the registration request signal transmitted from any of the existing communication devices;
Second registration means for registering the second setting data included in the received registration request signal in the second setting table;
For the other existing communication device that has not received the registration request signal, the first first device for communicating with the other existing communication device registered in the second setting table. A third registration request signal transmitting means for transmitting the registration request signal using the setting data;
Each existing communication device other than one of the above existing communication devices and the other existing communication device,
A fourth memory storing a third setting table in which the plurality of first setting data are registered;
Third registration request signal receiving means for receiving the registration request signal transmitted from the outside;
Third registration means for registering the second setting data included in the received registration request signal in the third setting table;
For the other existing communication device that has not received the registration request signal, the first first device for communicating with the other existing communication device registered in the third setting table. A fourth registration request signal transmitting means for transmitting the registration request signal using the setting data;
Each of the existing communication device and the new communication device constructs the same virtual private network,
Each of the first setting data includes at least an IP address of the existing communication device corresponding to the first setting data and a base identifier for identifying the existing communication device in the virtual private network. And
The second setting data is only the IP address of the new communication device,
Any of the existing communication devices is different from all the base identifiers registered in the first setting table, and is a second base identifier for identifying the new communication device in the virtual private network. Is further provided with a base identifier generating means for generating
The first registration means associates the second base identifier with the received second setting data, registers the second base identifier in the first setting table,
The second registration request signal transmitting means transmits the registration request signal including the second base identifier registered in the first setting table in the second memory to the other existing communication. To the device,
The second registration means registers the second setting data and the second base identifier included in the received registration request signal in the second setting table,
The third registration request signal transmission means receives the registration request signal including the second base identifier registered in the second setting table in the third memory, and the registration request signal. To other yet existing communication devices that are not
The fourth registration request signal transmitting means receives the registration request signal including the second base identifier registered in the third setting table in the fourth memory, and the registration request signal. It is preferable to transmit to another communication apparatus that is not yet installed.

  According to the above configuration, when a new communication device is added to the communication system, the new communication device is automatically registered in all the existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, there exists an effect which can reduce a user's effort at the time of adding a newly installed communication apparatus to a communication system.

  Further, in the system of this configuration, the new communication device requests the registration of itself is only one existing communication device. Therefore, it is possible to reduce the processing amount in the newly installed communication device. In addition, compared to the case where a newly installed communication device requests its own registration to another existing communication device, it is also possible to shorten the time until the newly installed communication device is registered in another existing communication device. I can expect.

  Further, the existing communication device requests only one existing communication device to request registration of the new communication device. That is, one existing communication device requests registration of a new communication device to another existing communication device, and the other existing communication device further includes another existing communication device. Request the device to register a new communication device. In this way, the registration request and registration process for a new communication device are performed in a chain for each existing communication device. As a result, the registration request processing is performed in a distributed manner in each existing communication device, so that the processing burden on each existing communication device is reduced.

  Further, according to the above configuration, when a new communication device is added to the virtual private network, the new communication device is automatically registered in all existing communication devices. Further, a setting table in which all existing communication devices are registered is automatically provided to the new communication device. Thereby, a user's effort at the time of adding a new communication apparatus to a virtual private network can be reduced.

  Further, according to the above configuration, as long as the user inputs the IP address of the new communication device to the new communication device, the base identifier for the new communication device is automatically generated. Furthermore, the IP address and base identifier of the new communication device are registered in all existing communication devices. In addition, a new communication device is provided with a setting table including a new site identifier. Accordingly, since the user can save time and effort to input the base identifier for the newly installed communication device, the user's time can be further reduced.

In the communication system according to the tenth aspect of the present invention, in the communication system according to the ninth aspect,
It is preferable that the base identifier generating unit generates the second base identifier by selecting any one of at least one base identifier prepared in advance.

  According to said structure, registration of the newly installed communication apparatus to a communication system can be controlled more flexibly. For example, the number of communication devices that can be newly registered can be limited to the number of base identifiers prepared in advance. It is also possible to assign a specific site identifier to a specific newly installed communication device.

In the communication system according to the eleventh aspect of the present invention, in the communication system according to the ninth or tenth aspect,
Any of the existing communication apparatuses further includes a determination unit that determines whether or not the IP address included in the registration request signal received from the new communication apparatus has been registered in the setting table. And
When it is determined that the IP address has been registered in the setting table, the transmission unit preferably transmits the current setting table in the first memory to the newly established communication device.

  According to the above configuration, the existing communication device that has failed can be replaced with a new communication device that takes over the settings of the existing communication device without any trouble.

