JP6493201B2 - Gateway device having extension setting change function - Google Patents

Description

  The present invention relates to a call control technique when a smart phone or a personal computer is used as an extension telephone of a business phone system, and more particularly to a gateway device that continues a call when a smart phone or a personal computer is infected with a virus.

  In recent years, an integrated threat management device (hereinafter referred to as a UTM device: Unified Threat Management) has attracted attention as a technology for protecting the security of an in-house network in a company. A UTM device is a gateway device that integrates and manages the functions of firewalls and VPN gateways that have been separately managed, and the functions of checking viruses and security of emails and Web contents.

  The UTM device monitors the IP packet transmitted from all communication terminals connected to the UTM device for each communication terminal, and compares the IP packet with the transmission pattern of the IP packet transmitted by the communication terminal infected with the virus. Determine if you are infected with a virus. If it is determined that the virus is infected, the UTM device stops the packet relay so that the IP packet transmitted from the communication terminal determined to be infected with the virus is not transmitted outside (to the WAN side) (communication) Block).

  For example, in Patent Document 1, an IP telephone terminal monitors the amount of packet transmission and reception of call control information and a voice packet, and the amount of outgoing packets far exceeds the amount of packets sent by a general IP telephone terminal. A technique is described in which, when detected, it is determined that the IP telephone terminal is infected with a virus and a large amount of non-voice packets are leaked, and packet relay of the IP telephone terminal is stopped.

Republished patent W2006 / 035928

  On the other hand, in offices and workplaces, application software that realizes a function as an extension telephone may be installed on a smartphone or a personal computer that is used, and the smart phone or the personal computer may be used as an extension telephone.

  For example, a UTM device that performs gateway processing is installed between an IP network and an in-house LAN, a private branch exchange in a business phone system is connected under the UTM device, and a smart phone that is accommodated in the private branch exchange and has an extension telephone function Or suppose a personal computer is installed. At this time, if the smart phone or personal computer is infected with a virus, the UTM device does not transmit any virus transmitted to the private branch exchange that controls the call for the call. There is a problem that the IP packet is blocked, and it is impossible to make or receive calls or make calls using the smart phone or the personal computer as an extension telephone.

  The present invention has been made in view of the above circumstances, and it is an object of the present invention to provide a gateway device that continues to make and receive calls or calls even when a smartphone or personal computer equipped with an extension telephone function is infected with a virus. There is to do.

  In order to solve the above problems, the present invention provides an IP packet between the private branch exchange accommodating one or more extension terminals having a function of communicating with the IP network without going through the private branch exchange and an IP line connected to the IP network. An IP packet relayed by the gateway device by accessing a predetermined virus database storing pattern information of one or more viruses that may be included in the IP packet. Virus detection means for detecting a virus IP packet that contains information having a pattern that matches one of the virus pattern information, and is transmitted and received between the source address of the virus IP packet and the IP line. IP packet relay stopping means for stopping the relay of the IP packet, and the IP address of the first extension terminal The extension IP address storage means for storing the IP address of the second extension terminal determined in advance in association with the access point and the private branch exchange are accessed, and the setting contents related to any of the extension terminals are changed by the private branch exchange. Extension setting change means, and when the virus detection means detects the virus IP packet, it stops relaying the IP packet received from the extension terminal that sent the virus IP packet, and the virus IP packet If the source address extracted from is registered in the extension IP address storage means, the extension setting change means changes the extracted source address to the IP address of the second extension terminal. And

