JP5957018B2 - Device detection terminal, network address prediction server, device detection method, and device detection terminal program - Google Patents

Description

  The present invention relates to a device detection terminal that detects an electronic device on a private network based on statistical information, a network address prediction server, a device detection method, and a device detection terminal program.

  In recent years, various services are provided to users by connecting a mobile terminal connected to a public network to a Web server or the like. In particular, with the advent of smartphones (high-function mobile phones), it has become possible to perform advanced services that have been provided for personal computers with mobile phones.

  In addition to smartphones, various devices that have not been connected to the conventional network are compatible with network connections, and exchanges information with other devices while providing advanced functions are increasing. .

  On the other hand, as the network structure becomes more complex, there may be situations where you want to use the network more effectively by grasping the existence of another device connected to the network or acquiring the model information of the device. It has come out.

  In response to such a problem, a device detection method on a network that can reduce the time for detecting a network device on the network is disclosed.

JP 2000-224193 A

  According to Patent Document 1, a network device sends a first tag indicating an address on its own network and a second tag for identifying the type of its own device to the network, and other network devices are A method of detecting other devices on the network by receiving the first tag and the second tag and detecting the network device is disclosed.

  However, as in Patent Document 1, a method for efficiently searching for devices on the same network has been devised, but devices can be connected to another network segment via another router or switching hub while being connectable. In some cases, it is often difficult to specify the destination address to which the tag is sent. In such a situation, for example, when searching for addresses in a brute force manner, tags may be sent to more than 15 million addresses.

  On the other hand, the present inventor pays attention to the fact that there is a statistically significant difference in the probabilities assigned to the devices for each address on the private network, and statistically processes the detection results on various networks with a server. Thus, attention was paid to the fact that the device can be detected efficiently.

  Also, if the detected device has a function to detect devices on the same network, it is more efficient if the existence of a network in another segment can be confirmed without detecting the addresses of all devices. We focused on the fact that detection can be performed.

  The present invention relates to a device detection terminal and a network address prediction server capable of detecting an electronic device in another segment on a private network based on statistical information by statistically processing the number of network addresses assigned to each device. An object of the present invention is to provide a device detection method and a device detection terminal program.

  The present invention provides the following solutions.

The invention according to the first feature is a network address prediction server that is communicably connected to a device detection terminal that detects an electronic device on a network and includes a statistical information database in a storage unit,
Network address receiving means for receiving information and network address of the detected electronic device from the device detection terminal;
The received private IP address of the detected electronic device, the unique network ID for identifying the private network, the device type, and the model name are associated with each other and stored in the statistical information database as a statistical information table. At the time, the statistical information table, network address storage means for accumulating or overwriting information in chronological order, and
Statistical information generating means for generating statistical information of the network address assigned to the electronic device stored;
In addition to the generated statistics from the device detection terminal that transmits the network address found, using information and network addresses of already electronic apparatus that has received, the network address probability is allocated exceeds a predetermined value Network address prediction means to be requested;
Expected address transmitting means for transmitting the obtained network address to the device detection terminal;
A network address prediction server is provided.
According to the first aspect of the invention, a network address prediction server that is communicably connected to a device detection terminal that detects an electronic device on a network and includes a statistical information database in a storage unit is detected from the device detection terminal. The received electronic device information and network address are received, the received private IP address of the detected electronic device, a unique network ID for identifying the private network, the device type, and the model name are When the statistical information table is associated and stored in the statistical information database, the statistical information table is accumulated or overwritten in time-sequential order, and the stored network address statistics assigned to the electronic device are stored. It generates information, in addition to the generated statistics, calculated net From the device detection terminal that transmits the network address, the information on the already received electronic device and the network address are used to obtain a network address whose allocated probability exceeds a predetermined value. Send network address.
The invention according to the second feature is a device detection terminal that is communicably connected to the network address prediction server that is the invention according to the first feature and detects an electronic device on a private network,
Expected address receiving means for receiving, from the network address prediction server, a network address that is expected to be assigned to an electronic device in a private network;
An electronic device that, based on the received expected address, confirms whether there is an electronic device to which each network address is assigned in a private network by sending a packet to the expected address of the electronic device and receiving a response from the electronic device. Device presence confirmation means,
For the electronic device whose existence has been confirmed, electronic device information acquisition means for acquiring device information of the electronic device,
A device detection terminal is provided.