In the communication system according to the twelfth aspect of the present invention, in the communication system according to any one of the ninth to eleventh aspects,
The other existing communication device determines whether the second base identifier included in the received registration request signal has been registered in the second setting table. Further comprising means,
Each of the existing communication devices other than any one of the communication devices and the other existing communication devices has the second base identifier included in the received registration request signal registered in the third setting table. A second site identifier judging means for judging whether or not there is,
When it is determined that the second identifier has been registered in the second setting table, the second registration unit is configured to store the second setting data registered in the second setting table and the second setting data. Update the second site identifier to the second setting data and the second site identifier included in the received registration request signal,
When it is determined that the second identifier is already registered in the third setting table, the third registration unit is configured to store the second setting data registered in the third setting table and the second setting data. It is preferable to update the second site identifier to the second setting data and the second site identifier included in the received registration request signal.

  According to the above configuration, when a communication device that has failed once after being registered in the communication system is replaced with a new communication device, registration of each of the other existing communication devices other than any of the existing communication devices is performed. Information is also automatically updated. As a result, the administrator of the communication system goes to the installation location of each of the other existing communication devices other than the one of the existing communication devices, and the registration information of the failed communication device is stored in each of the other existing communication devices. Since it is not necessary to delete from the setting table in the communication apparatus, it is possible to reduce the labor of the administrator.

In order to solve the above problems, a communication system according to the thirteenth aspect of the present invention
A communication system comprising a plurality of communication devices,
Each of the above communication devices
A memory having a setting table in which a plurality of setting data necessary for individually communicating with each of the plurality of communication devices is registered;
The communication device removed from the communication system is:
A deletion request signal transmission means for transmitting a deletion request signal for requesting setting deletion of the communication device to be removed to each of the communication devices other than the communication device to be removed among the plurality of communication devices;
Deletion response signal receiving means for receiving a deletion response signal indicating that the setting data for communicating with the communication device to be removed, transmitted from each of the communication devices other than the communication device to be removed, has been successfully deleted. When,
An initialization means for deleting the setting table from the memory after receiving the deletion response signal from all the communication devices other than the communication device to be removed,
Each communication device other than the communication device to be removed is
A deletion request signal receiving means for receiving the deletion request signal;
After receiving the delete request signal, delete means for deleting the setting data for communicating with the communication device to be removed from the setting table;
After deleting the setting data of the communication device to be removed, a deletion response signal indicating successful deletion is transmitted to the communication device to be removed using only the IP address of the communication device to be removed. Delete response signal transmission means,
Each of the above communication devices builds the same virtual private network,
Each of the setting data includes at least an IP address of the communication device corresponding to the setting data and a base identifier for identifying the communication device in the virtual private network.

  According to the above configuration, when a certain communication device is to be removed from the communication system, the setting of the certain communication device is automatically deleted from all communication devices other than the certain communication device. In addition, the setting table of the communication device to be removed is automatically deleted. Thereby, a user's effort at the time of removing a communication apparatus from a communication system can be reduced. In addition, such an automatic deletion process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In addition, each communication device that is not removed includes only the communication device IP address that is removed after the setting data of the removed communication device, that is, the base identifier and IP address of the removed communication device are deleted from the setting table. The delete response signal is transmitted to the communication device to be removed. Thereby, the communication apparatus removed can grasp | ascertain that the setting deletion of the communication apparatus removed in the communication apparatus which is not removed succeeded by having received the deletion response signal.

  In other words, the fact that the deletion response signal is received by communication using only the IP address of the communication device to be removed means that communication using the base identifier of the communication device to be removed cannot be performed in the communication device that is not removed. I mean. This ensures that the setting data including the base identifier of the communication device to be removed has been successfully deleted in the communication device that is not removed.

  Therefore, according to said structure, there exists an effect that the setting deletion of the communication apparatus removed can be reliably performed in each communication apparatus which is not removed.

In the communication system according to the fourteenth aspect of the present invention, in the communication system according to the thirteenth aspect,
Of the plurality of communication devices, at least one of the communication devices other than the communication device to be removed has the removal start request signal for requesting the start of setting deletion of the communication device to be removed, the communication to be removed. A deletion start request signal transmission means for transmitting to the device;
The communication device to be removed further includes a deletion start request signal receiving means for receiving the deletion start request signal transmitted from at least one of the communication devices,
It is preferable that the deletion request signal transmission unit transmits the deletion request signal to any one of the communication devices after receiving the deletion start request signal transmitted from the at least one of the communication devices.

  According to said structure, the administrator of a communication system does not need to go to the installation place of the communication apparatus removed and to input the instruction | indication for removal. For this reason, it is possible to further reduce the trouble of removing a desired communication device from the communication system.