  The present invention also has a function of relaying IP packets between the private branch exchange accommodating one or more extension terminals having a function of communicating with the IP network without going through the private branch exchange and an IP line connected to the IP network. The gateway device accesses a predetermined virus database storing one or more virus pattern information that may be included in the IP packet, and the virus pattern information is transmitted to the IP packet relayed by the gateway device. Virus detection means for detecting a virus IP packet containing information having a pattern matching any of the above, and relaying of an IP packet transmitted and received between the source address of the virus IP packet and the IP line An IP packet relay stop means for stopping and an extension terminal that detects the virus IP packet are assigned to the extension terminal. A packet transmission destination changing means for changing the IP packet transmission destination related to the call connection processing or voice during a call stored in the extension terminal to the IP address of the gateway device, and accessing the private branch exchange When registering the IP address of the gateway device and receiving the IP packet related to the call from the extension telephone means for operating the own gateway device as the extension terminal accommodated in the private branch exchange, and the extension terminal detecting the virus IP packet, IP packet conversion relay means for converting and relaying the source information of the IP packet to its own gateway device, and when the virus detection means detects the virus IP packet, the virus IP packet is transmitted Stops relaying IP packets received from the extension terminal and accesses the extension terminal. Then, the transmission destination of the IP packet related to the call stored in the extension terminal is changed to the IP address of the own gateway device, the private branch exchange is accessed, and the IP address of the own gateway device is registered as the address of the extension terminal. In addition, when the IP packet conversion relay means receives an IP packet related to a call from the extension terminal that has detected the virus IP packet, it converts the source information of the IP packet to its own gateway device and relays it. To do.

  According to the present invention, when the gateway device detects that the smart phone or personal computer having the extension telephone function is infected with a virus, the gateway device stops relaying the IP packet transmitted from the smart phone or the personal computer. Alternatively, the extension telephone function using a personal computer is changed to the extension telephone function of another communication terminal or the own gateway device. As a result, the user can continue to use the incoming / outgoing call of the smart phone or the personal computer or a call in progress.

1 is an overall configuration diagram of a gateway device according to an embodiment of the present invention. It is a functional block diagram of the gateway apparatus which concerns on embodiment of this invention. It is a sequence diagram explaining the operation | movement which continues the telephone call with a telephone using an extension telephone, when a communication terminal is infected with a virus. It is a sequence diagram explaining the operation | movement which a gateway apparatus performs operation | movement as an extension telephone, and continues the telephone call with a telephone, when a communication terminal is infected with the virus. It is a flowchart explaining the processing operation of a gateway apparatus. It is the figure which represented typically the extension number table memorize | stored in an extension number table memory | storage part.

  An embodiment of the present invention will be described below.

  FIG. 1 is an overall configuration diagram of a gateway device 4 according to an embodiment of the present invention.

  As shown in the figure, the gateway device 4 according to the present embodiment is a UTM device installed between an IP network 3 as an external network and a LAN (Local Area Network) 6 as an internal network. The gateway device 4 is connected to the private branch exchange 5, relays the IP packet from the telephone set 1 on the IP network 3 to the private branch exchange 5 or the communication terminal 9, and sends the IP packet from the private branch exchange 5 or the communication terminal 9 to the telephone set. Relay to 1 Further, the gateway device 4 realizes the function of the UTM device in cooperation with the virus detection database 2.

  The private branch exchange 5 is a telephone control apparatus that accommodates the extension telephone 7 via the LAN 6 and controls a telephone call related to an outgoing / incoming telephone call. The private branch exchange 5 accommodates a communication terminal 9 belonging to a wireless LAN access point 8 (hereinafter referred to as wireless LANAP) as an extension telephone.

  The extension telephone 7 is an extension telephone accommodated in the private branch exchange 5. The extension telephone 7 has a function of making a call with another extension telephone 7 and the communication terminal 9 connected to the LAN 6 via the private branch exchange 5 and a function of making a call with the telephone 1 connected to the IP network 3 via the private branch exchange 5. Prepare.

  The communication terminal 9 is installed with an application having an extension telephone function and is registered as an extension telephone in the private branch exchange 5 via the wireless LAN AP 8. The communication terminal 9 has a function of making a call with another extension telephone connected to the LAN 6 via the private branch exchange 5 and a function of making a call with the telephone 1 connected to the IP network 3 via the private branch exchange 5.

  The telephone 1 has a function of making a call with an extension telephone 7 and a communication terminal 9 connected to the private branch exchange 5 via the IP network 3. The virus detection database 2 is a database that is connected to the IP network 3 and records a plurality of pattern information for recognizing viruses.

