JP7082286B2 - Management device, management method, management program - Google Patents

Description

The present invention relates to a management device, a management method, and a management program.

A relay device such as a router that relays communication between a network such as the Internet and a terminal has a function of restricting the connection of the terminal to the network, for example, for the purpose of limiting the time for a child to access the Internet. There is something.

In Patent Document 1, connection management (QoS request management) of a terminal connected to an access point is performed in a group unit (provider unit or department unit) or MAC (Media Access Control) using a VLAN (Virtual Local Area Network) or the like. It describes the points to be performed by the policy control device outside the access point for each user (terminal ID unit) using an address or the like.

Japanese Unexamined Patent Publication No. 2006-304083

For example, in a network constructed in a home, an administrator such as a parent restricts a user such as a child from connecting to a network such as the Internet to a terminal owned by the user. In recent years, the number of terminals used exclusively by one user has tended to increase. As described above, when the number of terminals per user increases, it becomes necessary to repeatedly set the same connection restriction for all the terminals possessed by the user, which becomes complicated.

The policy control device described in Patent Document 1 manages connections in group units using a plurality of networks divided by a VLAN or the like, but the connection is restricted for each user in the home. It is not assumed that connection management will be performed for each user of the terminal in the same network. Further, the connection management for each user performed by the policy control device described in Patent Document 1 is only the connection management for each terminal, and when one user uses a plurality of terminals, the connection management is performed for each user. It is not supposed to manage connections.

The present invention has been made in view of the above circumstances, and even if the number of terminals used exclusively by one user increases, it is easy to set connection restrictions for each terminal used by that user. It is an object of the present invention to provide a management device, a management method, and a management program which can be performed.

The management device of the present invention is a management device for managing the connection restriction to the network for the terminal performed by the relay device that relays the communication between the network and the terminal, and is a group for each user of the terminal. The group identification information generation unit that generates the identification information of the above, the identification information designated by the user of the management device by acquiring the terminal information of the terminal connected to the relay device, and the identification information designated by the user. When the group associating processing unit that associates the terminal information with the terminal and the first request for setting the connection restriction for the identification information specified by the user are accepted, the terminal associated with the identification information is received. The first connection restriction setting unit that associates the first setting information of the connection restriction with the information, and the terminal information in which the first setting information and the first setting information are associated with the information are sent to the relay device. A connection restriction execution control unit that transmits and causes the relay device to execute a connection restriction to the network based on the first setting information for the terminal specified by the terminal information, and the terminal designated by the user. Upon accepting the second request for setting the connection restriction for information, the terminal information is provided with a second connection restriction setting unit for associating the second setting information of the connection restriction with the terminal information, and the connection restriction execution control is provided. The unit transmits the terminal information in which the second setting information and the second setting information are associated with the relay device to the relay device, and the second setting information for the terminal specified by the terminal information. The connection restriction to the network is executed based on the above, and the first connection restriction setting unit corresponds to the second setting information in the terminal information corresponding to the identification information designated by the user. When the attached terminal information exists, the existence of the terminal information is notified .

The management method of the present invention is a management method for managing the connection restriction to the network for the terminal performed by the relay device that relays the communication between the network and the terminal, and is a management method for each user of the terminal. The group identification information generation step for generating the identification information of the above, the identification information specified by the user of the terminal by acquiring the terminal information of the terminal connected to the relay device, and the identification information designated by the user. When the first request for setting the connection restriction for the identification information specified by the user and the group mapping processing step for associating the terminal information is accepted, the terminal information associated with the identification information is accepted. On the other hand, the first connection restriction setting step for associating the first setting information of the connection restriction and the terminal information in which the first setting information and the first setting information are associated with each other are transmitted to the relay device. Then, the connection restriction execution control step for causing the relay device to execute the connection restriction to the network based on the first setting information for the terminal specified by the terminal information, and the terminal information specified by the user. When the second request for setting the connection restriction is accepted, the terminal information is provided with a second connection restriction setting step for associating the second setting information of the connection restriction with the terminal information, and the connection restriction execution control step is provided. Transmits the terminal information in which the second setting information and the second setting information are associated with the relay device to the relay device, and uses the second setting information for the terminal specified by the terminal information. The connection restriction to the network is executed based on the above, and in the first connection restriction setting step, the second setting information is associated with the terminal information corresponding to the identification information specified by the user. When the terminal information is present, the existence of the terminal information is notified .

The management program of the present invention is a management program for managing the connection restriction to the network for the terminal performed by the relay device that relays the communication between the network and the terminal, and is a group for each user of the terminal. The group identification information generation step for generating the identification information of the above, the identification information specified by the user of the terminal by acquiring the terminal information of the terminal connected to the relay device, and the identification information designated by the user. When the first request for setting the connection restriction for the identification information specified by the user and the group mapping processing step for associating the terminal information is accepted, the terminal information associated with the identification information is accepted. On the other hand, the first connection restriction setting step for associating the first setting information of the connection restriction and the terminal information in which the first setting information and the first setting information are associated with each other are transmitted to the relay device. Then, the connection restriction execution control step for causing the relay device to execute the connection restriction to the network based on the first setting information for the terminal specified by the terminal information, and the terminal information specified by the user. This is to cause the computer to execute the second connection restriction setting step of associating the second setting information of the connection restriction with the terminal information when the second request for setting the connection restriction is accepted. The connection restriction execution control step transmits the terminal information in which the second setting information and the second setting information are associated with the relay device to the relay device, and the terminal is specified by the terminal information. The connection restriction to the network is executed based on the second setting information, and the first connection restriction setting step is performed in the terminal information corresponding to the identification information designated by the user. When the terminal information associated with the setting information of is present, the existence of the terminal information is notified .

According to the present invention, even if the number of terminals used exclusively by one user increases, a management device and a management method that can facilitate the setting of connection restrictions for each terminal used by that user. , And management programs can be provided.

It is a schematic diagram which shows the schematic structure example of the LAN 100 constructed in a home. It is a schematic diagram which shows the internal structure example of the relay device 2 in the LAN 100 shown in FIG. It is a schematic diagram which shows the internal structure example of the terminal 3G as a management apparatus in LAN100 shown in FIG. It is a functional block diagram of the terminal 3G shown in FIG. It is a figure which shows an example of the management information stored in ROM 41. It is a figure which shows another example of the management information stored in ROM 41. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the example of the information stored in the ROM 41 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the example of the information stored in the ROM 41 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the example of the information stored in the ROM 41 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the example of the information stored in the ROM 41 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the example of the information stored in the ROM 41 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the example of the information stored in the ROM 41 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the screen example which is displayed on the display part 44 of the terminal 3G by the connection management application. It is a figure which shows the example of the information stored in the ROM 41 of the terminal 3G by the connection management application.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a schematic diagram showing a schematic configuration example of a LAN 100 constructed in a home. The LAN 100 includes a relay device 2 such as a router or a gateway connected to a mobile communication network provided by a mobile phone carrier or a network 1 such as the Internet, and at least one terminal connectable to the relay device 2. In the example of FIG. 1, seven terminals of terminal 3A, terminal 3B, terminal 3C, terminal 3D, terminal 3E, terminal 3F, and terminal 3G are connected to the relay device 2.

The relay device 2 is wirelessly or wiredly connected to each of the terminal 3A, the terminal 3B, the terminal 3C, the terminal 3D, the terminal 3E, the terminal 3F, and the terminal 3G. The relay device 2 relays communication between each of the terminal 3A, the terminal 3B, the terminal 3C, the terminal 3D, the terminal 3E, the terminal 3F, and the terminal 3G, and the network 1.

Each of the terminal 3A, the terminal 3B, the terminal 3C, the terminal 3D, the terminal 3E, the terminal 3F, and the terminal 3G is a device having a communication function of connecting to the network 1 via the relay device 2. Each of the terminal 3A, the terminal 3B, the terminal 3C, the terminal 3D, the terminal 3E, the terminal 3F, and the terminal 3G is, for example, a game machine, a smartphone, a tablet, a personal computer, or the like.