In order to solve the above problems, a communication system according to the fifteenth aspect of the present invention
A communication system comprising a plurality of communication devices,
Each of the above communication devices
A memory having a setting table in which a plurality of setting data necessary for individually communicating with each of the plurality of communication devices is registered;
The communication device removed from the communication system is:
First deletion request signal transmitting means for transmitting a deletion request signal for requesting setting deletion of the removed communication device to any one of the plurality of communication devices other than the removed communication device; ,
First deletion response signal receiving means for receiving a deletion response signal indicating that the setting data for communication with the communication device to be removed transmitted from any one of the communication devices has been successfully deleted;
An initialization means for deleting the setting table from the memory after transmitting the deletion request signal,
Any of the above communication devices
First deletion request signal receiving means for receiving the deletion request signal transmitted from the communication device to be removed;
A first deletion means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A second deletion request signal transmitting means for transmitting the deletion request signal to each communication device other than the communication device to be removed and any one of the communication devices among the plurality of communication devices;
Second deletion response signal receiving means for receiving the deletion response signal transmitted from each of the other communication devices;
After deleting the setting data for communicating with the communication device to be removed from the setting table and receiving the deletion response signal transmitted from all the other communication devices, the deletion response signal is A second deletion response signal transmission means for transmitting to the communication device to be removed using only the IP address of the communication device to be removed;
Each of the other communication devices is
Second deletion request signal receiving means for receiving the deletion request signal transmitted from any one of the communication devices;
A second deleting means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A second deletion response signal transmitting means for transmitting the deletion response signal to any one of the communication devices after deleting the setting data for communicating with the communication device to be removed from the setting table; And
Each of the above communication devices builds the same virtual private network,
Each of the setting data includes at least an IP address of the communication device corresponding to the setting data and a base identifier for identifying the communication device in the virtual private network.

  According to the above configuration, when a certain communication device is to be removed from the communication system, the setting of the certain communication device is automatically deleted from all communication devices other than the certain communication device. In addition, the setting table of the communication device to be removed is automatically deleted. Thereby, a user's effort at the time of removing a communication apparatus from a communication system can be reduced. In addition, such an automatic deletion process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In addition, the communication device that has received the deletion request signal from the communication device to be removed, after setting data of the communication device to be removed, that is, after deleting the base identifier and IP address of the communication device to be removed from the setting table, A deletion response signal is transmitted to the communication device to be removed using only the communication device IP address to be removed. Thereby, the communication apparatus removed can grasp | ascertain that the setting deletion of the communication apparatus removed in the communication apparatus which is not removed succeeded by having received the deletion response signal.

  In other words, the fact that the deletion response signal has been received by communication using only the IP address of the communication device to be removed means that the base identifier of the communication device to be removed in the communication device that has received the deletion request signal from the communication device to be removed. It means that communication using is no longer possible. This ensures that the setting data including the base identifier of the communication device to be removed has been successfully deleted in the communication device that has received the deletion request signal from the communication device to be removed.

  Therefore, according to said structure, there exists an effect that the setting deletion of the removed communication apparatus can be reliably performed in the communication apparatus which received the deletion request signal from the removed communication apparatus.

  Moreover, the communication apparatus to which the removed communication apparatus requests its own setting deletion is only one communication apparatus that is not removed. Therefore, the processing amount in the removed communication device can be reduced. In addition, the time until the settings of the removed communication device are deleted from other non-removed communication devices, compared to the case where the removed communication device requests a plurality of non-removed communication devices to delete their settings. An effect that can be shortened can also be expected.

In the communication system according to the sixteenth aspect of the present invention, in the communication system according to the fifteenth aspect,
Of the plurality of communication devices, at least one of the communication devices other than the communication device to be removed has the removal start request signal for requesting the start of setting deletion of the communication device to be removed, the communication to be removed. A deletion start request signal transmission means for transmitting to the device;
The communication device to be removed further includes a deletion start request signal receiving means for receiving the deletion start request signal transmitted from at least one of the communication devices,
The first deletion request signal transmitting means preferably transmits the deletion request signal to any one of the communication devices after receiving the deletion start request signal transmitted from the at least one of the communication devices.

  According to said structure, the administrator of a communication system does not need to go to the installation place of the communication apparatus removed and to input the instruction | indication for removal. For this reason, it is possible to further reduce the trouble of removing a desired communication device from the communication system.

In order to solve the above problem, a communication system according to the seventeenth aspect of the present invention
A communication system comprising a plurality of communication devices,
Each of the above communication devices
A memory having a setting table in which a plurality of setting data necessary for individually communicating with each of the plurality of communication devices is registered;
The communication device removed from the communication system is:
First deletion request signal transmitting means for transmitting a deletion request signal for requesting setting deletion of the removed communication device to any one of the plurality of communication devices other than the removed communication device; ,
First deletion response signal receiving means for receiving a deletion response signal indicating that the setting data of the communication device to be removed has been successfully deleted;
An initialization means for deleting the setting table from the memory after transmitting the deletion request signal,
Any of the above communication devices
First deletion request signal receiving means for receiving the deletion request signal transmitted from the communication device to be removed;
A first deletion means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A second deletion request signal transmitting means for transmitting the deletion request signal to a communication device other than the communication device to be removed and any one of the communication devices among the plurality of communication devices;
After deleting the setting data for communicating with the communication device to be removed from the setting table, the communication device to be removed using only the IP address of the communication device to be removed as the deletion response signal. A second deletion response signal transmission means for transmitting to
Each communication device other than the communication device to be removed and any one of the communication devices,
Second deletion request signal receiving means for receiving the deletion request signal transmitted from the outside;
A second deleting means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A third deletion request signal transmitting means for transmitting the deletion request signal to the other communication device that has not received the deletion request signal;
Each of the above communication devices builds the same virtual private network,
Each of the setting data includes at least an IP address of the communication device corresponding to the setting data and a base identifier for identifying the communication device in the virtual private network.

  According to the above configuration, when a certain communication device is to be removed from the communication system, the setting of the certain communication device is automatically deleted from all communication devices other than the certain communication device. In addition, the setting table of the communication device to be removed is automatically deleted. Thereby, a user's effort at the time of removing a communication apparatus from a communication system can be reduced. In addition, such an automatic deletion process does not require any dedicated server. Therefore, the labor and cost for preparing the server can be reduced.

  In addition, the communication device that has received the deletion request signal from the communication device to be removed, after setting data of the communication device to be removed, that is, after deleting the base identifier and IP address of the communication device to be removed from the setting table, A deletion response signal is transmitted to the communication device to be removed using only the communication device IP address to be removed. Thereby, the communication apparatus removed can grasp | ascertain that the setting deletion of the communication apparatus removed in the communication apparatus which is not removed succeeded by having received the deletion response signal.

  In other words, the fact that the deletion response signal has been received by communication using only the IP address of the communication device to be removed means that the base identifier of the communication device to be removed in the communication device that has received the deletion request signal from the communication device to be removed. It means that communication using is no longer possible. This ensures that the setting data including the base identifier of the communication device to be removed has been successfully deleted in the communication device that has received the deletion request signal from the communication device to be removed.

  Therefore, according to said structure, there exists an effect that the setting deletion of the removed communication apparatus can be reliably performed in the communication apparatus which received the deletion request signal from the removed communication apparatus.

  Moreover, the communication apparatus to which the removed communication apparatus requests its own setting deletion is only one communication apparatus that is not removed. Therefore, the processing amount in the removed communication device can be reduced. In addition, the time until the settings of the removed communication device are deleted from other non-removed communication devices, compared to the case where the removed communication device requests a plurality of non-removed communication devices to delete their settings. An effect that can be shortened can also be expected.

  Furthermore, the other communication device that has received the deletion request signal requests the setting deletion of the communication device to be removed is only one other communication device that is not removed. That is, one non-removable communication device requests the other non-removable communication device to delete the setting of the removed communication device, and the other non-removable communication device is not removed. The communication device is requested to delete the setting of the communication device to be removed. In this way, the setting deletion request and the setting deletion processing for the communication device to be removed are performed in a chain manner for each communication device that is not removed. As a result, the setting deletion request process is performed by being distributed to each communication device that is not removed, so that the processing load on each communication device that is not removed is reduced.

In the communication system according to the eighteenth aspect of the present invention, in the communication system according to the seventeenth aspect,
Of the plurality of communication devices, at least one of the communication devices other than the communication device to be removed has the removal start request signal for requesting the start of setting deletion of the communication device to be removed, the communication to be removed. A deletion start request signal transmission means for transmitting to the device;
The communication device to be removed further includes a deletion start request signal receiving means for receiving the deletion start request signal transmitted from at least one of the communication devices,
The first deletion request signal transmitting means preferably transmits the deletion request signal to any one of the communication devices after receiving the deletion start request signal transmitted from the at least one of the communication devices.

  According to said structure, the administrator of a communication system does not need to go to the installation place of the communication apparatus removed and to input the instruction | indication for removal. For this reason, it is possible to further reduce the trouble of removing a desired communication device from the communication system.

In the communication system according to the nineteenth aspect of the present invention, in the communication system according to the seventeenth or eighteenth aspect,
The initialization means confirms that the communication connection using the setting data with all of the plurality of communication devices other than the communication device to be removed among the plurality of communication devices is disconnected. It is preferable to delete the setting table.

  According to said structure, in all the communication apparatuses which are not removed, after the setting data of the removed communication apparatus are deleted reliably, the removed communication apparatus can be initialized.

  The display device according to the present invention can be widely used as various communication devices such as a VPN router.