  The gateway device 4 relays all IP packets transmitted from the IP network 3 to the private branch exchange 5 and IP packets from all the communication terminals 9 connected to the private branch exchange 5 and the LAN 6, and further transmits the IP packet data. Monitoring. The gateway device 4 accesses the virus detection database 2 connected to the IP network 3 and acquires virus pattern information. The gateway device 4 checks whether the monitored IP packet is infected with a virus, and if it detects that it is infected with a virus, it stops relaying all IP packets from the corresponding communication terminal 9. .

  FIG. 2 is a functional block diagram of the gateway device 4 according to the embodiment of the present invention.

  As illustrated, the gateway device 4 includes a LAN line communication unit 401, a WAN line communication unit 402, a gateway processing unit 403, an IP packet conversion relay unit 404, an extension number table storage unit 405, an extension number information acquisition unit 406, and an extension setting. A change unit 407, an extension telephone function registration unit 408, a virus detection unit 409, and a database access unit 410 are provided.

  The LAN line communication unit 401 is an interface for communicating with the communication terminal 9 connected via the private branch exchange 5 and the wireless LAN AP 8 connected to the LAN 6.

  The WAN line communication unit 402 is an interface for communicating with the telephone set 1 and the virus detection database 2 connected to the IP network 3.

  The gateway processing unit 403 relays the IP packet received from the private branch exchange 5 or the LAN 6 to the IP network 3 in cooperation with the LAN line communication unit 401 and the WAN line communication unit 402. The gateway processing unit 403 relays the IP packet received from the IP network 3 to the private branch exchange 5 or the LAN 6. In addition, the gateway processing unit 403 acquires the extension telephone information from the private branch exchange 5 in cooperation with the extension number information acquisition unit 406 and notifies the extension number table storage unit 405 of the acquired extension telephone information. Further, the gateway processing unit 403 accesses the private branch exchange 5 in cooperation with the extension setting changing unit 407 and sets the extension of the extension telephone set in the private branch exchange 5 (for example, the extension telephone 7 and the communication terminal 9). Change settings. Further, the gateway processing unit 403 realizes an extension telephone function for registering as an extension telephone for accommodating the own gateway apparatus in the private branch exchange 5 in cooperation with the extension telephone function registration part 408. The gateway processing unit 403 transmits the IP packet related to the call received from the IP packet conversion relay unit 404 to the telephone set 1 connected to the IP network 3. The gateway processing unit 403 passes the IP packet related to the call received from the WAN line communication unit 402 to the IP packet conversion relay unit 404. Further, the gateway processing unit 403 cooperates with the virus detection unit 409 to monitor the IP packet received from the private branch exchange 5 or the LAN 6, detect whether the IP packet is infected with a virus, and acquire the detection result. When it is detected that the virus is infected, the gateway processing unit 403 notifies the communication terminal 9 that is infected with the virus that the virus cannot be used, and causes the communication terminal 9 to display the message that the virus cannot be used.

  Upon receiving an instruction from the gateway processing unit 403, the IP packet converting / relaying unit 404 converts the received IP packet related to the call into an IP packet transmitted by the gateway device through the LAN line communication unit 401, and converts the IP packet to the gateway processing unit 403. To pass. The IP packet conversion relay unit 404 converts the IP packet related to the call received from the gateway processing unit 403 into an IP packet transmitted by the own gateway device and transmits the IP packet to the communication terminal 9.

  The extension number table storage unit 405 is a storage unit that stores the extension number table 4050.

  FIG. 6 is a diagram schematically showing the extension number table 4050 stored in the extension number table storage unit 405.

  As shown in the figure, the extension number table storage unit 405 stores a record 4056 for each extension number set in the private branch exchange 5 in advance. The record 4056 includes an extension number field 4051, an extension telephone IP address field 4052, a telephone type field 4053, a virus monitoring status field 4054, and a switching destination IP address field 4055.

  The extension number field 4051 shows the extension number currently set in the private branch exchange 5, the IP address field 4052 shows the IP address of the extension telephone set with the extension number, and the telephone type field 4053 shows Indicates the type of extension telephone set with the extension number (telephone, smart phone, personal computer, gateway, etc.), and the monitoring status field 4054 indicates the status of the IP packet transmitted from the extension telephone set with the extension number. (Normal, virus infection), and a switching destination IP address field 4055 indicates a switching destination IP address when the extension telephone set with the extension number is infected with a virus.

  In this example, the “smartphone” with the extension number “201” is infected with a virus, and the extension setting with the extension number “201” set in the private branch exchange 5 is transferred to the gateway device 4 that is the switching destination IP address. has been changed. Returning to the description of FIG.

  The extension number information acquisition unit 406 accesses the private branch exchange 5 and acquires the extension telephone information of the extension telephone 7 including the communication terminal 9 set in the private branch exchange 5.

  Upon receiving an instruction from the gateway processing unit 403, the extension setting changing unit 407 changes the extension setting of the extension number to the private branch exchange 5 via the LAN line communication unit 401 to the switching destination IP address.

  Upon receiving an instruction from the gateway processing unit 403, the extension telephone function registration unit 408 registers the gateway device 4 as an extension telephone in the private branch exchange 5 via the LAN line communication unit 401.

  The virus detection unit 409 analyzes the IP packet received from the gateway processing unit 403 with the virus pattern information data received from the database access unit 410 and determines whether or not the analyzed IP packet is infected with a virus. To notify.

  The database access unit 410 receives virus pattern information data from the virus database 2 connected to the IP network 3 via the WAN line communication unit 402 and passes it to the virus detection unit 409.

  Next, the operation when the communication terminal 9 is infected with a virus will be described using the sequence of FIGS. 3 and 4.

  FIG. 3 is a sequence diagram for explaining an operation of continuing a call with the telephone 1 using the extension telephone 7 when the communication terminal 9 is infected with a virus.

  The gateway device 4 makes an extension accommodation request to the private branch exchange 5 in order to acquire the extension telephone information (S301), and receives the extension information from the private branch exchange 5 (S302). The gateway device 4 monitors data of all IP packets received from the IP network 3 and all IP packets received from all the communication terminals 9 connected to the private branch exchange 5 or the LAN 6 (S303).

  The telephone 1 transmits an IP packet indicating an incoming call for call connection to the communication terminal 9 via the IP network 3, the gateway device 4, and the private branch exchange 5 (S304). In response to a response operation by the user, the communication terminal 9 transmits an IP packet indicating the response to the telephone 1 via the private branch exchange 5, the gateway device 4, and the IP network 3 (S305). The telephone 1 and the communication terminal 9 establish a call via the IP network 3, the gateway device 4, and the private branch exchange 5 (S306).

  The gateway device 4 accesses the virus detection database 2 connected to the IP network 3 via the IP network 3 and requests pattern information for detecting a virus (S307). The gateway device 4 receives pattern information for detecting a virus from the virus detection database 2 (S308).

  Here, it is assumed that the communication terminal 9 is infected with a virus (S309). Since the virus is infected, the communication terminal 9 accesses an unauthorized site and transmits an IP packet with an unintended operation (S310).

  The gateway device 4 compares whether the IP packet received from the communication terminal 9 is infected with a virus or not with the pattern information received from the virus detection database 2 (S311). When the gateway apparatus 4 detects that the communication terminal 9 is infected with a virus (S312), the gateway apparatus 4 blocks relaying (stops relaying) the IP packet transmitted from the communication terminal 9 (S313). The gateway device 4 transmits the set value to the private branch exchange 5 in order to change the extension setting received from the private branch exchange 5 (S314).

  The private branch exchange 5 changes the extension setting from the call terminal 9 to the extension telephone 7 based on the received setting value (S315). Thereafter, the incoming call to the communication terminal 9 is transmitted to the extension telephone 7 by this setting.

  The gateway device 4 transmits an instruction to display that the extension setting has been changed to the communication terminal 9 (S316).

  The communication terminal 9 that has received the change display instruction displays on the LCD of the communication terminal 9 that the extension cannot be used by the telephone application installed in the communication terminal 9 (S317). Since the telephone 1 cannot recognize that the communication terminal 9 is infected with a virus and cannot be used as an extension telephone, the telephone 1 arrives at the private branch exchange 5 via the IP network 3 and the gateway device 4 to the communication terminal 9.

  Since the extension setting is changed to the extension telephone 7, the private branch exchange 5 transmits an IP packet indicating an incoming call to the extension telephone 7 (S318). The extension telephone 7 receives a response operation by the user and transmits an IP packet indicating a response to the telephone 1 via the private branch exchange 5, the gateway device 4, and the IP network 3 (S319). The telephone 1 and the extension telephone 7 establish a call with the private branch exchange 5 and the gateway device 4 via the IP network (S320).

  FIG. 4 is a sequence diagram illustrating an operation in which the gateway device 4 operates as an extension telephone when the communication terminal 9 is infected with a virus, and continues a call with the telephone 1.

  Since steps S401 to S413 are the same as steps S301 to S313 in FIG. 3 until the gateway device 4 in the sequence S401 detects the virus infection of the communication terminal 9 and blocks all the IP packets of the communication terminal 9, the description thereof is omitted. .

The gateway device 4 transmits a setting value to the private branch exchange 5 in order to change the extension setting from the extension information received from the private branch exchange 5 (S414). The private branch exchange 5 changes the extension setting from the call terminal 9 to the gateway device 4 based on the received setting value (S415). With this setting, subsequent incoming calls to the communication terminal 9 are transmitted to the gateway device 4.
Further, the gateway device 4 transmits an instruction to change the setting from communication with the private branch exchange 5 to communication with the gateway device 4 to the communication terminal 9 (S416). In response to this setting change instruction, the communication terminal 9 changes the setting for communicating with the private branch exchange 5 to the operation for communicating with the gateway device 4 (S417).

  The telephone 1 receives an IP packet indicating an incoming call for call connection via the IP network 3, the gateway device 4, and the private branch exchange 5 and also to the gateway device 4 (S418). The gateway device 4 converts the IP packet indicating an incoming call from the private branch exchange 5 into an IP packet from the gateway device 4 (S419). The gateway device 4 generates an IP packet indicating an incoming call and transmits it to the communication terminal 9 (S420).

  In response to a response operation by the user, the communication terminal 9 transmits an IP packet indicating a response to the gateway device 4 (S421). The gateway device 4 converts the IP packet indicating the response received from the communication terminal 9 into an IP packet indicating the response from the gateway device 4 (S422). The gateway device 4 transmits an IP packet indicating a response to the telephone exchange 1 via the private branch exchange 5, the gateway device 4 and the IP network 3 again (S423).

  The telephone 1 and the gateway device 4 establish a call via the IP network and the private branch exchange 5 (S424). The gateway device 4 and the communication terminal 9 establish a call (S425). By this operation, the telephone 1 and the communication terminal 9 establish a call.

  The operation of the gateway device 4 when the communication terminal 9 uses the extension telephone 7 when the communication terminal 9 is infected with a virus and when the communication terminal 9 is used as it is will be described using the flowchart of FIG. FIG. 5 is a flowchart for explaining one processing operation of the gateway device 4. This flow starts when the gateway device 4 is turned on and the IP packet can be relayed.

  When the IP packet can be relayed, the gateway processing unit 403 instructs the extension number information acquisition unit 406 to acquire extension telephone information in which the IP address is associated with the extension number from the private branch exchange 5, and the acquired extension telephone The information and the switching destination IP address are associated with each other and registered in the extension number table 4050 of the extension number table storage unit 405 (S501).

  Registration in the extension number table storage unit 405 is realized by various setting functions such as the IP address of the gateway device 4 and the IP address of the private branch exchange to be connected. A description of the various setting functions is omitted.

  The gateway processing unit 403 monitors an IP packet relayed from the LAN 6 to the IP network 3 or from the IP network 3 to the LAN 6 and detects an IP packet relayed from the LAN 6 to the IP network 3 or from the IP network 3 to the LAN 6 (S502). An operation for resuming the relay of the IP packet is accepted (S503), and the process waits for one of the states.

  If the operation for resuming the relay of the IP packet is accepted (Yes in S503), the gateway processing unit 403 accesses the private branch exchange 5, restores the extension setting of the extension number, and returns the address of the address for which the relay has been stopped. IP packet relaying is resumed (S505). Then, the process returns to step 502.

  If an IP packet relayed from the LAN 6 to the IP network 3 or from the IP network 3 to the LAN 6 is detected (Yes in S502), the gateway processing unit 403 passes the IP packet to the virus detection unit 409. The virus detection unit 409 instructs the database access unit 410 to acquire virus pattern information from the virus detection database 2 connected to the IP network 3 via the WAN line communication unit 402 by the database access unit 410 (S504). ).

  The virus detection unit 409 checks whether the virus pattern information is included by checking the header information and payload information of the IP packet received from the gateway processing unit 403 with the virus pattern information (S506).

  If the header information and payload information of the IP packet received from the gateway processing unit 403 are checked with the virus pattern information and no virus pattern information is included (No in S506), the virus detection unit 409 detects the detected IP. The packet is relayed (S507), and the process returns to step 502.

  If virus pattern information is included in the checked IP packet (Yes in S506), the virus detection unit 409 determines that the virus is infected and notifies the gateway processing unit 403. Upon receiving the notification, the gateway processing unit 403 extracts the source address of the IP packet infected with the virus, and transmits the IP packet and the WAN line communication unit that are transmitted from the extracted source address to the LAN 6 via the LAN line communication unit 401. The relay of the IP packet transmitted to the IP network 3 via 402 is stopped (S508).

  The gateway processing unit 403 checks whether the extracted transmission source address is registered in the extension number table 4050 stored in the extension number table storage unit 405 (S509).

  If not registered in the extension number table 4050 (No in S509), the gateway processing unit 403 returns to Step 502 and continues the processing.

  If registered in the extension number table 4050 (Yes in S509), the gateway processing unit 403 determines that the transmission source of the IP packet is an extension telephone infected with a virus, The switching destination IP address corresponding to the transmission source is extracted (S510).

  The gateway processing unit 403 checks whether the IP address of the switching destination is the address of the gateway device 4 from the information stored in the read extension number table 4050 (S511).

  If the IP address of the switching destination is not the address of the gateway device 4 (No in S511), the gateway processing unit 403 issues an extension telephone setting change instruction to the extension setting changing part 407. The extension setting change unit 407 accesses the private branch exchange 5 via the LAN line communication unit 401 and changes the extension setting of the extension number to the IP address of the switching destination (S512).

  Further, the private branch exchange 5 changes the extension setting of the communication terminal 9 used for the extension telephone to a different extension telephone 7, so that the extension telephone of the communication terminal 9 becomes the extension telephone 7. The gateway processing unit 403 notifies the communication terminal 9 through the LAN line communication unit 401 that it is unusable as an extension telephone because of virus infection, and displays the extension number of the extension telephone to be changed (S513). Then, the process returns to step 502.

  If the IP address of the switching destination is the address of the gateway apparatus 4 (Yes in S511), the gateway processing unit 403 issues an extension telephone setting change instruction to the extension setting changing part 407. The extension setting change unit 407 accesses the private branch exchange 5 via the LAN line communication unit 401 and sets the extension setting (IP address) of the communication terminal 9 set in the private branch exchange 5 to the gateway device 4 ( IP address) (S514).

  The gateway processing unit 403 issues an instruction to the extension telephone function registration unit 408, and the extension telephone function registration unit 408 accesses the private branch exchange 5 via the LAN line communication unit 401 to register the gateway device 4 as an extension telephone. The gateway processing unit 403 accesses the communication terminal 9 infected with the virus via the LAN line communication unit 401, and changes the destination of the IP packet related to voice from the private branch exchange 5 to the gateway device 4 (S515).

  Thereafter, the communication terminal 9 transmits an IP packet related to voice to the gateway device 4.

  Next, the gateway processing unit 403 receives an IP packet related to a virus-infected terminal (S516), and waits for any state of call connection of the virus-infected terminal to end (S518).

When an IP packet is received from a virus-infected terminal (Yes in S516), the gateway processing unit 403 converts the IP packet transmission source of the virus-infected terminal into the IP address of the gateway device and relays it (S517). Thereafter, the process proceeds to step 518.
When the call connection of the virus-infected terminal is terminated (Yes in S518), the gateway processing unit 403 accesses the virus-infected terminal, displays that it cannot be used (S519), and returns to Step 502.

  The embodiment of the present invention has been described above.

  In the embodiment of the present invention, the gateway device 4 detects whether or not the communication terminal 9 is infected with a virus. If the communication terminal 9 is infected with a virus, the gateway device 4 stops relaying the IP packet received from the communication terminal 9. Then, the extension setting of the communication terminal 9 is changed to the extension telephone 7 in the private branch exchange 5. As a result, the user can use the extension telephone 7 without using the communication terminal 9 infected with the virus, and can continue to use outgoing / incoming calls or calls.

  In the embodiment of the present invention, the gateway device 4 detects whether or not the communication terminal 9 is infected with a virus. If the communication terminal 9 is infected with a virus, the IP packet or communication transmitted from the communication terminal 9 is transmitted. The relay of the IP packet received by the terminal 9 is stopped, the private branch exchange 5 is accessed, the extension setting of the communication terminal 9 set in the private branch exchange 5 is changed to the extension telephone function of the gateway device 4, and the communication terminal 9 is An instruction to change the communication with the private branch exchange 5 to the communication with the gateway device 4 is transmitted, and the gateway device 4 relays the IP packet from the private branch exchange 5 and the communication terminal 9. As a result, the user can use the communication terminal 9 infected with the virus as it is only for calls, and can continue to make and receive calls or calls.

In the embodiment of the present invention, the gateway device 4 monitors all IP packets transmitted and received between the LAN 6 and the IP network 3 and receives virus pattern data received from the virus detection database 2 connected to the IP network 3. If the communication terminal 9 is infected with a virus and the communication terminal 9 is a terminal connected as an extension telephone, the extension setting for the private branch exchange 5 is changed to another extension telephone 7 Thereafter, the extension telephone 7 is used instead of the communication terminal 9. Similarly, the gateway device 4 monitors all IP packets transmitted and received between the LAN 6 and the IP network 3, and compares the virus pattern data received from the virus detection database 2 connected to the IP network 3 with the IP packet for communication. If the terminal 9 is infected with a virus and the communication terminal 9 is a terminal connected as an extension telephone, the extension setting is set in the gateway device 4 for the private branch exchange 5, and thereafter the communication terminal 9 A call is established via the device 4. In this case, the IP packet from the communication terminal 9 is converted into an IP packet newly generated by the gateway device 4 and communicated with the telephone 1, and the IP packet from the communication terminal 9 is not sent to the IP network 3. Even if 9 is used, a safe call can be made.
In the embodiment of the present invention, the gateway device 4 changes the extension setting from the communication terminal 9 to the extension telephone 7 to the private branch exchange 5 when detecting that the communication terminal 9 is infected with a virus. However, the present application is not limited to this. For example, if the communication terminal 9 infected with the virus is busy, the extension telephone call may be transferred to the extension telephone 7. As a result, the user can continue to use the call.

  In the embodiment of the present invention, the gateway device 4 changes the extension setting from the communication terminal 9 to the gateway device 4 to the private branch exchange 5 when detecting that the communication terminal 9 is infected with a virus. However, the present application is not limited to this. For example, if the communication terminal 9 infected with the virus is busy, the extension may be transferred to the gateway device 4. In this case, the gateway device 4 performs an automatic response, and the gateway device 4 transfers the call voice to the communication terminal 9 by extension telephone. As a result, the user can continue to use the call.

  In the embodiment of the present invention, the pattern data of the virus detection database 2 in which the gateway device 4 is connected to the IP network 3 has been described on the assumption of a virus, but the present application is not limited to this. For example, the virus detection database stored in the gateway device 4 may be accessed, or not only viruses but also malware such as Trojan horses and worms may be similarly controlled.

  In the embodiment of the present invention, the communication terminal 9 is described as a smart phone installed with an application having a telephone function, but the present application is not limited to this. For example, a personal computer or a tablet may be used instead of the smartphone.

DESCRIPTION OF SYMBOLS 1 ... Telephone 2 ... Virus detection database 3 ... IP network 4 ... Gateway apparatus 401 ... LAN line communication part 402 ... WAN line communication part 403 ... Gateway processing part 404 ... IP packet conversion relay unit 405 ... extension number table storage unit 406 ... extension number information acquisition unit 407 ... extension setting change unit 408 ... extension telephone function registration unit 409 ... virus detection unit 410 ..Database access unit 5 ... Private branch exchange 6 ... LAN
7: Extension telephone 8: Wireless LANAP
9. Communication terminal

Claims (2)

A gateway device having a function of relaying IP packets between the private branch exchange accommodating one or more extension terminals having a function of communicating with an IP network without going through a private branch exchange and an IP line connected to the IP network,
Access to a predetermined virus database storing one or more virus pattern information that may be included in the IP packet, and match the IP packet relayed by the gateway device with any of the virus pattern information Virus detection means for detecting a virus IP packet containing information having a pattern, and IP packet relay stop for stopping relay of an IP packet transmitted and received between the source address of the virus IP packet and the IP line Means, an extension IP address storage means for storing an IP address of a second extension terminal determined in advance in association with the IP address of the first extension terminal, and the private branch exchange is accessed, and any one of the extension terminals Extension setting change means for changing the setting contents related to the private branch exchange,
When the virus detection means detects the virus IP packet, it stops relaying the IP packet received from the extension terminal that transmitted the virus IP packet, and the source address extracted from the virus IP packet is the extension IP If registered in the address storage means, the extension setting change means changes the extracted transmission source address to the IP address of the second extension terminal, and has the extension setting change function. . A gateway device having a function of relaying IP packets between the private branch exchange accommodating one or more extension terminals having a function of communicating with an IP network without going through a private branch exchange and an IP line connected to the IP network,
Access to a predetermined virus database storing one or more virus pattern information that may be included in the IP packet, and match the IP packet relayed by the gateway device with any of the virus pattern information Virus detection means for detecting a virus IP packet containing information having a pattern, and IP packet relay stop for stopping relay of an IP packet transmitted and received between the source address of the virus IP packet and the IP line And a packet transmission for accessing the extension terminal that has detected the virus IP packet and changing the destination of the IP packet relating to the call connection process or the voice during a call stored in the extension terminal to the IP address of the gateway device The destination change means and the private branch exchange are accessed to When the IP address relating to the call is received from the extension telephone means that registers the IP address of the apparatus and operates the gateway apparatus as an extension terminal accommodated in the private branch exchange, and the extension terminal that detects the virus IP packet, IP packet conversion relay means for converting and relaying the source information of the IP packet to the own gateway device,
When the virus detection means detects the virus IP packet, it stops relaying the IP packet received from the extension terminal that transmitted the virus IP packet, accesses the extension terminal, and the extension terminal stores The IP packet transmission destination associated with the current call is changed to the IP address of the own gateway device, the private branch exchange is accessed, the IP address of the own gateway device is registered as the address of the extension terminal, and the IP packet conversion relay means Upon receiving an IP packet related to a call from the extension terminal that has detected the virus IP packet, the gateway device having an extension setting change function converts the source information of the IP packet to its own gateway device and relays it .

Images