  According to the second aspect of the invention, the device detection terminal that is communicably connected to the network address prediction server according to the first aspect of the invention and detects an electronic device on a private network includes the network address prediction server. The electronic device receives a network address that is expected to be assigned to the electronic device in the private network, and determines whether there is an electronic device to which each network address is assigned in the private network based on the received expected address. Confirmation is performed by sending a packet to the expected address and receiving a response from the electronic device, and device information of the electronic device is acquired for the electronic device whose existence has been confirmed.

  Although the invention which concerns on a 2nd characteristic is a category of an apparatus detection terminal, even if it is an apparatus detection method and the program for apparatus detection terminals, there exists the same effect | action and effect.

The invention according to the third feature is a device detection terminal which is the invention according to the second feature,
Electronic device detection execution means for causing the electronic device to detect the electronic device that has been confirmed and the other electronic device that is communicably connected on the same network;
The device detection terminal is characterized in that it also acquires information regarding the other detected electronic devices.

  According to the invention according to the third feature, the device detection terminal which is the invention according to the second feature is configured such that the electronic device whose existence has been confirmed and another electronic device that is communicably connected on the same network, The electronic device is detected, and information is also acquired regarding the detected other electronic device.

An invention according to a fourth feature is the electronic device detection terminal according to any of the second or third features,
Network map generating means for generating a network map based on the acquired information on the electronic device and the network address of the electronic device;
A device detection terminal is provided.

  According to the invention according to the fourth feature, the electronic device detection terminal according to any of the second or third features is based on the acquired information on the electronic device and the network address of the electronic device. Generate a map.

  According to the present invention, a device detection terminal, a network address, which can detect an electronic device in another segment on a private network based on statistical information by statistically processing the number of network addresses assigned to each device It is possible to provide a prediction server, a device detection method, and a device detection terminal program.

FIG. 1 is a schematic diagram for explaining an outline of the device detection system 1. FIG. 2 is an overall configuration diagram of the device detection system 1. FIG. 3 is a functional block diagram of the device detection terminal 10, the electronic device 50, and the network address prediction server 200. FIG. 4 is a flowchart showing device detection processing executed by the device detection terminal 10 and the electronic device 50. FIG. 5 is a flowchart showing predicted address reception processing executed by the device detection terminal 10 and the network address prediction server 200. FIG. 6 is a statistical information table in the statistical information database 250. FIG. 7 is an example of the result of calculating the existence probability of each address. FIG. 8 is an example of the generated network map.

  Hereinafter, the best mode for carrying out the present invention will be described with reference to the drawings. This is merely an example, and the technical scope of the present invention is not limited to this.

[Outline of device detection system]
FIG. 1 is a schematic diagram for explaining a device detection system 1 which is a preferred embodiment of the present invention. The device detection system 1 will be described based on FIG.

  In the device detection system 1, the device detection terminal 10 first requests the network address prediction server 200 to provide statistical information (step S01). Here, the statistical information is calculated by statistical processing to what degree each network address is assigned to a device in a private network.

  Here, the network address used on the private network is defined by RFC 1918 in IPv4, for example, but even if it is limited accordingly, the number of addresses is over 17 million. Device detection is not possible. The same applies to IPv6 defined by RFC 4193.

  On the other hand, in reality, the frequency of use of each address is not uniform, and it is a well-known fact that there is a marked difference in ease of use. For example, it is customary for numbers to be filled in from the smaller one than the larger one, and depending on the product, the network address to be preferentially reserved is determined in advance, so the probability that the address will be used Higher than the address. In addition, this trend is not constant because it fluctuates with the share of equipment.

  Therefore, the network address prediction server 200 generates statistical information by performing statistical processing on the statistical information database 250 (step S02), calculates the existence probability of each IP address from the statistical information, and sends it to the device detection terminal 10. Transmit (step S03). Actually, it is only necessary to transmit those whose probability exceeds a predetermined value.

  Here, in the calculation of the existence probability, the simplest is the value obtained by dividing “the number of networks to which addresses are assigned” divided by “the number of all networks” for each network address.

  Further, in an actual private network, each network address is often assigned according to a predetermined rule, and one of the most common rules is CIDR (Classless Inter-Domain Routing). In addition, there are rare cases where assignment is made. When the network address prediction server 200 receives an address of a device that has already been discovered in the network state, the network address prediction server 200 may consider a predetermined rule, or independently analyze the rule, such as obtaining a co-occurrence probability for each address. May be.