1, 1a, 1b, 1c VPN system (communication system)
2,2a VPN device (communication device, new communication device)
4,4a VPN device (communication device, existing communication device)
6,6a VPN device (communication device, existing communication device)
8,8a VPN device (communication device, existing communication device)
10 Communication line 12 PC
21 Input section (input means)
22 Authentication unit (authentication request signal transmitting means, authentication result signal receiving means)
23 Setting registration unit (receiving means, writing means)
24 setting registration request section (first registration request signal transmission means)
25 Local communication unit 26 Wide area communication unit (reception means)
27 Setting database 28 Setting deletion unit (initialization means)
29 Setting deletion request section (deletion request signal transmission means, first deletion request signal transmission means, deletion response signal reception means, first deletion response signal reception means, deletion start request signal reception means)
30 Setting deletion start request section (deletion start request signal transmission means)
41 Input unit 42 Authentication unit (authentication request signal receiving means, authentication means, authentication result signal transmitting means)
43 Setting registration unit (first registration request signal receiving means, first registration means, transmitting means, base identifier generating means)
44 Setting registration request section (second registration request signal transmission means)
45 Local communication section 46 Wide area communication section (transmission means)
47 setting database 48 setting deletion unit (deleting means, first deleting means, deletion request signal receiving means, first deletion request signal receiving means, deletion response signal transmitting means, first deletion response signal transmitting means)
49 Setting deletion request section (second deletion request signal transmission means, second deletion response signal reception means)
50 Setting deletion start request section (deletion start request signal transmission means)
61 Input Unit 62 Authentication Unit 63 Setting Registration Unit (Second Registration Request Signal Receiving Unit, Second Registration Unit)
64 Setting registration request section (third registration request signal transmission means)
65 local communication unit 66 wide area communication unit 67 setting database 68 setting deletion unit (deleting unit, second deleting unit, deletion request signal receiving unit, second deletion request signal receiving unit, deletion response signal transmitting unit, second deletion Response signal transmission means)
69 Setting deletion request section (third deletion request signal transmission means)
70 Setting deletion start request section (deletion start request signal transmission means)
81 Input unit 82 Authentication unit 83 Setting registration unit (third registration request signal receiving means, third registration means)
84 Setting registration request section (fourth registration request signal transmission means)
85 Local communication section 86 Wide area communication section 87 Setting database 88 Setting deletion section (deleting means, second deleting means, deletion request signal receiving means, second deletion request signal receiving means, deletion response signal transmitting means, second deletion Response signal transmission means)
89 Setting deletion request section (third deletion request signal transmission means)
90 Setting deletion start request section (deletion start request signal transmission means)

Claims (19)

A communication system comprising a plurality of existing communication devices and a newly added communication device,
Any of the above existing communication devices
A first memory having a first setting table in which a plurality of first setting data necessary for individually communicating with each of the plurality of existing communication devices is registered;
A first reception request signal, which is transmitted from the new communication device and includes second setting data necessary for communicating with the new communication device, and requests registration of the new communication device. Registration request signal receiving means,
First registration means for registering the second setting data included in the received registration request signal in the first setting table;
Transmission means for transmitting the first setting table in which the second setting data is registered to the newly established communication device,
The new communication device is
Input means for receiving input of the third setting data necessary for communicating with any of the existing communication devices and the second setting data;
First registration request signal transmitting means for transmitting the registration request signal to any one of the existing communication devices using the third setting data;
A second memory;
Receiving means for receiving the first setting table transmitted from any of the existing communication devices;
Writing means for writing the received first setting table into the second memory;
Communicate with the other existing communication devices registered in the first setting table in the second memory with respect to each of the other existing communication devices other than one of the existing communication devices. Second registration request signal transmission means for transmitting the registration request signal using the first setting data for performing,
Each of the other existing communication devices other than one of the existing communication devices is
A third memory having a second setting table in which the plurality of first setting data are registered;
Second registration request signal receiving means for receiving the registration request signal transmitted from the newly established communication device;
Second registration means for registering the second setting data included in the received registration request signal in the second setting table;
Each of the existing communication device and the new communication device constructs the same virtual private network,
Each of the first setting data includes at least an IP address of the existing communication device corresponding to the first setting data and a base identifier for identifying the existing communication device in the virtual private network. And
The second setting data is only the IP address of the new communication device,
Any of the existing communication devices is different from all the base identifiers registered in the first setting table, and is a second base identifier for identifying the new communication device in the virtual private network. Is further provided with a base identifier generating means for generating
The first registration means associates the second base identifier with the received second setting data, registers the second base identifier in the first setting table,
The second registration request signal transmitting means transmits the registration request signal including the second base identifier registered in the first setting table in the second memory to each of the other existing To the communication device,
The communication system, wherein the second registration means registers the second setting data and the second base identifier included in the received registration request signal in the second setting table.   2. The communication system according to claim 1, wherein the base identifier generating unit generates the second base identifier by selecting any one of at least one base identifier prepared in advance. . Any of the existing communication devices includes a determination unit that determines whether the IP address included in the registration request signal received from the new communication device has been registered in the first setting table. In addition,
When it is determined that the IP address has been registered in the first setting table, the transmitting means transmits the current first setting table in the first memory to the new communication device. The communication system according to claim 1 or 2. Each of the other existing communication devices other than any one of the existing communication devices determines whether or not the second base identifier included in the received registration request signal has been registered in the second setting table. A base identifier determination means for determining whether or not
When it is determined that the second identifier has been registered in the second setting table, the second registration unit is configured to store the second setting data registered in the second setting table and the second setting data. The second base identifier is updated to the second setting data and the second base identifier included in the received registration request signal. The communication system described. A communication system comprising a plurality of existing communication devices and a newly added communication device,
Any of the above existing communication devices
A first memory having a first setting table in which a plurality of first setting data necessary for individually communicating with each of the plurality of existing communication devices is registered;
A first reception request signal, which is transmitted from the new communication device and includes second setting data necessary for communicating with the new communication device, and requests registration of the new communication device. Registration request signal receiving means,
First registration means for registering the second setting data included in the received registration request signal in the first setting table;
Transmitting means for transmitting the first setting table in which the second setting data is registered to the newly established communication device;
For each of the other existing communication devices other than any of the existing communication devices, the first first device for communicating with the other existing communication device registered in the first setting table. A second registration request signal transmitting means for transmitting the registration request signal using the setting data;
The new communication device is
Input means for receiving input of the third setting data necessary for communicating with any of the existing communication devices and the second setting data;
First registration request signal transmitting means for transmitting the registration request signal to any one of the existing communication devices using the third setting data;
A second memory;
Receiving means for receiving the first setting table transmitted from any of the existing communication devices;
Writing means for writing the received first setting table into the second memory;
Each of the other existing communication devices other than one of the existing communication devices is
A third memory having a second setting table in which the plurality of first setting data are registered;
Second registration request signal receiving means for receiving the registration request signal transmitted from any of the existing communication devices;
Second registration means for registering the second setting data included in the received registration request signal in the second setting table;
Each of the existing communication device and the new communication device constructs the same virtual private network,
Each of the first setting data includes at least an IP address of the existing communication device corresponding to the first setting data and a base identifier for identifying the existing communication device in the virtual private network. And
The second setting data is only the IP address of the new communication device,
Any of the existing communication devices is different from all the base identifiers registered in the first setting table, and is a second base identifier for identifying the new communication device in the virtual private network. Is further provided with a base identifier generating means for generating
The first registration means associates the second base identifier with the received second setting data, registers the second base identifier in the first setting table,
The second registration request signal transmitting means transmits the registration request signal including the second base identifier registered in the first setting table in the second memory to each of the other existing To the communication device,
The communication system, wherein the second registration means registers the second setting data and the second base identifier included in the received registration request signal in the second setting table.   6. The communication system according to claim 5, wherein the base identifier generation unit generates the second base identifier by selecting any one of at least one base identifier prepared in advance. . Any of the existing communication devices includes a determination unit that determines whether the IP address included in the registration request signal received from the new communication device has been registered in the first setting table. In addition,
When it is determined that the IP address has been registered in the first setting table, the transmitting means transmits the current first setting table in the first memory to the new communication device. The communication system according to claim 5 or 6. Each of the other existing communication devices other than any one of the existing communication devices determines whether or not the second base identifier included in the received registration request signal has been registered in the second setting table. A base identifier determination means for determining whether or not
When it is determined that the second identifier has been registered in the second setting table, the second registration unit is configured to store the second setting data registered in the second setting table and the second setting data. The second base identifier is updated to the second setting data and the second base identifier included in the received registration request signal. The communication system described. A communication system comprising a plurality of existing communication devices and a newly added communication device,
Any of the above existing communication devices
A first memory having a first setting table in which a plurality of first setting data necessary for individually communicating with each of the plurality of existing communication devices is registered;
A first reception request signal, which is transmitted from the new communication device and includes second setting data necessary for communicating with the new communication device, and requests registration of the new communication device. Registration request signal receiving means,
First registration means for registering the second setting data included in the received registration request signal in the first setting table;
Transmitting means for transmitting the first setting table in which the second setting data is registered to the newly established communication device;
The registration request signal is transmitted to the other existing communication device using the first setting data registered in the first setting table for communicating with the other communication device. Second registration request signal transmission means,
The new communication device is
Input means for receiving input of the third setting data necessary for communicating with any of the existing communication devices and the second setting data;
First registration request signal transmitting means for transmitting the registration request signal to any one of the existing communication devices using the third setting data;
A second memory;
Receiving means for receiving the first setting table transmitted from any of the existing communication devices;
Writing means for writing the received first setting table into the second memory;
Other existing communication devices are as follows:
A third memory having a second setting table in which the plurality of first setting data are registered;
Second registration request signal receiving means for receiving the registration request signal transmitted from any of the existing communication devices;
Second registration means for registering the second setting data included in the received registration request signal in the second setting table;
For the other existing communication device that has not received the registration request signal, the first first device for communicating with the other existing communication device registered in the second setting table. A third registration request signal transmitting means for transmitting the registration request signal using the setting data;
Each existing communication device other than one of the above existing communication devices and the other existing communication device,
A fourth memory storing a third setting table in which the plurality of first setting data are registered;
Third registration request signal receiving means for receiving the registration request signal transmitted from the outside;
Third registration means for registering the second setting data included in the received registration request signal in the third setting table;
For the other existing communication device that has not received the registration request signal, the first first device for communicating with the other existing communication device registered in the third setting table. A fourth registration request signal transmitting means for transmitting the registration request signal using setting data;
Each of the existing communication device and the new communication device constructs the same virtual private network,
Each of the first setting data includes at least an IP address of the existing communication device corresponding to the first setting data and a base identifier for identifying the existing communication device in the virtual private network. And
The second setting data is only the IP address of the new communication device,
Any of the existing communication devices is different from all the base identifiers registered in the first setting table, and is a second base identifier for identifying the new communication device in the virtual private network. Is further provided with a base identifier generating means for generating
The first registration means associates the second base identifier with the received second setting data, registers the second base identifier in the first setting table,
The second registration request signal transmitting means transmits the registration request signal including the second base identifier registered in the first setting table in the first memory to the other existing communication. To the device,
The second registration means registers the second setting data and the second base identifier included in the received registration request signal in the second setting table,
The third registration request signal transmission means receives the registration request signal including the second base identifier registered in the second setting table in the third memory, and the registration request signal. To other yet existing communication devices that are not
The third registration means registers the second setting data and the second base identifier included in the received registration request signal in the third setting table,
The fourth registration request signal transmission means receives the registration request signal including the second base identifier registered in the third setting table in the fourth memory, and receives the registration request signal. A communication system, wherein the transmission is performed with respect to the other existing communication device that is not connected.   The communication system according to claim 9, wherein the base identifier generation unit generates the second base identifier by selecting any one of at least one base identifier prepared in advance. . Any of the existing communication devices includes a determination unit that determines whether the IP address included in the registration request signal received from the new communication device has been registered in the first setting table. In addition,
When it is determined that the IP address has been registered in the first setting table, the transmitting means transmits the current first setting table in the first memory to the new communication device. The communication system according to claim 9 or 10. The other existing communication device determines whether the second base identifier included in the received registration request signal has been registered in the second setting table. Further comprising means,
Each of the existing communication devices other than any one of the communication devices and the other existing communication devices has the second base identifier included in the received registration request signal registered in the third setting table. A second site identifier judging means for judging whether or not there is,
When it is determined that the second identifier has been registered in the second setting table, the second registration unit is configured to store the second setting data registered in the second setting table and the second setting data. Update the second site identifier to the second setting data and the second site identifier included in the received registration request signal,
When it is determined that the second identifier is already registered in the third setting table, the third registration unit is configured to store the second setting data registered in the third setting table and the second setting data. The second site identifier is updated to the second setting data and the second site identifier included in the received registration request signal. The communication system described. A communication system comprising a plurality of communication devices,
Each of the above communication devices
A memory having a setting table in which a plurality of setting data necessary for individually communicating with each of the plurality of communication devices is registered;
The communication device removed from the communication system is:
A deletion request signal transmission means for transmitting a deletion request signal for requesting setting deletion of the communication device to be removed to each of the communication devices other than the communication device to be removed among the plurality of communication devices;
Deletion response signal receiving means for receiving a deletion response signal indicating that the setting data for communicating with the communication device to be removed, transmitted from each of the communication devices other than the communication device to be removed, has been successfully deleted. When,
An initialization means for deleting the setting table from the memory after receiving the deletion response signal from all the communication devices other than the communication device to be removed,
Each communication device other than the communication device to be removed is
A deletion request signal receiving means for receiving the deletion request signal;
After receiving the delete request signal, delete means for deleting the setting data for communicating with the communication device to be removed from the setting table;
After deleting the setting data of the communication device to be removed, a deletion response signal indicating successful deletion is transmitted to the communication device to be removed using only the IP address of the communication device to be removed. Delete response signal transmission means,
Each of the above communication devices builds the same virtual private network,
Each of the setting data includes at least an IP address of the communication device corresponding to the setting data and a base identifier for identifying the communication device in the virtual private network. Of the plurality of communication devices, at least one of the communication devices other than the communication device to be removed has the removal start request signal for requesting the start of setting deletion of the communication device to be removed, the communication to be removed. A deletion start request signal transmission means for transmitting to the device;
The communication device to be removed further includes a deletion start request signal receiving means for receiving the deletion start request signal transmitted from at least one of the communication devices,
The deletion request signal transmission means transmits the deletion request signal to any one of the communication devices after receiving the deletion start request signal transmitted from the at least one of the communication devices. 14. The communication system according to 13. A communication system comprising a plurality of communication devices,
Each of the above communication devices
A memory having a setting table in which a plurality of setting data necessary for individually communicating with each of the plurality of communication devices is registered;
The communication device removed from the communication system is:
First deletion request signal transmitting means for transmitting a deletion request signal for requesting setting deletion of the removed communication device to any one of the plurality of communication devices other than the removed communication device; ,
First deletion response signal receiving means for receiving a deletion response signal indicating that the setting data for communication with the communication device to be removed transmitted from any one of the communication devices has been successfully deleted;
An initialization means for deleting the setting table from the memory after transmitting the deletion request signal,
Any of the above communication devices
First deletion request signal receiving means for receiving the deletion request signal transmitted from the communication device to be removed;
A first deletion means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A second deletion request signal transmitting means for transmitting the deletion request signal to each communication device other than the communication device to be removed and any one of the communication devices among the plurality of communication devices;
Second deletion response signal receiving means for receiving the deletion response signal transmitted from each of the other communication devices;
After deleting the setting data for communicating with the communication device to be removed from the setting table and receiving the deletion response signal transmitted from all the other communication devices, the deletion response signal is The first deletion response signal transmitting means for transmitting to the communication device to be removed using only the IP address of the communication device to be removed;
Each of the other communication devices is
Second deletion request signal receiving means for receiving the deletion request signal transmitted from any one of the communication devices;
A second deleting means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A second deletion response signal transmitting means for transmitting the deletion response signal to any one of the communication devices after deleting the setting data for communicating with the communication device to be removed from the setting table; And
Each of the above communication devices builds the same virtual private network,
Each of the setting data includes at least an IP address of the communication device corresponding to the setting data and a base identifier for identifying the communication device in the virtual private network. Of the plurality of communication devices, at least one of the communication devices other than the communication device to be removed has the removal start request signal for requesting the start of setting deletion of the communication device to be removed, the communication to be removed. A deletion start request signal transmission means for transmitting to the device;
The communication device to be removed further includes a deletion start request signal receiving means for receiving the deletion start request signal transmitted from at least one of the communication devices,
The first deletion request signal transmitting means transmits the deletion request signal to any one of the communication devices after receiving the deletion start request signal transmitted from the at least one of the communication devices. The communication system according to claim 15. A communication system comprising a plurality of communication devices,
Each of the above communication devices
A memory having a setting table in which a plurality of setting data necessary for individually communicating with each of the plurality of communication devices is registered;
The communication device removed from the communication system is:
First deletion request signal transmitting means for transmitting a deletion request signal for requesting setting deletion of the removed communication device to any one of the plurality of communication devices other than the removed communication device; ,
A deletion response signal receiving means for receiving a deletion response signal indicating successful deletion of the setting data of the communication device to be removed;
An initialization means for deleting the setting table from the memory after transmitting the deletion request signal,
Any of the above communication devices
First deletion request signal receiving means for receiving the deletion request signal transmitted from the communication device to be removed;
A first deletion means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A second deletion request signal transmitting means for transmitting the deletion request signal to a communication device other than the communication device to be removed and any one of the communication devices among the plurality of communication devices;
After deleting the setting data for communicating with the communication device to be removed from the setting table, the communication device to be removed using only the IP address of the communication device to be removed as the deletion response signal. And a deletion response signal transmitting means for transmitting to
Each communication device other than the communication device to be removed and any one of the communication devices,
Second deletion request signal receiving means for receiving the deletion request signal transmitted from the outside;
A second deleting means for deleting the setting data for communicating with the communication device to be removed after receiving the deletion request signal;
A third deletion request signal transmitting means for transmitting the deletion request signal to the other communication device that has not received the deletion request signal;
Each of the above communication devices builds the same virtual private network,
Each of the setting data includes at least an IP address of the communication device corresponding to the setting data and a base identifier for identifying the communication device in the virtual private network. Of the plurality of communication devices, at least one of the communication devices other than the communication device to be removed has the removal start request signal for requesting the start of setting deletion of the communication device to be removed, the communication to be removed. A deletion start request signal transmission means for transmitting to the device;
The communication device to be removed further includes a deletion start request signal receiving means for receiving the deletion start request signal transmitted from at least one of the communication devices,
The first deletion request signal transmitting means transmits the deletion request signal to any one of the communication devices after receiving the deletion start request signal transmitted from the at least one of the communication devices. The communication system according to claim 17. The initialization means confirms that the communication connection using the setting data with all of the plurality of communication devices other than the communication device to be removed among the plurality of communication devices is disconnected, and then stores the memory. 19. The communication system according to claim 17, wherein the setting table is deleted from the communication table.

Images