In the following, when it is not necessary to individually distinguish the terminal 3A, the terminal 3B, the terminal 3C, the terminal 3D, the terminal 3E, the terminal 3F, and the terminal 3G, it is simply referred to as the terminal 3. Note that, between the relay device 2 and the terminal 3, authentication work or the like for relaying communication is performed in advance, and the terminal 3 is registered in the relay device 2.

Further, in the following, it is assumed that the LAN 100 is constructed in a house of a family of four, for example, a father, a mother, and the eldest son and the second son who are the sons of the parents. The eldest son mainly uses the terminal 3D, the terminal 3E, and the terminal 3F, the second son mainly uses the terminal 3A and the terminal 3B, the mother mainly uses the terminal 3C, and the father mainly uses the terminal 3G. Explain as a thing.

Any terminal 3 (terminal 3G in the example of FIG. 1) that can be connected to the relay device 2 is a terminal on which an application program (connection management application) including a management program can be installed. The terminal 3G functions as a management device by executing this connection management application. In the following, it is assumed that the father in a family of four is an administrator who manages children by performing various settings and operations on the connection management application of the terminal 3G (hereinafter referred to as a user of the terminal 3G (management device)). explain.

In this connection management application, terminals 3 can be divided into groups for each user and registered, and connection restrictions to network 1 can be set collectively for terminals 3 belonging to this group. The connection restriction to the network 1 means to limit the period (time zone, day of the week, etc.) in which the network 1 can be connected.

For example, since the terminal 3D, the terminal 3E, and the terminal 3F are mainly used by the eldest son, they are registered in the group of the eldest son. Further, since the terminal 3A and the terminal 3B are mainly used by the second son, they are registered in the second son's group. For example, if the father wants to restrict the connection to the network 1 for all the terminals 3 used by the eldest son, he operates the connection management application and sets the connection restriction for the group of the eldest son. As a result, connection restrictions can be collectively applied to the terminals 3D, the terminals 3E, and the terminals 3F belonging to the group of the eldest son.

FIG. 2 is a schematic diagram showing an example of the internal configuration of the relay device 2 in the LAN 100 shown in FIG. The relay device 2 includes a CPU (Central Processing Unit) 20, a ROM (Read Only Memory) 21, a RAM (Random Access Memory) 22, a first communication module 23, and a second communication module 24.

The CPU 20, ROM 21, RAM 22, the first communication module 23, and the second communication module 24 are each connected by a common bus.

If the network 1 is the Internet, the first communication module 23 performs wired communication with the network 1 in accordance with, for example, the IEEE802.3 standard.

If the network 1 is a mobile communication network, the first communication module 23 may be, for example, an IMT (International Mobile Telecommunication) -2000 standard (3G / HSDPA (3rd Generation / High-Speed Downlink Packet Access), LTE (LongTele)). , Or, in accordance with WiMAX (including Worldwide Interoperability for Mobile Access), etc.), wireless communication is performed with the network 1.

The second communication module 24 is a module for wirelessly or wiredly communicating with the terminal 3. As the second communication module 24, for example, a module that performs wireless communication in accordance with the IEEE (The Institute of Electrical and Electronics Engineers) 802.11 standard is used. Alternatively, as the second communication module 24, a module that performs wired communication in accordance with a standard such as 1000BASE-T, 100BASE-TX, or 10BASE-T is used. The second communication module 24 may be a module for communicating with the terminal 3 by both wireless and wired communication.
As a specific method for the relay device 2 to restrict the connection of the terminal 3 to the network 1, when the second communication module 24 performs wireless communication, the wireless communication from the terminal 3 for a specified period is performed. There is a way to refuse the connection. Further, when the second communication module 24 performs wired communication, there is a method of rejecting the packet received from the terminal 3 in the designated period.

The CPU 20 controls the operation of the entire relay device 2 by being executed after a program such as firmware stored in the ROM 21 is expanded in the RAM 22. More specifically, the structure of the CPU 20 is an electric circuit in which circuit elements such as semiconductor elements are combined.

The ROM 21 stores various programs such as the above-mentioned firmware and various data including connection management information described later. The CPU 20 executes connection restriction to the network 1 for the terminal 3 connected to the relay device 2 based on the connection management information stored in the ROM 21. The terminal information (IP address, MAC address, manufacturer name, device category, etc.) acquired from the terminal 3 at the time of the authentication work performed with the terminal 3 is registered in the ROM 21.

The RAM 22 operates as the main memory of the relay device 2 and stores various programs and data.

FIG. 3 is a schematic diagram showing an example of an internal configuration of a terminal 3G as a management device in the LAN 100 shown in FIG. The terminal 3G includes a CPU 40, a ROM 41, a RAM 42, a communication module 43, a display unit 44, and an operation unit 45.

The CPU 40, ROM 41, RAM 42, communication module 43, display unit 44, and operation unit 45 are each connected by a common bus.

The communication module 43 is a module for wirelessly or wiredly communicating with the relay device 2. As the communication module 43, for example, a module that performs wireless communication in accordance with the 802.11 standard is used. Alternatively, the communication module 43 used is one that performs wired communication in accordance with a standard such as 1000BASE-T, 100BASE-TX, or 10BASE-T.

The display unit 44 includes a display panel for displaying information configured by a display element such as a liquid crystal display element or an organic EL (electro-luminescence) display element, and a display controller (for example, GPU (Graphics)) for driving the display panel. Processing Unit) and.

When this display controller receives data indicating an instruction to display information from the CPU 40, it creates data constituting a display screen, drives the above display panel based on this data, and displays the display panel. Display the desired display screen in the area.

The operation unit 45 is an interface for inputting various information to the CPU 40, and includes a button, a touch panel, and the like. Hereinafter, the operation unit 45 will be described as a touch panel integrally formed with the display panel of the display unit 44. When the operation unit 45 is operated, information corresponding to the operation is input to the CPU 40.

The CPU 40 controls the operation of the entire terminal 3G by executing the program stored in the ROM 41 after being expanded in the RAM 42. This program includes the above connection management app. More specifically, the structure of the CPU 40 is an electric circuit in which circuit elements such as semiconductor elements are combined.

Various programs and various data including management information described later are stored in the ROM 41. The ROM 41 functions as a storage unit.

FIG. 4 is a functional block diagram of the terminal 3G shown in FIG.

In the terminal 3G, the CPU 40 executes a program including the connection management application stored in the ROM 41 and cooperates with each unit, so that the name registration unit 40A, the group identification information generation unit 40B, the group association processing unit 40C, and the first unit It functions as a connection restriction setting unit 40D, a second connection restriction setting unit 40E, and a connection restriction execution control unit 40F.

The name registration unit 40A acquires the terminal information of the terminal 3 registered in the ROM 21 of the relay device 2 from the relay device 2 and stores it in the ROM 41.

Further, the name registration unit 40A acquires the terminal information of the terminal 3 connected to the relay device 2 from the relay device 2, and based on this terminal information, among the terminal information stored in the ROM 41, the relay device 2 Associate the connecting flag with the terminal information of the terminal connected to.

Further, when the name registration unit 40A accepts a display request (a request to display a list of terminal information of the terminal 3 connected to the relay device 2) input by the user of the terminal 3G operating the operation unit 45. , The list screen (hereinafter, also referred to as the terminal list screen) of all the terminal information stored in the ROM 41 or the terminal information associated with the connecting flag stored in the ROM 41 is displayed on the display unit 44. Let me.

For example, after displaying the terminal list screen on the display unit 44, the name registration unit 40A displays the detailed screen of the selected terminal information when one terminal information is selected by a touch operation on the terminal list screen. It is displayed on the display unit 44. On this detail screen, an area is provided in which the name of the terminal 3 specified by the terminal information can be arbitrarily input.

When the user of the terminal 3G inputs an arbitrary name in this area and saves the name, the name registration unit 40A accepts the input of this name and stores the selected name in the ROM 41. This name is added to the terminal information to update this terminal information. The name registration unit 40A allows the user of the terminal 3G to easily confirm who the terminal 3 connected to the relay device 2 belongs to.

The group identification information generation unit 40B accepts the input of information (for example, a user name or a group name) performed by the user of the terminal 3G operating the operation unit 45, and based on this information, the user unit of the terminal 3 Generates group identification information in. For example, the group identification information generation unit 40B generates the user name input from the user of the terminal 3G as the group identification information and stores it in the ROM 41.

The group association processing unit 40C has all the terminal information stored in the ROM 41 or the ROM 41 with respect to the identification information specified by the user of the terminal 3G among the group identification information stored in the ROM 41. Of the stored terminal information associated with the connecting flag, the terminal information specified by the user of the terminal 3G is associated and stored in the ROM 41. Group management information is composed of the identification information and the terminal information associated with the identification information. Only one identification information is associated with one terminal information.

For example, in a state where a screen for displaying a list of generated identification information (hereinafter referred to as a user list screen) is displayed on the display unit 44, a user of the terminal 3G is one of the user list screens. When the operation of selecting the identification information is performed, the information specifying the identification information is input to the CPU 40. By accepting this information, the group association processing unit 40C recognizes the identification information designated by the user of the terminal 3G.

Further, for example, when the user of the terminal 3G performs an operation of selecting one terminal information from the terminal list screen while the above terminal list screen is displayed on the display unit 44, the terminal information is displayed. The specified information is input to the CPU 40. By accepting this information, the group association processing unit 40C recognizes the terminal information designated by the user of the terminal 3G.

The terminal 3 specified by the terminal information associated with the identification information is also referred to as a registered terminal in the following, and the terminal 3 specified by the terminal information not associated with the identification information is described below. Then it is also called an unregistered terminal.

When the first connection restriction setting unit 40D accepts the first request for setting the connection restriction for the identification information specified by the user of the terminal 3G among the identification information stored in the ROM 41, the first connection restriction setting unit 40D corresponds to the identification information. The connection restriction setting information according to the first request is associated with all the attached terminal information and stored in the ROM 41. The connection restriction setting information is information indicating a period during which the connection to the network 1 is prohibited, whether or not the connection to the network 1 is prohibited, and the like. The connection restriction setting information stored in the ROM 41 by the first connection restriction setting unit 40D is referred to as the first setting information.

For example, when an operation of selecting arbitrary identification information from the above user list screen is performed, the group association processing unit 40C recognizes the identification information specified by the user of the terminal 3G, and this designation is made. A screen for displaying the identification information and all the terminal information associated with the identification information (hereinafter referred to as a user detail screen) is displayed on the display unit 44.

When the user of the terminal 3G performs an operation on this user detail screen to request the setting of the connection restriction to the network 1 for the terminal 3 specified by all the terminal information included in the user detail screen, the user details are displayed. The first request for setting the connection restriction for the identification information displayed on the screen is input to the CPU 40.

When the first connection restriction setting unit 40D accepts this first request, the first connection restriction setting unit 40D corresponds to each terminal information associated with the identification information displayed on the user details screen with the setting information of the contents corresponding to the above operation. Attach and store in ROM 41. Connection management information is configured by the terminal information and the setting information associated with the terminal information. The combination of this connection management information and the above-mentioned group management information is called management information.

FIG. 5 is a diagram showing an example of management information stored in the ROM 41. The management information shown in FIG. 5 is registered by generating and registering the identification information G1 of the group of the eldest son who mainly uses the terminal 3D, the terminal 3E, and the terminal 3F, and the identification information G2 of the group of the second son who mainly uses the terminal 3A and the terminal 3B. Is generated and registered, and is generated when the first request for setting different connection restrictions is made for each of the identification information G1 and G2.

Specifically, the ROM 41 stores the identification information G1 of the eldest son's group and the identification information G2 of the second son's group. Further, the identification information G1 stores the terminal information T1, T2, and T3 designated by the user of the terminal 3G in association with each other. The terminal information T1 is, for example, terminal information of the terminal 3D, the terminal information T2 is, for example, the terminal information of the terminal 3E, and the terminal information T3 is, for example, the terminal information of the terminal 3F.

Further, in these terminal information T1, T2, T3, the first setting information L1 requested by the user of the terminal 3G is stored in association with each other. The group management information is a combination of the identification information G1 and the corresponding terminal information T1, T2, T3. The connection management information is a combination of each of the terminal information T1, T2, and T3 and the first setting information L1 corresponding to each of the terminal information T1, T2, and T3.

The identification information G2 stores the terminal information T4 and T5 designated by the user of the terminal 3G in association with each other. The terminal information T4 is, for example, the terminal information of the terminal 3A, and the terminal information T5 is, for example, the terminal information of the terminal 3B.

Further, the terminal information T4 and T5 store the first setting information L2 requested by the user of the terminal 3G in association with each other. The group management information is a combination of the identification information G2 and the corresponding terminal information T4 and T5. The connection management information is a combination of each of the terminal information T4 and T5 and the first setting information L2 corresponding to each of the terminal information T4 and T5.

The second connection restriction setting unit 40E is designated by the user of the terminal 3G among all the terminal information stored in the ROM 41 or the terminal information associated with the connecting flag stored in the ROM 41. When the second request for setting the connection restriction to the network 1 with respect to the specified terminal information is accepted, the connection restriction setting information is associated with the specified terminal information and stored in the ROM 41.

For example, when the user of the terminal 3G performs an operation to specify arbitrary terminal information included in the user details screen while the user details screen is displayed on the display unit 44, the CPU 40 is designated. A screen for displaying the details of the terminal information (hereinafter referred to as a terminal detail screen) is displayed on the display unit 44.

When the user of the terminal 3G performs an operation on this terminal detail screen to request the setting of the connection restriction to the network 1 for the terminal 3 specified by the terminal information displayed on the terminal detail screen, this terminal information A second request for setting the connection limit to the CPU 40 is input to the CPU 40.

When the second connection restriction setting unit 40E accepts this second request, the terminal information displayed on the terminal details screen is associated with the setting information of the contents corresponding to the above operation and stored in the ROM 41. The connection restriction setting information stored in the ROM 41 by the second connection restriction setting unit 40E is referred to as the second setting information.

For example, in a state where the management information exemplified in FIG. 5 is generated, the user of the terminal 3G performs an operation of requesting the setting of the connection restriction to the network 1 for the terminal 3D specified by the terminal information T1. And the above second request is made. Then, the second connection restriction setting unit 40E that has received the second request cancels the association between the terminal information T1 and the corresponding first setting information L1. Specifically, the second connection restriction setting unit 40E changes the first setting information L1 corresponding to the terminal information T1 to the second setting information L3 in response to the second request, and manages the management information. Update to the one shown in FIG.

The connection restriction execution control unit 40F transmits the connection management information among the management information generated in this way and stored in the ROM 41 to the relay device 2, and connects the terminal 3 to the network 1 based on the connection management information. Let the relay device 2 execute the restriction.
For example, the connection management information consisting of the terminal information T1 and the first setting information L1 shown in FIG. 5, the connection management information consisting of the terminal information T2 and the first setting information L1, the terminal information T3 and the first setting information L1. Take as an example the case where the connection management information consisting of is generated and stored in the ROM 41.
In this case, the connection restriction execution control unit 40F first transmits the connection management information including the terminal information T1 and the first setting information L1 to the relay device 2, and restricts the connection to the terminal 3D specified by the terminal information T1. , The relay device 2 is made to execute based on this first setting information L1.
After that, the connection restriction execution control unit 40F transmits the connection management information including the terminal information T2 and the first setting information L1 shown in FIG. 5 to the relay device 2, and the connection restriction to the terminal 3E specified by the terminal information T2. Is executed by the relay device 2 based on the first setting information L1.
After that, the connection restriction execution control unit 40F transmits the connection management information including the terminal information T3 shown in FIG. 5 and the first setting information L1 to the relay device 2, and the connection restriction to the terminal 3F specified by the terminal information T3. Is executed by the relay device 2 based on the first setting information L1.
In this way, the connection restriction execution control unit 40F transmits the connection restriction information to the relay device 2 in units of the terminals 3, and causes the relay device 2 to individually execute the connection restriction based on the connection restriction information.

When the relay device 2 receives the connection management information including arbitrary terminal information from the terminal 3G, the relay device 2 stores the connection management information in the ROM 21. The relay device 2 restricts the connection to the network 1 based on the setting information included in the connection management information for the terminal 3 specified by the terminal information included in the connection management information stored in the ROM 21. In this way, the relay device 2 limits the connection for each terminal 3 without being aware of the group.

Next, the operation of generating various information by the terminal 3G on which the connection management application is executed will be described with reference to a screen example displayed on the display unit 44 of the terminal 3G. In the following description, the terminal information of the terminal 3D is referred to as the terminal information T1, the terminal information of the terminal 3E is referred to as the terminal information T2, the terminal information of the terminal 3F is referred to as the terminal information T3, and the terminal information of the terminal 3A is referred to as the terminal information T4. The terminal information of 3B is referred to as terminal information T5, the terminal information of terminal 3C is referred to as terminal information T6, and the terminal information of terminal 3G is referred to as terminal information T7.

Further, in the following operation, it is assumed that each of the terminal information T1 to T7 stored in the ROM 41 of the terminal 3G includes the name of the terminal 3 input from the user of the terminal 3G. do.

Specifically, the name "second son's game machine" is added to the terminal information T4 of the terminal 3A. The name "second son's tablet" is added to the terminal information T5 of the terminal 3B. The name "mother's tablet" is added to the terminal information T6 of the terminal 3C. The name "the eldest son's game machine" is added to the terminal information T1 of the terminal 3D. The name "smartphone of the eldest son" is added to the terminal information T2 of the terminal 3E. The name "the eldest son's personal computer" is added to the terminal information T3 on the terminal 3F. The name "father's smartphone" has been added to the terminal information T7 of the terminal 3G.

7 to 11, FIGS. 13, 13, 14, 16 to 18, 20 to 22, FIG. 24 to 26, FIG. 28, and FIGS. 30 to 32 are display units of the terminal 3G by the connection management application. It is a figure which shows the screen example displayed in 44. 12, FIG. 15, FIG. 19, FIG. 19, FIG. 23, FIG. 27, FIG. 29, and FIG. 33 are diagrams showing examples of information stored in the ROM 41 of the terminal 3G by the connection management application. In the screen example of each figure, the rectangle with "3A" to "3G" inside is an icon indicating the terminals 3A to 3G.

(Group registration operation)
In the initial state in which the group identification information or the connection restriction setting information is not stored in the ROM 41 of the terminal 3G, the CPU 40 first causes the display unit 44 to display the initial screen of the user list shown in FIG. 7. When the (+) button at the lower right of the initial screen is touched by the user, the CPU 40 causes the display unit 44 to display the screen shown in FIG.

Next, when the user inputs the character "eldest son" in the input area 80 on the screen shown in FIG. 8 and touches "save" in the upper right of this screen, the input character information is input to the CPU 40. Will be done. In the CPU 40, when the group identification information generation unit 40B receives this character information, it stores this character information in the ROM 41 as the group identification information G1.

Next, when the user touches the (+) button at the lower right of the screen shown in FIG. 8, the CPU 40 shows FIG. 9 based on the terminal information T1 to T7 stored in advance in the ROM 41. The screen shown is displayed on the display unit 44.

On the screen shown in FIG. 9, all the terminal information T1 to T7 stored in the ROM 41 or the terminal information associated with the connecting flag among the terminal information T1 to T7 stored in the ROM 41 is displayed. It is displayed with the icon mentioned above. The items of the terminal information displayed here are the name of the terminal 3 registered by the user, the manufacturer name of the terminal 3, and the IP address of the terminal 3.

Among the terminal information to be displayed on the screen shown in FIG. 9, the CPU 40 displays the terminal information associated with the identification information generated by the group identification information generation unit 40B in the "registered terminal" column. If the identification information is not associated with it, it will be displayed in the "Unregistered terminal" column. At this point, there is no terminal information associated with the identification information. Therefore, all terminal information T1 to T7 are displayed in the "unregistered terminal" column.

In the screen shown in FIG. 9, when the area where the terminal information and the icon of each of the terminal 3D, the terminal 3E, and the terminal 3F are displayed is selected by the user by a touch operation, and "OK" on the upper right of the screen is touched. , Terminal information T1 of the terminal 3D, terminal information T2 of the terminal 3E, and information designating the terminal information T3 of the terminal 3F are input to the CPU 40.

In the CPU 40, when the group association processing unit 40C receives this information, the terminal information T1, the terminal information T2, and the terminal information T3 are associated with the identification information G1 and stored in the ROM 41, and the screen "registered" shown in FIG. A screen X (not shown) to which terminal information T1, terminal information T2, terminal information T3, and corresponding icons are added is displayed on the display unit 44 in the “completed terminal” column.

When "Save" on the upper right is touched on this screen X, the CPU 40 shows FIG. 10 based on the identification information G1 stored in the ROM 41 and the corresponding terminal information T1, terminal information T2, and terminal information T3. The user list screen shown is displayed on the display unit 44.

The screen shown in FIG. 10 includes a character "eldest son" indicating the generated group identification information G1 and a character "three" indicating the total number of terminal information corresponding to the identification information G1. One area is displayed.

Subsequently, when the user touches the (+) button at the lower right of the screen shown in FIG. 10, the CPU 40 causes the display unit 44 to display the screen shown in FIG. Then, the user inputs the character of "second son" in the input area 80 on the screen shown in FIG. 8, and when "Save" in the upper right of this screen is touched, the input character information is input to the CPU 40. To. In the CPU 40, when the group identification information generation unit 40B receives this character information, it stores this character information in the ROM 41 as the group identification information G2.

After the character "second son" is input to the input area 80 and "save" is touched, when the user touches the (+) button at the lower right of the screen shown in FIG. 8, the CPU 40 is ROM 41. Based on the terminal information T1 to T7 stored in the screen X1 (terminal information and icons of terminals 3D to 3F in FIG. 9 are moved to the "registered terminal" column, which is the same as the screen shown in FIG. The displayed screen) is displayed on the display unit 44.

On this screen X1, the area where the terminal information and the icon of the terminal 3A and the terminal 3B are displayed is selected by the user by a touch operation, and when "OK" on the upper right of the screen is touched, the terminal information T4 and the terminal 3A Information that specifies the terminal information T5 of the terminal 3B is input to the CPU 40.

In the CPU 40, when the group mapping processing unit 40C receives this information, the terminal information T4 and the terminal information T5 are associated with the identification information G2 and stored in the ROM 41, and the "registered terminal" column on the screen shown in FIG. A screen X2 (not shown) to which the terminal information T4 and the terminal information T5 and the corresponding icons are added is displayed on the display unit 44.

When "Save" on the upper right is touched on this screen X2, the CPU 40 displays the user list screen shown in FIG. 11 based on the identification information G2 stored in the ROM 41 and the corresponding terminal information T4 and terminal information T5. It is displayed on the display unit 44.

On the screen shown in FIG. 11, the above-mentioned first area, the character of "second son" indicating the group identification information G2, and the character of "two units" indicating the total number of terminal information corresponding to the identification information G2 are displayed. A second area containing, and is displayed.

By the operation up to this point, the two group management information shown in FIG. 12 is stored in the ROM 41 of the terminal 3G. Up to this point, the operation of grouping the terminals 3 on a user-by-user basis is performed.

In the following, the operation when setting the connection restriction collectively for the identification information of each group and the operation when setting the connection restriction individually for each terminal information will be described.

(Connection restriction setting operation: batch setting)
When the first area including the character "eldest son" is touched by the user on the screen shown in FIG. 11, the CPU 40 is based on the identification information G1 stored in the ROM 41 and the corresponding terminal information T1 to T3. , The user details screen shown in FIG. 13 is displayed.

The user details screen shown in FIG. 13 includes a "connection restriction batch setting" button for collectively setting connection restrictions for terminals 3 specified by all terminal information corresponding to the identification information G1. ing. When the "connection restriction batch setting" button is touched by the user, the CPU 40 overlays the setting screen 140 for selecting the connection restriction setting pattern on the user details screen shown in FIG. 13 (see FIG. 14). ).

On the setting screen 140, select one from seven items: unset, not restricted, connection prohibited, 7 to 12 o'clock prohibited, 12 to 18 o'clock prohibited, 18 to 23 o'clock prohibited, and 23 to 7 o'clock prohibited. The radio button for is displayed.

"Not set" means that the connection restriction to the network 1 is not set. "No restriction" means that the connection to the network 1 is not restricted. "No connection" means that the connection to the network 1 is restricted indefinitely. "Prohibited from XX to YY" means that the connection to the network 1 is restricted during the period from XX to YY.

When one of these seven items is selected by the user's touch operation and "OK" at the lower right of the setting screen 140 is touched, the connection restriction setting for the identification information G1 specified by the user is set. The first request is input to the CPU 40.

In the CPU 40, when the first connection restriction setting unit 40D accepts the first request, the item selected by the above radio button for each of the terminal information T1 to T3 associated with the identification information G1. The first setting information of the connection restriction according to the above is associated and stored in the ROM 41.

For example, when "not set" or "not restricted" is selected, the information indicating that the connection restriction is not performed is stored in the ROM 41 as the first setting information. When "connection prohibition" is selected, information indicating that the connection restriction is performed indefinitely is stored in the ROM 41 as the first setting information. When "Prohibit during XX to YY" is selected, the information indicating that the connection is restricted only in the designated time zone is stored in the ROM 41 as the first setting information.

For example, as shown in FIG. 14, when OK is touched with the item "Prohibited from 18:00 to 23:00" selected, the first connection restriction setting unit 40D has the identification information stored in the ROM 41. Each of the terminal information T1 to T3 of G1 is associated with the first setting information L1 indicating that the connection is restricted during the period from 18:00 to 23:00 and stored. As a result, as shown in FIG. 15, three connection management information is generated.

When OK is touched on the setting screen 140 shown in FIG. 14, the CPU 40 displays the user details screen shown in FIG. 13 on the user details screen shown in FIG. 16 based on the information of FIG. 15 stored in the ROM 41. Update to the details screen. On the user details screen shown in FIG. 16, an icon of "18 to 23 o'clock prohibition" indicating the first setting information L1 is additionally displayed in each display area of the terminal information T1 to T3 corresponding to the identification information G1. There is.

(Connection restriction setting operation: Individual setting)
When the display area of the terminal information T1 of the terminal 3D is touched by the user on the user detail screen shown in FIG. 16, information specifying the terminal information T1 is input to the CPU 40. Upon receiving this information, the CPU 40 causes the display unit 44 to display the terminal detail screen shown in FIG. 17 based on the terminal information T1 and the first setting information L1 associated with the terminal information T1.

The terminal detail screen shown in FIG. 17 includes an area in which the characters “connection restriction 18 to 23 o'clock prohibited” based on the first setting information L1 associated with the terminal information T1 of the terminal 3D are displayed. When this area is touched by the user, the CPU 40 overlays the setting screen 140 on the terminal detail screen shown in FIG. 17, as shown in FIG.

On the screen shown in FIG. 18, for example, when OK is touched with the item "connection prohibited" selected, the second request for setting the connection restriction for the terminal information T1 specified by the user is made. It is input to the CPU 40.

When the second connection restriction setting unit 40E accepts the second request, the second connection restriction setting unit 40E indicates that the connection restriction is performed indefinitely on the first setting information L1 corresponding to the terminal information T1 shown in FIG. Change to the setting information L3 of. That is, the correspondence between the terminal information T1 and the first setting information L1 is released, and the second setting information L3 is associated with the terminal information T1. As a result, the management information is updated to that shown in FIG.

As described above, when OK is touched on the setting screen 140 shown in FIG. 18 and the management information is updated, the CPU 40 is shown in FIG. 16 based on the information of FIG. 19 stored in the ROM 41. The user details screen is updated to the user details screen shown in FIG. On the user details screen shown in FIG. 20, a "connection prohibited" icon indicating the second setting information L3 is displayed in the display area of the terminal information T1 corresponding to the identification information G1.

(Group movement operation of terminals)
In the connection management application, it is possible to change the group to which the terminal 3 belongs to another group without canceling the group (deleting the identification information from the ROM 41). Hereinafter, the operation when the identification information of the group to which the terminal 3F belongs is changed from the identification information G1 to the identification information G2 from the state where the two group management information shown in FIG. 19 is generated will be described.

When the second area including the character "second son" is touched by the user on the user list screen shown in FIG. 11 displayed after the information shown in FIG. 19 is generated, the CPU 40 determines the identification stored in the ROM 41. The user detail screen shown in FIG. 21 is displayed based on the information G2 and the corresponding terminal information T4 and T5.

Next, when the user touches the (+) button at the lower right of the screen shown in FIG. 21, the CPU 40 uses the screen shown in FIG. 22 based on the terminal information T1 to T7 stored in the ROM 41. Is displayed on the display unit 44. On the screen shown in FIG. 22, the terminal information excluding the terminal information T4 and T5 corresponding to the identification information G2 is displayed separately for the unregistered terminal and the registered terminal.

In the screen shown in FIG. 22, when the area where the terminal information T3 of the terminal 3F is displayed is touched by the user and "OK" on the upper right of the screen is touched, a request for changing the group to the terminal information T3 of the terminal 3F is made. Is input to the CPU 40.

When the group association processing unit 40C accepts this request, the CPU 40 cancels the association between the identification information G1 and the terminal information T3, associates the terminal information T3 with the identification information G2, and stores the terminal information T3 in the ROM 41. As a result, the two group management information stored in the ROM 41 is updated from the state shown in FIG. 19 to the information shown in FIG. 23. As shown in FIG. 23, when the association between the identification information G1 and the terminal information T3 is released, the association between the terminal information T3 and the first setting information L1 is also released. That is, the setting information is not associated with the terminal information T3 associated with the identification information G2.

When the group management information is updated as shown in FIG. 23, the CPU 40 updates the user detail screen shown in FIG. 21 to the user detail screen shown in FIG. 24 based on the updated group management information. .. On the user details screen shown in FIG. 24, the terminal information T3 on the terminal 3F and the corresponding icon are additionally displayed.

(Connection restriction setting operation: Individual setting)
It should be noted that the individual setting of the connection restriction for the arbitrary terminal information described with reference to FIGS. 17 to 19 can be performed even when the terminal information is not associated with the group identification information. When the connection management application is started, the CPU 40 checks the terminal information of the terminal registered in the relay device 2 acquired from the relay device 2, and if new terminal information is added, the display unit 44 displays it. , It is good to notify that a new terminal has been added.
Alternatively, when a new terminal is registered in the relay device 2, the relay device 2 notifies the terminal 3G that executes the connection management application, and when the CPU 41 of the terminal 3G receives this notification, a new terminal is used. You may recognize that the terminal information has been added and give a notification.

Further, the individual setting of the connection restriction for the arbitrary terminal information described with reference to FIGS. 17 to 19 can be performed even when the first setting information is not associated with the terminal information. For example, on the user details screen shown in FIG. 13, when the user touches the area where the terminal information of the terminal 3D is displayed, the information specifying the terminal information T1 is input to the CPU 40. Upon receiving this information, the CPU 40 causes the display unit 44 to display the terminal detail screen shown in FIG. 25 based on the terminal information T1.

In the state shown in FIG. 13, the setting information is not associated with the terminal information T1 of the terminal 3D. Therefore, the terminal detail screen shown in FIG. 25 includes an area in which the characters “connection restriction not set” are displayed. When this area is touched by the user, the CPU 40 overlays the setting screen 140 on the terminal detail screen shown in FIG. 25, as shown in FIG. 26.