  The device detection terminal 10 that has received the predicted address from the network address prediction server 200 can efficiently detect a device on the network by checking the presence of the device with respect to those addresses. The device detection terminal 10 sends a packet such as ping for confirming the presence of the device at a specific address (step S04), and receives the response to the packet to confirm the presence of the device (step S05).

  If the detected device has a function of detecting other devices on the same network, other devices on the network can be collectively detected via the device (step S06). As a result, the device detection terminal 10 can detect devices in the entire network only by detecting one device in the network in each segment.

  The above is the outline of the device detection system 1.

[System configuration of device detection system]
FIG. 2 is a system configuration diagram of the device detection system 1 which is a preferred embodiment of the present invention. The device detection system 1 includes a public network 3 (Internet network, third generation, fourth generation communication network, etc.), a plurality of networks 4, a firewall 5, a device detection terminal 10, a plurality of electronic devices 50, a network address prediction server. 200. The firewall 5 and the plurality of networks 4 constitute one LAN (Local Area Network).

  The device detection terminal 10 is a general information terminal having functions to be described later. For example, in addition to a personal computer, a television, a telephone, and a computer, a mobile phone, a portable information terminal, a netbook terminal, a slate terminal, an electronic book Information appliances such as terminals, portable music players, audio components, content playback / recording players, printers, fax machines, copiers, scanners, MFPs (multifunctional peripheral devices, multifunction printers), refrigerators, washing machines Also included are white goods such as dishwashers, electric fans, air conditioners, electric stoves, rice cookers, microwave ovens, electric lighting, servers, routers, gateways, NAS (Network Attached Storage) and the like. The device detection terminal 10 and each electronic device 50 are connected by a LAN. Communication in the device detection system 1 may be wireless communication or wired communication.

  The electronic device 50 is a home or business electronic device that can perform data communication.

  The network address prediction server 200 may be a general server having the functions described later.

[Description of each function]
FIG. 3 is a diagram illustrating the functional blocks of the device detection terminal 10, the electronic device 50, and the network address prediction server 200, and the relationship between the functions.

  The device detection terminal 10 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and the like as the control unit 11, and the communication unit 12 includes, for example, WiFi (compliant with IEEE802.11). A wireless fidelity device or a wireless device that conforms to the IMT-2000 standard, such as a third generation mobile communication system, may be included (may be a wired LAN connection).

  In addition, the device detection terminal 10 includes a display unit that outputs and displays data and images controlled by the control unit as the input / output unit 13, and includes a touch panel, a keyboard, a mouse, and the like that receive input from a user or supporter. It may be.

  In the device detection terminal 10, when the control unit 11 reads a predetermined program, in cooperation with the communication unit 12, the expected address reception module 14, the electronic device presence confirmation module 15, the electronic device information acquisition module 16, electronic device detection The execution module 17 is realized. In the device detection terminal 10, the control unit 11 reads a predetermined program, thereby realizing the network map generation module 18 in cooperation with the input / output unit 13.

  Similarly, the network address prediction server 200 includes a CPU, a RAM, a ROM, and the like as the control unit 201, and includes, for example, a WiFi compatible device compliant with IEEE 802.11 (may be wired) as the communication unit 202. . In addition, the network address prediction server 200 includes a data storage unit such as a hard disk or a semiconductor memory as the storage unit 203. The network address prediction server 200 includes a statistical information database 250 in the storage unit 203.

  When the control unit 201 of the network address prediction server 200 reads a predetermined program, the network address reception module 204 and the predicted address transmission module 205 are realized in cooperation with the communication unit 202. Further, the control unit 201 of the network address prediction server 200 reads a predetermined program, thereby realizing a network address storage module 206, a statistical information generation module 207, and a network address prediction module 208 in cooperation with the storage unit 203.

  Similarly, the electronic device 50 includes a CPU, a RAM, a ROM, and the like as the control unit 51. As the communication unit 52, for example, a WiFi compatible device compliant with IEEE 802.11 or an IMT- 3rd generation mobile communication system or the like. A wireless device or the like conforming to the 2000 standard is provided (may be wired LAN connection).

  In the electronic device 50, the control unit 51 reads a predetermined program, thereby realizing the device information transmission module 53 and the electronic device access module 54 in cooperation with the communication unit 52.

[Device detection processing]
FIG. 4 is a flowchart of device detection processing executed by the device detection terminal 10 and the electronic device 50. The processing performed by the module of each device described above will be described together with this processing.

  First, the device detection terminal 10 performs expected address reception processing in order to efficiently detect devices (step S01).

[Predicted address reception processing]
FIG. 5 is a flowchart of predicted address reception processing executed by the device detection terminal 10 and the network address prediction server 200. The processing performed by the module of each device described above will be described together with this processing.

  First, the predicted address receiving module 14 of the device detection terminal 10 transmits the detected network address and the device information to the network address prediction server 200 (step S31). The network address receiving module 204 of the network address prediction server 200 receives this (step S32), and the network address storage module 206 stores it in the statistical information database 250.

  FIG. 6 is a statistical information table in the statistical information database 250. In the statistical information table, a private IP address, a unique network ID for identifying a private network, a device type, and a model name are stored in association with each other. These pieces of information may be accumulated in chronological order, or may be overwritten and updated.

  Here, at the first execution time, the device detection terminal 10 may transmit only its own private address and device information to the network address prediction server 200. On the other hand, when there are devices already detected in the network at the time of execution, it is possible to improve the prediction accuracy of the network address by transmitting them.

  Thereafter, the predicted address receiving module 14 requests the predicted address from the network address prediction server 200 (step S33). At this time, the device detection terminal 10 may send, as a parameter, a unique ID of the network that predicts the network address. When the predicted address transmission module 205 of the network address prediction server 200 receives this (step S34), it predicts the network address by the following process.

  First, the statistical information generation module 207 generates statistical information as data used for prediction (step S35). In principle, statistical information is generated by data extraction and grouping, but the viewpoint differs depending on the algorithm used for prediction.

  Based on the generated statistical information, the network address prediction module 208 calculates the existence probability of each address, and obtains a network address whose existence probability exceeds a predetermined value as an expected address (step S36).

  Here, the prediction, that is, the calculation of the existence probability, is uniquely determined by calculation based on the adopted algorithm. Most simply, for each network address, the value obtained by dividing “the number of networks to which addresses are assigned” divided by “the number of all networks” is the existence probability of each address.

  Further, in an actual private network, each network address is often assigned according to a predetermined rule, and one of the most common rules is CIDR (Classless Inter-Domain Routing). In addition, there are rare cases where assignment is made. Further, as described above, there is a rule that an address having a small value has a higher probability of being assigned than an address having a large value.

  The network address prediction module 208 may construct an algorithm by combining predetermined rules using the addresses of devices already discovered in the network state. The network address prediction module 208 can also use a co-occurrence probability of addresses and a recommendation mechanism such as collaborative filtering. In addition, the network address prediction module 208 can correct the algorithm itself by checking the existence of an actual device via the device detection terminal 10 and receiving true / false feedback on the prediction as will be described later. Is possible.

  FIG. 7 is an example of the result of calculating the existence probability of each address. For each address, the existence probability is calculated from given conditions and statistical information. The existence probability here is not 100% in total for each address, but represents the individual existence probability. Here, as a predetermined value, for example, when an address having an existence probability of 8% or more is assumed as an expected address, “192.168.0.2”, “192.168.1.1”, “192.168 .. 2.1 "and" 172.16.0.1 "are obtained as expected addresses.

  Finally, the predicted address transmission module 205 transmits the address obtained as the predicted address to the device detection terminal 10 (step S37), and the predicted address receiving module 14 receives this. The above is the procedure of the expected address reception process.

  In addition, after performing the presence probability of the electronic device with respect to the expected address described later, the device detection terminal 10 may repeatedly perform the predicted address reception process. This is because the accuracy of the above-described prediction is improved as the address information on the network increases.

  Returning to the device detection process, the device detection terminal 10 repeatedly executes the following processing from step S13 to step S22 for each received predicted address (step S12).

  First, the electronic device presence confirmation module 15 of the device detection terminal 10 performs the presence confirmation of the electronic device assigned to the received expected address (step S13). The electronic device presence confirmation module 15 confirms whether there is a device at the address, for example, by performing communication such as ping to the expected address. If the electronic device 50 is assigned, a response to the ping can be returned to confirm existence (step S14).

  Here, when it is considered that there is no response and the device does not exist or is concealed (step S15: “NO”), the following processing is not performed and the processing is skipped to the end of the loop. At the end, if there are still unprocessed predicted addresses, the processing from step S13 is continued, and if all predicted addresses are confirmed, the loop is terminated (step S23).

  On the other hand, if there is a response and the presence of the device can be confirmed (step S15: “YES”), the following processing is performed subsequently.