On the screen shown in FIG. 26, for example, when OK is touched with the item "connection prohibited" selected, the second request for setting the connection restriction for the terminal information T1 specified by the user is made. It is input to the CPU 40.

When the second connection restriction setting unit 40E accepts this second request, the terminal information T1 shown in FIG. 12 is associated with the second setting information L3 indicating that the connection is restricted indefinitely. Remember. As a result, the management information is updated from the state shown in FIG. 12 to the one shown in FIG. 27.

When the group management information is updated as shown in FIG. 27, the CPU 40 updates the user detail screen shown in FIG. 13 to the user detail screen shown in FIG. 28 based on the updated group management information. .. On the user details screen shown in FIG. 28, a "connection prohibited" icon indicating the second setting information L3 is additionally displayed in the display area of the terminal information T1 corresponding to the identification information G1.

(Batch setting operation of connection restrictions when terminals with connection restrictions and terminals without connection restrictions coexist)
When the "connection restriction batch setting" button is touched on the user detail screen shown in FIG. 28, the CPU 40 overlays the user detail screen shown in FIG. 28 with a setting screen 140 for selecting a connection restriction setting pattern. .. Then, for example, when OK is touched with the item "Prohibited from 18:00 to 23:00" selected on the setting screen 140, the first setting of the connection restriction for the identification information G1 specified by the user is set. The request is input to the CPU 40.

In the CPU 40, when the first connection restriction setting unit 40D accepts the first request, the second setting information L3 is already associated with the terminal information T1 to T3 associated with the identification information G1. The terminal information T1 and T2 excluding the terminal information T3 are stored in the ROM 41 in association with the first setting information L1 of the connection restriction according to the item selected on the setting screen 140. As a result, the management information shown in FIG. 27 is updated to the management information (see FIG. 29) to which two connection management information is added.

(Effect of embodiment)
As described above, according to the connection management application, a large number of terminals 3 can be grouped for each user, and connection restrictions can be set collectively for the terminals 3 belonging to each group. Therefore, even in a situation where the number of terminals 3 connected to the relay device 2 increases and the number of users of the terminals 3 increases, the connection restriction can be easily set.

Further, the relay device 2 executes the connection restriction to the network 1 with respect to the terminal 3 based on the connection management information in which the terminal information and the connection restriction setting information are associated with each other. In this way, the relay device 2 does not perform group-aware processing. Therefore, the above-mentioned effect can be obtained without major improvement of the firmware of the relay device 2, and the cost for constructing the LAN 100 can be suppressed. Further, the user of the terminal 3G can obtain the above-mentioned convenience while using the existing relay device 2.

Further, according to the connection management application, it is possible to individually set the connection restriction for the terminal information corresponding to the group identification information without breaking the association between the identification information and the terminal information. Therefore, it is possible to flexibly and easily set the connection restriction for the plurality of terminals 3 belonging to the group, and it is possible to enhance the convenience.

Further, according to the connection management application, the terminal information associated with the identification information of the group can be canceled from the association with the identification information and newly associated with the identification information of another group. In this way, it is possible to change the group to which the terminal 3 belongs while maintaining the identification information once generated, and it is possible to simplify the work required for changing the group of the terminal 3.
For example, from the viewpoint of network management in a company, etc., in order to change the group to which the terminal belongs, the work of breaking the association between the terminal and the group, and this work makes this terminal not belong to any group, and then this terminal. The work of selecting the device and the work of linking the selected terminal to the destination group are required in sequence. According to the connection management app, the device was made to belong to the group without the task of breaking the link between the device and the group and the task of selecting this device after making this device not belong to any group. You can easily move the terminal to another group as it is.

In the home, for example, a situation may occur in which the user who mainly uses the terminal 3F wants to change from the eldest son to the second son. According to the connection management application, it is possible to respond to the above situation and improve convenience by simply changing the correspondence destination of the terminal information on the terminal 3F while maintaining the group of the eldest son and the group of the second son. can.

Further, according to the connection management application, the identification information is associated with the terminal information to which the setting information is associated with the identification information and the terminal information to which the setting information is not associated. When the first request for setting the connection restriction for is made, the first setting information corresponding to the first request is associated and stored only for the terminal information to which the setting information is not associated. Will be done. In this way, since the setting information is not changed for the terminals 3 for which connection restrictions are individually applied, it is possible to flexibly and easily set the connection restrictions for a plurality of terminals 3 belonging to the group, which is convenient. Can be enhanced.

Hereinafter, a modified example of the operation of the CPU 40 of the terminal 3G that has executed the connection management application will be described.

(First modification)
When the "connection restriction batch setting" button is touched on the user detail screen shown in FIG. 28, the CPU 40 overlays the user detail screen shown in FIG. 28 with a setting screen 140 for selecting a connection restriction setting pattern. .. Then, for example, when OK is touched with the item "Prohibited from 18:00 to 23:00" selected on the setting screen 140, the first setting of the connection restriction for the identification information G1 specified by the user is set. The request is input to the CPU 40.

In the CPU 40, when the first connection restriction setting unit 40D accepts the first request, the terminal information to which the setting information is already associated among the terminal information T1 to T3 associated with the identification information G1. Judge the presence or absence of. Then, when the first connection restriction setting unit 40D determines that there is terminal information to which the setting information is already associated, the first connection restriction setting unit 40D is for notifying the existence of the terminal information to which the setting information is already associated. The screen 150 is overlaid on the user details screen shown in FIG. 28 (see FIG. 30).

On the screen 150, a message such as "There are terminals for which connection restrictions are individually set. Please cancel this setting and then perform batch settings again" is displayed.

According to the operation of this first modification, it is possible to prevent another connection restriction from being erroneously set for the terminal 3 for which the connection restriction is individually applied.

(Second modification)
On the screen 150 described above, for example, as shown in FIG. 31, "There are terminals with individually set connection restrictions. If you continue the settings as they are, the connection restrictions of the individually set terminals will be changed. Is that okay? A confirmation message such as "?" May be displayed.

In this case, when the user performs an operation to continue the setting (OK touch operation) while being aware of the message, the first request is input to the CPU 40. When the first connection restriction setting unit 40D accepts this first request, the first connection restriction setting unit 40D responds to each of the terminal information T1 to T3 associated with the identification information G1 according to the item selected on the setting screen 140. The first setting information L1 of the connection restriction is associated and stored in the ROM 41. As a result, the second setting information L3 of the management information shown in FIG. 27 is changed to the first setting information L1 and updated to the management information shown in FIG.

According to the operation of the second modification, it is possible to prevent another connection restriction from being erroneously set for the terminal 3 for which the connection restriction is individually applied. In addition, it is possible to deal with a case where it is desired to collectively restrict the connection by ignoring the setting information of the terminal 3 for which the connection is restricted individually, and the convenience can be enhanced.

(Third modification example)
Here, a modified example of the group movement operation of the terminal described above will be described.

In the screen shown in FIG. 22, when the area where the terminal information T3 of the terminal 3F is displayed is touched by the user and "OK" on the upper right of the screen is touched, a request for changing the group to the terminal information T3 of the terminal 3F is made. Is input to the CPU 40.

When the group association processing unit 40C accepts this request, the CPU 40 cancels the association between the identification information G1 and the terminal information T3, associates the terminal information T3 with the identification information G2, and stores the terminal information T3 in the ROM 41. Further, when the terminal information T3 is associated with the identification information G2, the group association processing unit 40C changes the name of the terminal 3 included in the terminal information T3 based on the identification information G2.

For example, when the group association processing unit 40C associates the terminal information T3 with the identification information G2 (“second son”), the “eldest son's personal computer,” which is the name of the terminal 3F included in the terminal information T3, is used as the identification information G2. Based on that, change to "second son's personal computer".

When the group management information is updated in this way, the CPU 40 updates the user detail screen shown in FIG. 21 to the user detail screen shown in FIG. 32 based on the updated group management information. On the user details screen shown in FIG. 32, the terminal information T3 on the terminal 3F and the corresponding icon are additionally displayed. The name included in the terminal information T3 has been changed as described above. Therefore, on the user details screen shown in FIG. 32, the name of the group and the name of the terminal 3 belonging to this group are linked.

In this way, even when the group is changed, the correspondence between the group name and the terminal name is taken, so that the user does not feel uncomfortable. For example, on the user details screen shown in FIG. 24, it is possible to take the correspondence between the group name and the terminal name by manually changing the name in the terminal information of the terminal 3F. According to the third modification, this work can be eliminated and convenience can be improved.

(Fourth modification)
Here, it is assumed that the management information as shown in FIG. 6 is generated. From this state, when a request is made to change the group to which the terminal 3F specified by the terminal information T3 belongs, the group association processing unit 40C cancels the association between the identification information G1 and the terminal information T3, and the identification is performed. The terminal information T3 is associated with the information G2. In this fourth modification, the CPU 40 is further associated with the other terminal information T4 and T5 corresponding to the identification information G2 with respect to the terminal information T3 associated with the identification information G2 by the above processing. The first setting information L2 is automatically associated and stored. As a result, the management information shown in FIG. 6 is updated to the management information shown in FIG. 33.

According to the fourth modification, even if the affiliation of the terminal 3 is changed, the connection restriction for the terminal 3 can be automatically set. If the terminals 3 belong to the same group, it is considered that connection restrictions having the same contents are often applied. Therefore, by doing so, it is possible to eliminate the latter work of the work of changing the affiliation of the terminal 3 and the work of individually restricting the connection to the changed terminal 3, which is convenient. Can be enhanced.

(Other variants)
The management information generated by the connection management application described so far is stored in the terminal 3G that executes the connection management application, but is not limited to this. For example, the CPU 40 of the terminal 3G may transmit the management information stored in the ROM 41 to the relay device 2 and store it in the ROM 21 of the relay device 2. In this case, when the connection management application is launched, the CPU 40 of the terminal 3G acquires management information from the relay device 2 and stores it in the ROM 41 or the like. Then, when the management information is changed, the CPU 40 may transmit the changed management information to the relay device 2 to update the management information stored in the relay device 2.

In this way, when there are a plurality of terminals 3 that execute the connection management application by storing the management information in the relay device 2 (for example, when the father and the mother each use the terminals 3 to manage the connection restrictions). However, the management information can be easily shared by the plurality of terminals 3.

Further, the CPU 40 of the terminal 3G may store the latest management information stored in the ROM 41 in a device accessible from the terminal 3G via the network 1. Alternatively, the CPU 40 of the terminal 3G may store the latest management information stored in the ROM 41 in a device accessible via a mobile communication network that can be directly connected to the terminal 3G.

In this case, when the connection management application is launched, the CPU 40 of the terminal 3G acquires management information from the above-mentioned device and stores it in the ROM 41 or the like. Then, when the management information is changed, the CPU 40 may transmit the changed management information to the device to update the management information stored in the device.

In this way, by storing the management information in the device accessible from the terminal 3G via the network, even if there are a plurality of terminals 3 that execute the connection management application, the management information can be easily transferred to the plurality of terminals 3. Can be shared with. Further, even when the user of the terminal 3G is out, it is possible to set the connection restriction of the terminal 3 connected to the relay device 2.

An example of the above device is a server. When storing the management information in the server, the CPU 40 of the terminal 3 that has executed the connection management application stores the identification number of the relay device 2 in the ROM 41, and the management information generated as described above and its identification. It is associated with the number and sent to the server for storage.

Then, when the connection management application is started, the CPU 40 accesses the relay device 2 and acquires the identification number of the relay device 2. Further, the CPU 40 accesses the server at the time of startup or at an arbitrary timing, and checks whether or not the server has management information corresponding to the acquired identification information of the relay device 2.

Here, when the server has the management information corresponding to the identification information of the relay device 2, the CPU 40 determines the creation date and time of the management information or the data version (what version of the management information) of the management information. Check it, and if the management information does not exist in the ROM 41, acquire it and store it in the ROM 41.

Further, even if the management information is stored in the ROM 41, the CPU 40 acquires the management information from the server and stores the management information in the ROM 41 if the creation date and time or the version information is older than the management information stored in the server. Remember.

As a result, for example, the management information generated by the connection management application installed on the terminal 3G can be acquired by the connection management application installed on the terminal 3C different from the terminal 3G, and the management information can be shared. It can be done easily.

The relay device 2 is a router, and this router has a repeater (a device that relays communication between the relay device 2 and the terminal 3 in order to expand the communication range of the relay device 2), and this repeater is used. When the terminal 3G has a function of executing the same connection restriction as the relay device 2, the CPU 40 of the terminal 3G may transmit the connection management information to each of the router and the repeater.

If the ROM 41 connection management information is stored, the CPU 40 of the terminal 3G may read it and send it to the repeater, or may send a modified version of the read connection management information to the repeater. good. This not only facilitates the setting, but also makes it possible to set different connection restrictions only for the communicable range extended by the repeater, which enables more flexible setting.

The connection restriction to the network 1 in the above description is not limited to the period during which the network 1 can be connected (time zone, day of the week, etc.), and may limit the connection destination of the server or the like connected to the network 1.

The connection management application described above stores the program in a non-transitory storage medium that can be read by a computer. Such a "computer-readable storage medium" includes, for example, an optical medium such as a CD-ROM (Compact Disc-ROM), a magnetic storage medium such as a USB memory or a memory card, and the like. Further, such a program can be provided to the terminal 3 by downloading via the Internet.

As described above, the following matters are disclosed in this specification.

(1)
It is a management device for managing the connection restriction to the network for the terminal performed by the relay device that relays the communication between the network and the terminal.
A group identification information generation unit that generates group identification information for each user of the terminal, and a group identification information generation unit.
A group associative processing unit that acquires terminal information of the terminal connected to the relay device and associates the identification information designated by the user of the management device with the terminal information designated by the user. ,
When the first request for setting the connection restriction for the identification information specified by the user is accepted, the first setting information for the connection restriction is applied to the terminal information associated with the identification information. The first connection restriction setting unit to be associated and
The terminal information in which the first setting information is associated with the first setting information is transmitted to the relay device, and the network is based on the first setting information for the terminal specified by the terminal information. A management device including a connection restriction execution control unit that causes the relay device to execute the connection restriction of the above.

(2)
(1) The management device described above.
When the second request for setting the connection restriction for the terminal information specified by the user is accepted, the second connection restriction setting unit for associating the second setting information for the connection restriction with the terminal information is provided. Further preparation,
The connection restriction execution control unit transmits the terminal information in which the second setting information and the second setting information are associated with each other to the relay device, and the connection restriction execution control unit transmits the terminal information specified by the terminal information to the terminal. A management device that restricts connections to the network based on the second setting information.

(3)
(2) The management device described above.
When the first setting information is associated with the terminal information designated by the user, the second connection restriction setting unit corresponds to the terminal information and the first setting information. A management device that releases the attachment.

(4)
The management device according to (2) or (3).
The first connection restriction setting unit refers to the terminal information corresponding to the identification information designated by the user other than the terminal information to which the second setting information is associated. A management device that associates the first setting information.

(5)
The management device according to (2) or (3).
The first connection restriction setting unit is in the case where the terminal information to which the second setting information is associated exists in the terminal information corresponding to the identification information designated by the user. Is a management device that notifies the existence of the terminal information.

(6)
The management device according to any one of (2) to (5).
When the group association processing unit receives a request for change of the group with respect to the terminal information to which the identification information of the group is associated, the group association processing unit cancels the association between the terminal information and the identification information and makes a request. A management device that associates the terminal information with the identification information of the group to be changed.

(7)
(6) The management device according to the description.
It has a name registration unit that accepts the input of the name of the terminal and registers the terminal information of the terminal including the information of the name.
The group association processing unit is a management device that changes the name included in the terminal information based on the identification information when the terminal information is associated with the identification information of the group to be changed.

(8)
The management device according to any one of (2) to (7).
Further provided is a storage unit that stores management information including information in which the identification information is associated with the terminal information and information in which the terminal information is associated with the first setting information or the second setting information. Management device.

(9)
The management device according to any one of (2) to (7).
The relay device stores the information including the information in which the identification information is associated with the terminal information and the information in which the terminal information is associated with the first setting information or the second setting information. Management device.

(10)
The management device according to any one of (2) to (7).
The management information including the information in which the identification information is associated with the terminal information and the information in which the terminal information is associated with the first setting information or the second setting information is connected to the network from the management device. A management device stored in a device accessible through.

(11)
It is a management method for managing the connection restriction to the network for the terminal performed by the relay device that relays the communication between the network and the terminal.
A group identification information generation step for generating group identification information for each user of the terminal, and a group identification information generation step.
A group associative processing step of acquiring the terminal information of the terminal connected to the relay device and associating the identification information designated by the user of the management device with the terminal information designated by the user. ,
When the first request for setting the connection restriction for the identification information specified by the user is accepted, the first setting information for the connection restriction is applied to the terminal information associated with the identification information. The first connection restriction setting step to be associated and
The terminal information in which the first setting information is associated with the first setting information is transmitted to the relay device, and the network is based on the first setting information for the terminal specified by the terminal information. A management method including a connection restriction execution control step for causing the relay device to execute the connection restriction of the above.

(12)
It is a management program for managing the connection restriction to the network for the terminal performed by the relay device that relays the communication between the network and the terminal.
A group identification information generation step for generating group identification information for each user of the terminal, and a group identification information generation step.
A group associative processing step of acquiring the terminal information of the terminal connected to the relay device and associating the identification information designated by the user of the management device with the terminal information designated by the user. ,
When the first request for setting the connection restriction for the identification information specified by the user is accepted, the first setting information for the connection restriction is applied to the terminal information associated with the identification information. The first connection restriction setting step to be associated and
The terminal information in which the first setting information is associated with the first setting information is transmitted to the relay device, and the network is based on the first setting information for the terminal specified by the terminal information. A management program for causing a computer to execute a connection restriction execution control step for causing the relay device to execute the connection restriction.

100 LAN
1 Network 2 Relay device 3A to 3G Terminal 20 CPU
21 ROM
22 RAM
23 First communication module 24 Second communication module 40 CPU
41 ROM
42 RAM
43 Communication module 44 Display unit 45 Operation unit 40A Name registration unit 40B Group identification information generation unit 40C Group mapping processing unit 40D First connection restriction setting unit 40E Second connection restriction setting unit 40F Connection restriction execution control unit 80 Input area 140, 150 setting screen

Claims (9)

It is a management device for managing the connection restriction to the network for the terminal performed by the relay device that relays the communication between the network and the terminal.
A group identification information generation unit that generates group identification information for each user of the terminal, and a group identification information generation unit.
A group associative processing unit that acquires terminal information of the terminal connected to the relay device and associates the identification information designated by the user of the management device with the terminal information designated by the user. ,
When the first request for setting the connection restriction for the identification information specified by the user is accepted, the first setting information for the connection restriction is applied to the terminal information associated with the identification information. The first connection restriction setting unit to be associated and
The terminal information in which the first setting information is associated with the first setting information is transmitted to the relay device, and the network is based on the first setting information for the terminal specified by the terminal information. The connection restriction execution control unit that causes the relay device to execute the connection restriction of
When the second request for setting the connection restriction for the terminal information specified by the user is accepted, the second connection restriction setting unit for associating the second setting information for the connection restriction with the terminal information , Equipped with
The connection restriction execution control unit transmits the terminal information in which the second setting information and the second setting information are associated with each other to the relay device, and the connection restriction execution control unit transmits the terminal information specified by the terminal information to the terminal. Execute the connection restriction to the network based on the second setting information ,
The first connection restriction setting unit is in the case where the terminal information to which the second setting information is associated exists in the terminal information corresponding to the identification information designated by the user. Is a management device that notifies the existence of the terminal information . The management device according to claim 1 .
When the first setting information is associated with the terminal information designated by the user, the second connection restriction setting unit corresponds to the terminal information and the first setting information. A management device that releases the attachment. The management device according to claim 1 or 2 .
When the group association processing unit receives a request for change of the group with respect to the terminal information to which the identification information of the group is associated, the group association processing unit cancels the association between the terminal information and the identification information and makes a request. A management device that associates the terminal information with the identification information of the group to be changed. The management device according to claim 3 .
It has a name registration unit that accepts the input of the name of the terminal and registers the terminal information of the terminal including the information of the name.
The group association processing unit is a management device that changes the name included in the terminal information to a name including the identification information when the terminal information is associated with the identification information of the group to be changed. The management device according to any one of claims 1 to 4 .
Further provided is a storage unit that stores management information including information in which the identification information is associated with the terminal information and information in which the terminal information is associated with the first setting information or the second setting information. Management device. The management device according to any one of claims 1 to 4 .
The relay device stores the information including the information in which the identification information is associated with the terminal information and the information in which the terminal information is associated with the first setting information or the second setting information. Management device. The management device according to any one of claims 1 to 4 .
The management information including the information in which the identification information is associated with the terminal information and the information in which the terminal information is associated with the first setting information or the second setting information is connected to the network from the management device. A management device stored in a device accessible through. It is a management method for managing the connection restriction to the network for the terminal performed by the relay device that relays the communication between the network and the terminal.
A group identification information generation step for generating group identification information for each user of the terminal, and a group identification information generation step.
A group association processing step of acquiring terminal information of the terminal connected to the relay device and associating the identification information designated by the user of the terminal with the terminal information designated by the user.
When the first request for setting the connection restriction for the identification information specified by the user is accepted, the first setting information for the connection restriction is applied to the terminal information associated with the identification information. The first connection restriction setting step to be associated and
The terminal information in which the first setting information is associated with the first setting information is transmitted to the relay device, and the network is based on the first setting information for the terminal specified by the terminal information. The connection restriction execution control step for causing the relay device to execute the connection restriction of
When the second request for setting the connection restriction for the terminal information specified by the user is accepted, the second connection restriction setting step for associating the second setting information for the connection restriction with the terminal information , Equipped with
The connection restriction execution control step transmits the terminal information in which the second setting information and the second setting information are associated with the relay device to the relay device, and the terminal is specified by the terminal information. Execute the connection restriction to the network based on the second setting information,
The first connection restriction setting step is when the terminal information to which the second setting information is associated exists in the terminal information corresponding to the identification information designated by the user. Is a management method for notifying the existence of the terminal information . It is a management program for managing the connection restriction to the network for the terminal performed by the relay device that relays the communication between the network and the terminal.
A group identification information generation step for generating group identification information for each user of the terminal, and a group identification information generation step.
A group association processing step of acquiring terminal information of the terminal connected to the relay device and associating the identification information designated by the user of the terminal with the terminal information designated by the user.
When the first request for setting the connection restriction for the identification information specified by the user is accepted, the first setting information for the connection restriction is applied to the terminal information associated with the identification information. The first connection restriction setting step to be associated and
The terminal information in which the first setting information is associated with the first setting information is transmitted to the relay device, and the network is based on the first setting information for the terminal specified by the terminal information. The connection restriction execution control step for causing the relay device to execute the connection restriction of
When the second request for setting the connection restriction for the terminal information specified by the user is accepted, the second connection restriction setting step for associating the second setting information for the connection restriction with the terminal information To make the computer execute,
The connection restriction execution control step transmits the terminal information in which the second setting information and the second setting information are associated with the relay device to the relay device, and the terminal is specified by the terminal information. Execute the connection restriction to the network based on the second setting information,
The first connection restriction setting step is when the terminal information to which the second setting information is associated exists in the terminal information corresponding to the identification information designated by the user. Is a management program that notifies the existence of the terminal information .

Images