  The electronic device information acquisition module 16 of the device detection terminal 10 acquires device information from the device whose existence has been confirmed (step S16). The device information is information on the type of device such as the model name and manufacturer name of the electronic device 50. For this processing, processing such as disclosed in Japanese Patent Application Laid-Open No. 2010-97587, which determines the type of an electronic device connected via a network by transmission / reception of a packet may be used. This time, it is assumed that the device information transmission module 53 of the electronic device 50 transmits the device information simply (step S17).

The electronic device detection execution module 17 of the device detection terminal 10 requests access to another device when the electronic device 50 has a function of detecting a device in the same network (step S18). 50 electronic device access modules 54 access other devices according to this (step S19). This process is particularly effective when the device detection terminal 10 cannot directly access another device.

  The electronic device 50 that has accessed the other device collects the address and device information of the other device in the same manner as described above (step S20), and transmits a list of devices to the device detection terminal 10 (step S21). The electronic device detection execution module 17 receives the list and regards them together with the electronic device 50 itself as detected devices.

  Here, when the end of the loop is reached, the process returns to step S12 to determine whether or not there is an unprocessed predicted address. If there is still an unprocessed predicted address, the process from step S13 is continued for that predicted address. If all predicted addresses have been confirmed, the loop is terminated (step S23).

  After finishing the loop, the network map generation module 18 of the device detection terminal 10 generates a network map based on the acquired device information (step S24). For example, an icon for an electronic device (hereinafter referred to as an “electronic device icon”) displayed on the network map may be stored in advance in association with the device information. You may display on a display part and you may transmit to another apparatus according to a request | requirement.

  As an example, the network map is configured as shown in FIG. In the network map, the detected electronic devices are displayed with icons 80a to 80c and 82a and 82b for the entire private network. A private IP address 81 is displayed under the icon of each device, and when the network segments are communicably connected, the connection is represented by a dotted line as in 83.

  The above is the procedure of the device detection process.

  The means and functions described above are realized by a computer (including a CPU, an information processing apparatus, and various terminals) reading and executing a predetermined program. The program is provided in a form recorded on a computer-readable recording medium such as a flexible disk, CD (CD-ROM, etc.), DVD (DVD-ROM, DVD-RAM, etc.), for example. In this case, the computer reads the program from the recording medium, transfers it to the internal storage device or the external storage device, stores it, and executes it. The program may be recorded in advance in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  As mentioned above, although embodiment of this invention was described, this invention is not limited to these embodiment mentioned above. The effects described in the embodiments of the present invention are only the most preferable effects resulting from the present invention, and the effects of the present invention are limited to those described in the embodiments of the present invention. is not.

  1 device detection system, 3 public network, 4 network, 5 firewall, 10 device detection terminal, 50 electronic device, 200 network address prediction server, 250 statistical information database

Claims (4)

A network address prediction server that is communicably connected to a device detection terminal that detects an electronic device on a network and includes a statistical information database in a storage unit,
Network address receiving means for receiving information and network address of the detected electronic device from the device detection terminal;
The received private IP address of the detected electronic device, the unique network ID for identifying the private network, the device type, and the model name are associated with each other and stored in the statistical information database as a statistical information table. At the time, the statistical information table, network address storage means for accumulating or overwriting information in chronological order, and
Statistical information generating means for generating statistical information of the network address assigned to the electronic device stored;
In addition to the generated statistical information, from the device detection terminal that transmits the obtained network address, using the information and network address of the electronic device that has already been received, a network address whose allocated probability exceeds a predetermined value Network address prediction means to be requested;
Expected address transmitting means for transmitting the obtained network address to the device detection terminal;
A network address prediction server comprising: A device detection terminal that is communicably connected to the network address prediction server according to claim 1 and detects an electronic device on a private network,
Expected address receiving means for receiving, from the network address prediction server, a network address that is expected to be assigned to an electronic device in a private network;
An electronic device that, based on the received expected address, confirms whether there is an electronic device to which each network address is assigned in a private network by sending a packet to the expected address of the electronic device and receiving a response from the electronic device. Device presence confirmation means,
For the electronic device whose existence has been confirmed, electronic device information acquisition means for acquiring device information of the electronic device,
A device detection terminal comprising: The device detection terminal according to claim 2,
Electronic device detection execution means for causing the electronic device to detect the electronic device that has been confirmed and the other electronic device that is communicably connected on the same network;
And a device detection terminal that acquires information also on the detected other electronic device. The electronic device detection terminal according to any one of claims 2 and 3,
Network map generating means for generating a network map based on the acquired information on the electronic device and the network address of the electronic device;
A device detection terminal comprising: