WO2015072169A1

WO2015072169A1 - Access control apparatus, access control system, access control method, and program

Info

Publication number: WO2015072169A1
Application number: PCT/JP2014/065431
Authority: WO
Inventors: 亜紀子水藤
Original assignee: 日本電気株式会社
Priority date: 2013-11-18
Filing date: 2014-06-11
Publication date: 2015-05-21

Abstract

An access control apparatus (2000) is communicatively connected to a relay apparatus (3000). The relay apparatus (3000) transfers a name solution request, which is received from a second terminal (5000), to another apparatus. A name solution unit (2020) receives the name solution request transferred by the relay apparatus (3000) and sends back the address of the access control apparatus (2000) as a result of the name solution request. An access information acquisition unit (2040) acquires information to determine a web content that was accessed by a first terminal (4000). An access request processing unit (2060) receives, from the second terminal (5000), an access request for accessing the web content, and sends back, in response to the access request, a response to redirect the web access of the second terminal (5000) to the web content that was accessed by the first terminal (4000).

Description

Access control apparatus, access control system, access control method, and program

The present invention relates to an access control device, an access control system, an access control method, and a program.

The user may want to browse the Web content being browsed on a certain terminal (hereinafter referred to as the first terminal) on another terminal (hereinafter referred to as the second terminal). For example, when you want to browse on a terminal with a large screen such as a PC (Personal Computer) or a TV, etc. Usually, in such a case, the URL (Uniform Resource Locator) of the Web Web content that you are browsing on the first terminal It is necessary to input to two terminals, but the operation to input the URL is cumbersome and troublesome for the user. The situation of repeating may also occur.

In such a case, the convenience of the first terminal and the second terminal can be improved if the second terminal can be used to browse the contents of the web that is browsed on the first terminal without manually inputting the URL on the second terminal. .

Therefore, research and development is being conducted on technology that automatically transitions the web content to be browsed to another web content (hereinafter also referred to as redirect) when browsing web content on a certain terminal.

Patent Document 1 discloses a system for sharing Web page information via the Internet network. In this system, the terminal used by the user is equipped with a “Web browser” and “Web sharing software”, and the URL of the Web page is transmitted and received between the Web page sharing software. As a result, Web page information is shared between terminals. In addition, the IP (Internet Protocol) address of the terminal that shares Web page information is managed on the Internet.

Non-Patent Document 1 discloses a technique of providing public wireless LAN (Local Area Network) service and performing redirection. In the technique described in Non-Patent Document 1, when an access point is accessed using a Web browser, a service login page is automatically displayed. Specifically, when receiving an initial access from the terminal to the 80th port of HTTP (Hypertext Transfer Protocol) from the terminal, the access point redirects the access destination of the terminal to a Web page represented by a predetermined URL.

Japanese Patent Laid-Open No. 2001-14244

It is preferable that no special setting is required on the second terminal when the Web terminal content browsed on the first terminal can be browsed on the second terminal. When you want to continue browsing the Web content that you were browsing on the first terminal on the second terminal, it is troublesome to set up the Web browser on the second terminal or install software other than the Web browser. This is because the convenience of the terminal is lowered. For users with low IT literacy, it is difficult to install special software.

In the technique described in Patent Document 1, it is necessary to install special software called “Web shared software” on the second terminal. Therefore, special settings are required in the second terminal.

In general, the “Web content” that the user browses on the first terminal is arbitrary “Web content”. Therefore, it is necessary that the “Web access” of the second terminal can be redirected not only to a predetermined “Web content” determined in advance, but also to any “Web content”.

In the technique described in Non-Patent Document 1, the redirect destination by the access point is a “Web” page represented by a predetermined “URL”. Therefore, with the technique described in Non-Patent Document 1, it is not possible to redirect Web access of the second terminal to an arbitrary Web site that the user is browsing on the first terminal.

The present invention has been made in view of the above problems. An object of the present invention is to provide a technique capable of easily acquiring an arbitrary Web content acquired at a first terminal even at a second terminal.

The access control device provided by the present invention is communicably connected to a relay device that transfers the name resolution request received from the second terminal to another device. The access control device receives the name resolution request transferred by the relay device, and the name resolution means for returning the address of the access control device as a result of the name resolution request is different from the second terminal. An access information acquisition means for acquiring information for specifying the Web Web content accessed by the first terminal, and an access request for accessing the Web Web content from the second terminal, and in response to the access request, the second terminal Access request processing means for transmitting a response for redirecting Web access to Web content accessed by the first terminal.

The access control system provided by the present invention includes the access control device provided by the present invention and the first terminal. Further, the first terminal includes a transfer destination changing unit that changes the transfer destination to the access control device when the transfer destination of the relay device is not the access control device.

The access control method provided by the present invention is executed by the access control apparatus provided by the present invention. The access control method is different from the second terminal in the name resolution step of receiving the name resolution request transferred by the relay device and returning the address of the access control device as a result of the name resolution request. An access information acquisition step for acquiring information for identifying the Web Web content accessed by the first terminal, and an access request for accessing the Web Web content from the second terminal, and in response to the access request, the second terminal And an access request processing step for transmitting a response for redirecting the Web access to the Web content accessed by the first terminal.

The program provided by the present invention causes a computer to have a function of operating as an access control device provided by the present invention. The program causes the computer to have the function of each functional component included in the access control apparatus provided by the present invention.

According to the present invention, there is provided a technology capable of easily acquiring arbitrary Web contents acquired at the first terminal even at the second terminal.

The above-described object and other objects, features, and advantages will be further clarified by a preferred embodiment described below and the following drawings attached thereto.

It is a block diagram which illustrates the access control system concerning Embodiment 1 with the use environment. It is a block diagram which illustrates the hardware constitutions of an access control apparatus. 4 is a flowchart illustrating a flow of processing executed by the access control system according to the first embodiment. It is a figure which shows an access control system at the time of providing an access control apparatus in the inside of a 1st terminal. It is a figure which shows an access control system at the time of providing an access control apparatus in the inside of a Web server. It is a block diagram which illustrates the access control system which concerns on Embodiment 2 with the use environment. It is a block diagram which illustrates an access control system in case a transfer place change part is provided in the inside of the 1st terminal. It is a block diagram which illustrates the access control system which concerns on Embodiment 4 with the use environment. It is a figure which illustrates the information displayed by the object display part. It is a figure which shows the access control system which concerns on an Example with the use environment. It is a sequence diagram which illustrates the flow of the exchange performed between each apparatus and each terminal in an Example. It is a figure which illustrates the router information which the router information storage device stores.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In all the drawings, the same reference numerals are given to the same components, and the description will be omitted as appropriate.

[Embodiment 1]
FIG. 1 is a block diagram illustrating an access control system 6000 according to the first embodiment together with its use environment. In FIG. 1, the flow of arrows indicates the flow of information. Further, in FIG. 1, each block shows a functional unit configuration, not a hardware unit configuration.

<Prerequisites>
The access control system 6000 includes an access control device 2000 and a first terminal 4000. The access control system 6000 is used together with the relay device 3000 and the second terminal 5000. The relay device 3000 transfers the name resolution request received from the second terminal 5000 to another device.

The access control device 2000 is communicably connected to the first terminal 4000 and the second terminal 5000 via the relay device 3000. The first terminal 4000 is communicably connected to the second terminal 5000 via the relay device 3000. Here, the communication line connecting the devices and the terminals may be a wired line, a wireless line, or a communication line in which a wired line and a wireless line are mixed.

The first terminal 4000 and the second terminal 5000 are various computers. For example, the first terminal 4000 and the second terminal 5000 are a mobile phone, a tablet terminal, a television, or a PC (Personal Computer).

The first terminal 4000 and the second terminal 5000 have a function of accessing Web contents. Here, the Web content is arbitrary content such as a document, an image, or a moving image. For example, access to “Web” content is performed using software such as a browser. Hereinafter, accessing Web contents is also referred to as “performing web access”.

Normally, when performing Web access, the access destination (eg Web server) is specified by the domain name. In order to access the access destination, it is necessary to obtain a layer 3 address (eg, IP (Internet Protocol) address) corresponding to the domain name of the access destination. For this reason, the second terminal 5000 obtains a layer 3 address corresponding to the domain name of the access destination (hereinafter referred to as a name resolution request) before transmitting a request to access the Web content (hereinafter referred to as an access request). Send.

The access control device 2000 operates in an environment that satisfies the above prerequisites. The access control device 2000 includes a name resolution unit 2020, an access information acquisition unit 2040, and an access request processing unit 2060. Hereinafter, each functional component will be described.

<Name resolution unit 2020>
The name resolution unit 2020 receives the name resolution request transferred by the relay apparatus 3000, and returns the address of the access control apparatus 2000 as a result of the name resolution request.

<Access information acquisition unit 2040>
The access information acquisition unit 2040 acquires information for specifying the Web content accessed by the first terminal 4000. The information specifying the Web content is, for example, the URL of the Web content. Here, the first terminal 4000 is a device different from the second terminal 5000. Hereinafter, the information acquired by the access information acquisition unit 2040 is referred to as access information.

<Access request processing unit 2060>
The access request processing unit 2060 receives an access request from the second terminal 5000. In response to this access request, the access request processing unit 2060 transmits a response for redirecting the web access of the second terminal 5000. Specifically, this response redirects the web access of the second terminal 5000 to the web content indicated in the access information. That is, this response redirects the web access of the second terminal 5000 to the web content accessed by the first terminal 4000.

<Action and effect>
According to the access control system 6000 of the present embodiment, the web access of the second terminal 5000 is redirected to the web content accessed by the first terminal 4000. Here, the web access performed by the second terminal 5000 is automatically redirected by the access control apparatus 2000. Therefore, the user of the second terminal 5000 only needs to perform an operation for accessing any Web content on the second terminal 5000. Further, the operations performed by the second terminal 5000 are transmission of a name resolution request and access to Web content, and are processing that is automatically executed in Web access using a normal browser or the like. Therefore, the second terminal 5000 does not require special settings such as installing special software.

As described above, according to the access control system 6000, it is possible to easily acquire the arbitrary Web contents acquired at the first terminal 4000 also at the second terminal 5000. Therefore, the convenience of the second terminal 5000 is improved.

<Hardware configuration>
FIG. 2 is a block diagram illustrating a hardware configuration of the access control apparatus 2000. In FIG. 2, the access control device 2000 includes a bus 1020, a processor 1040, a memory 1060, a storage 1080, and a network adapter 1100.

The bus 1020 is a data transmission path through which the processor 1040, the memory 1060, the storage 1080, and the network adapter 1100 transmit / receive data to / from each other. The processor 1040 is an arithmetic processing device such as a CPU (Central Processing Unit) and a GPU (Graphics Processing Unit). The memory 1060 is a memory such as a RAM (Random Access Memory) or a ROM (Read Only Memory). The storage 1080 is a storage device such as a hard disk, SSD (Solid State Drive), or memory card. The storage 1080 may be a memory such as a RAM or a ROM. The network adapter 1100 is a network interface for communicating with the relay device 3000.

The name resolution module 1220 is a program for causing the access control device 2000 to have the function of the name resolution unit 2020. The processor 1040 implements the function of the name resolution unit 2020 by executing the name resolution module 1220.

The access information acquisition module 1240 is a program for causing the access control apparatus 2000 to have the function of the access information acquisition unit 2040. The processor 1040 implements the function of the access information acquisition unit 2040 by executing the access information acquisition module 1240.

The access request processing module 1260 is a program for causing the access control apparatus 2000 to have the function of the access request processing unit 2060. The processor 1040 implements the function of the access request processing unit 2060 by executing the access request processing module 1260.

For example, the processor 1040 reads the above modules onto the memory 1060 and executes them. However, the processor 1040 may execute the modules without reading them onto the memory 1060.

Storage 1080 stores the above modules.

The hardware configuration of the access control device 2000 is not limited to the configuration shown in FIG. For example, each module may be stored in the memory 1060. In this case, the access control device 2000 may not include the storage 1080.

<Process flow>
FIG. 3 is a flowchart illustrating the flow of processing executed by the access control system 6000 according to the first embodiment. In step S102, the name resolution unit 2020 receives the name resolution request transferred by the relay device 3000. In step S104, the name resolution unit 2020 returns the address of the access control apparatus 2000 as a result of the received name resolution request. In step S <b> 106, the access request processing unit 2060 receives an access request from the second terminal 5000. In step S108, the access information acquisition unit 2040 acquires access information. In step S110, the access request processing unit 2060 transmits a response for redirecting the web access of the second terminal 5000 to the web content accessed by the first terminal 4000 in response to the access request.

Hereinafter, this embodiment will be described in more detail.

<Realization Form of Access Control Device 2000>
For example, the access control device 2000 is provided inside the first terminal 4000. FIG. 4 is a diagram showing an access control system 6000 when the access control device 2000 is provided inside the first terminal 4000.

For example, the access control device 2000 may be provided in a different device from the first terminal 4000 and the second terminal 5000. For example, the access control device 2000 is provided inside a web server that provides web content to the first terminal 4000 and the second terminal 5000. FIG. 5 is a diagram showing an access control system 6000 when the access control device 2000 is provided inside the Web server 7000. The Web server 7000 may be provided in the same LAN as the first terminal 4000 or the second terminal 5000, or may be provided in a different LAN.

<Details of name resolution unit 2020>
The address of the access control device 2000 returned by the name resolution unit 2020 is a layer 3 address represented by an IP address.

The address of the access control device 2000 depends on the implementation form of the access control device 2000. For example, when the access control device 2000 is provided inside the first terminal 4000, the address of the access control device 2000 returned by the name resolution unit 2020 is the address of the first terminal 4000. For example, when the access control device 2000 is provided inside an external device such as a Web server, the address of the access control device 2000 returned by the name resolution unit 2020 is the address of this external device.

<Details of Access Information Acquisition Unit 2040>
The access information includes the URL of the Web content accessed by the first terminal 4000. The access information is stored in the first terminal 4000, for example. For example, in general, a browser stores a history of accessed web content. Therefore, the access information acquisition unit 2040 acquires the access information stored in the first terminal 4000 in this way.

Web content specified by the access information is, for example, Web content accessed by the first terminal 4000 most recently. However, the “Web content” indicated by the access information is not limited to the most recently accessed “Web content”. For example, for the first terminal 4000, it may be possible to specify which Web content information is to be indicated in the access information. For example, the first terminal 4000 displays a list of acquired Web contents so far on the display screen. Then, the user of the first terminal 4000 selects one from this list. The first terminal 4000 uses the information for identifying the selected Web content as access information.

There are various methods by which the access information acquisition unit 2040 acquires access information. For example, the access information acquisition unit 2040 accesses the first terminal 4000 and acquires access information stored in the first terminal 4000. When the access control device 2000 is provided inside the first terminal 4000, the access information acquisition unit 2040 can easily access the memory area and storage area of the first terminal 4000.

For example, the access information acquisition unit 2040 may request the first terminal 4000 to transmit access information. For example, the first terminal 4000 may have a function of spontaneously transmitting access information to the access information acquisition unit 2040. The access information acquisition unit 2040 acquires access information by receiving the access information transmitted by the first terminal 4000.

Further, when the access control device 2000 is provided inside the Web server 7000, the access information acquisition unit 2040 may be realized as follows. When receiving the access request, the access request processing unit 2060 of the Web server 7000 determines whether an access request has already been received from a device belonging to the same LAN as the terminal that transmitted the access request. If an access request is not received from a device belonging to the “LAN”, a combination of the “URL” indicated in the access request and the “ID” (eg, network address) of the “LAN” to which the terminal belongs is stored. In this case, the Web server 7000 returns a normal response to the access request. On the other hand, assume that an access request has already been received from a device belonging to the same LAN as the terminal that transmitted the access request. In this case, the access information acquisition unit 2040 reads the URL stored in association with the ID of the LAN. Then, the read URL URL is passed to the access request processing unit 2060 as access information. By doing so, the access request processing unit 2060 of the Web Web server 7000 transmits a response that redirects to the same Web Web content that the Web Web server 7000 previously provided (Web Web content provided to the first terminal 4000). To do.

<Details of Access Request Processing Unit 2060>
The access request received by the access request processing unit 2060 is, for example, an HTTP (Hypertext Transfer Protocol) request. However, the access request may be a request for accessing Web content, and is not limited to an HTTP request.

The access request processing unit 2060 has a function of interpreting a received request and a function of generating a response to the request. For example, when the access request processing unit 2060 receives a “HTTP request”, the access request processing unit 2060 has a function of interpreting an HTTP request and a function of generating a “HTTP response”. For example, these functions can be used from an existing “Web” server program. However, these functions may be separately implemented without diverting existing programs.

When the access request processing unit 2060 receives a “HTTP” request from the second terminal 5000, the access request processing unit 2060 returns a “HTTP” response indicating a redirect to the “Web” content accessed by the first terminal 4000. Here, a method for realizing redirection to a specific “Web content” by an HTTP response is a known technique. Therefore, detailed description regarding this technique is omitted.

When the access control device 2000 is provided inside the first terminal 4000, communication between the access request processing unit 2060 and the second terminal 5000 may be performed without using the relay device 3000. For example, when the first terminal 4000 and the second terminal 5000 are connected by a layer 2 switch, the second terminal 5000 transmits an access request to the access request processing unit 2060 via the layer 2 switch.

<Details of Relay Device 3000>
The relay device 3000 is a device such as a router or a home gateway. As described above, the relay device 3000 transfers the name resolution request transmitted by the second terminal 5000 to the access control device 2000. The function of forwarding the received name resolution request to another device is known, for example, by a name such as the DNS proxy function or the DNS forwarding function, and the specific implementation method is a known technique. Therefore, detailed description regarding this function is omitted.

Note that when the second terminal 5000 transmits a name resolution request by unicast transmission, the second terminal 5000 needs to be set to transmit a name resolution request to the relay device 3000. Here, when the relay device 3000 has a DNS proxy function or the like, it is a setting that is normally performed that the second terminal 5000 sets the transmission destination to which the name resolution request is transmitted as the relay device 3000, and the access control device This setting is not limited to using 2000. Therefore, it is not a special setting that is a burden on the user. Note that this setting is not necessary when the name resolution request is transmitted by multicast transmission or broadcast transmission.

The transfer destination to which the relay device 3000 transfers the name resolution request is set in the access control device 2000. Note that the relay device 3000 may have a function of transferring only the name resolution request received from the specific second terminal 5000 to the access control device 2000. In this case, the access control device 2000 stores in advance the ID of the specific second terminal 5000 that is the target of this function. The ID of the second terminal 5000 is, for example, the layer 2 address or the layer 3 address of the second terminal 5000. The layer 2 address is, for example, a MAC (Media Access Control) address. Further, the “ID” of the second terminal 5000 may be a “UUID” (Universally “Unique” Identifier) or a host name of the second terminal 5000.

[Embodiment 2]
FIG. 6 is a block diagram illustrating the access control system 6000 according to the second embodiment together with its use environment. In FIG. 6, the flow of arrows indicates the flow of information. Further, in FIG. 6, each block shows a functional unit configuration, not a hardware unit configuration. Except as described below, the access control system 6000 of the first embodiment is the same as the access control system 6000 of the first embodiment.

The access control system 6000 according to the second embodiment includes a transfer destination changing unit 6020. The transfer destination changing unit 6020 changes the transfer destination to the access control apparatus 2000 when the transfer destination to which the relay apparatus 3000 transfers the name resolution request is not the access control apparatus 2000.

For example, assume that the relay device 3000 has a function of accepting a “HTTP” request for designating a transfer destination. In this case, the transfer destination changing unit 6020 transmits a “HTTP” request for setting the transfer destination to the access control device 2000 to the relay device 3000.

For example, the transfer destination changing unit 6020 is provided in the first terminal 4000. FIG. 7 is a block diagram illustrating an access control system 6000 when the transfer destination changing unit 6020 is provided inside the first terminal 4000. However, the transfer destination changing unit 6020 may be provided in a device different from the first terminal 4000.

The transfer destination changing unit 6020 may be provided inside the access control apparatus 2000 or may be provided outside the access control apparatus 2000.

According to the present embodiment, the transfer destination can be changed to the access control apparatus 2000 even when the transfer destination to which the relay apparatus 3000 transfers the name resolution request is not set in the access control apparatus 2000 in advance. The access control system 6000 operates normally.

Note that the change of the transfer destination may be temporary. For example, the transfer destination is changed before the second terminal 5000 transmits a name resolution request to the relay device 3000, and when the relay device 3000 finishes transferring the name resolution request of the second terminal 5000, the transfer destination The setting may be restored. In this way, the period during which the access control system 6000 redirects web access can be limited to a necessary period.

There are various methods for temporarily changing the transfer destination in the relay device 3000. For example, it is assumed that the transfer destination changing unit 6020 is provided in the first terminal 4000. The user operates the first terminal 4000 and operates the transfer destination changing unit 6020 before performing the Web access using the second terminal 5000. First, the transfer destination changing unit 6020 changes the transfer destination of the relay device 3000. Then, the transfer destination changing unit 6020 detects that the name resolution unit 2020 has responded to the name resolution request transferred from the relay device 3000, and returns the transfer destination of the relay device 3000 to the transfer destination before the change. Here, the transfer destination before the change is stored in the first terminal 4000 or the relay device 3000.

[Embodiment 3]
The configuration of the access control system 6000 of the third embodiment is the same as that of the access control system 6000 of the first or second embodiment, and is represented in FIG. 1 or FIG. Except as described below, the access control system 6000 of the third embodiment is the same as the access control system 6000 of the first or second embodiment.

The name resolution unit 2020 of the third embodiment returns the address of the access control apparatus 2000 as a result of the name resolution request only when the number of name resolution requests received within the predetermined period is equal to or less than the predetermined number. For example, the predetermined number is 1.

When a plurality of second terminals 5000 perform を Web access, it is not always necessary to redirect Web access for all second terminals 5000. Therefore, in the present embodiment, within a predetermined time, the second terminal 5000 that redirects the Web access to the same Web Web content accessed by the first terminal 4000 is limited to a predetermined number or less. By doing so, it is possible to prevent the “Web access” by all the second terminals 5000 from being uniformly redirected to the same “Web content”.

Note that there are various processes performed by the name resolution unit 2020 when a plurality of name resolution requests are received within a predetermined time. For example, the name resolution unit 2020 performs normal name resolution for the domain name indicated in the name resolution request, and returns an address corresponding to the domain name. In this case, the name resolution unit 2020 has a function of operating as a DNS server. Further, for example, the name resolution unit 2020 may transmit a message prompting the second terminal 5000 that has transmitted the name resolution request to execute the “Web access” again.

In addition, the name resolution unit 2020 may transmit a message for prompting the user to execute the Web access again using the second terminal 5000 to the first terminal 4000. When the access control device 2000 is provided in the first terminal 4000, the name resolution unit 2020 may perform processing for displaying the message on the display screen of the first terminal 4000.

Note that, when the same second terminal 5000 transmits a plurality of name resolution requests, the name resolution unit 2020 may regard the plurality of name resolution requests as one. For example, it is conceivable that the user erroneously executes the “Web access” by the second terminal 5000 a plurality of times. This is the case when the execution button of the browser is pressed multiple times. In such a case, it is desirable that the “Web access” by the second terminal 5000 is redirected. If a plurality of name resolution requests transmitted by the same second terminal 5000 are regarded as one, the Web access of the second terminal 5000 in the above example can be redirected. Therefore, the convenience of the second terminal 5000 is improved.

[Embodiment 4]
FIG. 8 is a block diagram illustrating the access control system 6000 according to the fourth embodiment together with the usage environment. In FIG. 8, the flow of arrows indicates the flow of information. In FIG. 8, each block shows a functional unit configuration, not a hardware unit configuration. Except as described below, the access control system 6000 of the fourth embodiment is the same as any one of the access control systems 6000 of the first to third embodiments.

The access control system 6000 of the fourth embodiment includes a target display unit 6040 and a target selection unit 6060. The target display unit 6040 and the target selection unit 6060 are provided inside the first terminal 4000.

When the name resolution unit 2020 receives a name resolution request from each of the plurality of second terminals 5000 within a predetermined period, the target display unit 6040 displays a domain name or specific information for name resolution for each name resolution request. indicate. The identification information is information that identifies the second terminal 5000 that has transmitted the name resolution request. The information specifying the second terminal 5000 is the above-mentioned ID of the second terminal 5000.

The target selection unit 6060 accepts one or more selections of the domain name or the specific information displayed by the target display unit 6040.

The name resolution unit 2020 of the fourth embodiment returns the address of the access control apparatus 2000 as a result of the name resolution request only for the name resolution request corresponding to the domain name or specific information selected using the target selection unit 6060. To do.

FIG. 9 is a diagram illustrating information displayed by the target display unit 6040. The user uses the target selection unit 6060 to select one or more of them. The screen 10 is a display screen that the first terminal 4000 has. In FIG. 9, the target display unit 6040 displays the domain name indicated by each name resolution request on the screen 10.

Note that the target display unit 6040 may display other information corresponding to the domain name and the specific information, instead of displaying the domain name and the specific information indicated by the name resolution request as they are. For example, an alias corresponding to a domain name or specific information is displayed. Specific examples of the alias include the name of the Web site corresponding to the domain name and the name of the second terminal (eg, host name) corresponding to the specific information. These aliases are stored in a storage unit inside or outside the first terminal 4000 in association with the domain name or the second terminal ID. Then, the target display unit 6040 uses the domain name and specific information indicated in the name resolution request to acquire and display an alias corresponding to the domain name and specific information from the storage unit.

The target display unit 6040 and the target selection unit 6060 may be provided inside the access control device 2000 or may be provided outside the access control device 2000. The access control device 2000 is provided in the first terminal 4000, for example. In this case, the target display unit 6040 displays information on the display screen of the first terminal 4000.

<Action and effect>
According to the present embodiment, when the name resolution unit 2020 receives a name resolution request from each of the plurality of second terminals 5000 within a predetermined period, which second terminal 5000 is to be redirected for web access Can do. Therefore, the convenience of the second terminal 5000 is further improved.

[Example]
Specific examples of the present invention will be described. FIG. 10 is a block diagram illustrating the access control system 6000 according to the embodiment together with the usage environment.

<Assumed environment>
Access control system 6000 is configured with smartphone 400. The smartphone 400 corresponds to the first terminal 4000 in each embodiment. The web access control application 200 is a program that implements the access control device 2000. The smartphone 400 implements the function of the access control device 2000 by executing the web access control application 200. The web access control application 200 includes modules that implement the functions of a name resolution unit 2020, an access information acquisition unit 2040, an access request processing unit 2060, and a transfer destination change unit 6020.

In addition, the smartphone 400 includes a router information storage device 402. The router information storage device 402 stores router information. The router information is information used for setting the home router 300. Details regarding the router information will be described later.

Furthermore, the smartphone 400 has a touch pad 404 and a liquid crystal panel 406. The touch pad 404 is an input device, and the liquid crystal panel 406 is an output device. For example, the smartphone 400 has a touch panel that combines the functions of the touch pad 404 and the liquid crystal panel 406.

The smartphone 400 has a Web browser 408 installed. The smartphone 400 performs “Web access” using the Web browser 408.

The smartphone 400 is connected to the home router 300 via the home network 800. The home router 300 corresponds to the relay device 3000 in each embodiment. Furthermore, the smartphone 400 is connected to the PC 500 through the home network 800. The PC bag 500 corresponds to the second terminal 5000 in each embodiment. The home router 300 is connected to the server terminal 700 via the Internet 900. The server terminal 700 corresponds to the Web server 7000 described in the first embodiment.

The PC 500 has a keyboard 502, a display 504, and a Web browser 506. In addition, a Web browser 506 is installed on the PC 500. The PC 500 performs Web access using the Web browser 506.

Here, the PC 500 is set in advance so that the home router 300 is a DNS server. Generally, since a home terminal accesses the Internet via a home router, this setting is a general setting.

A Web server program 702 is installed in the server terminal 700. The server terminal 700 functions as a Web server by executing the Web server program 702. The server terminal 700 also has a content storage device 704. The content storage device 704 stores various types of data such as documents, images, and sounds as Web-based content.

It is assumed that the IP address of the home router 300 is 192.168.1.1 and the IP address of the smartphone 400 is 192.168.1.2.

Under the above assumed environment, the user is browsing the Web content 1 using the smartphone 400. The user wants to browse the same “Web content 1” on the PC 500. Hereinafter, the flow of processing executed by each device and each terminal when the user browses the “Web content 1” using the “PC” 500 will be described. FIG. 11 is a sequence diagram illustrating the flow of exchanges performed between devices and terminals in the embodiment.

First, the user activates the Web browser 408 on the smartphone 400 and performs an operation for browsing the Web content 1. Then, the smartphone 400 transmits a “HTTP” request for requesting the “Web content 1” to the server terminal 700 (step S202). The server terminal 700 transmits a “HTTP” response including the Web content 1 to the smartphone 400 (step S204).

Next, the user activates the “Web access control application 200” on the smartphone 400. Then, the Web access control application 200 acquires router information from the router information storage device 402. Then, the web access control application 200 transmits a request to the home router 300 for changing the forwarding destination to which the home router 300 forwards the DNS query to the IP address of the smartphone 400 (step S206). Details of the process of changing the transfer destination of the home router 300 will be described later.

The user starts the “Web browser 506” on the PC 500 and performs an operation to access any “Web content”. Here, it is assumed that the web browser 506 is set with web content X as a home page, and the web browser 506 automatically accesses the home page when it is activated.

The PC 500 transmits a DNS query (name resolution request) to the home router 300 in order to obtain a IP address corresponding to the domain name representing the location of the Web content X (step S208).

Here, in step S206, the forwarding destination to which the home router 300 forwards the “DNS” query has been changed to the smartphone 400. Therefore, the home router 300 transfers the received “DNS” query to the smartphone 400 (step S210).

The “Web” access control application 200 of the smartphone 400 transmits a “DNS” response including the “IP” address of the smartphone 400 to the PC 500 as a response to the received “DNS” query (step S212).

PC 500 receives the above response to the DNS query. Then, the PC 500 sends a “HTTP” request for acquiring the Web content X with the IP address of the smartphone 400 as a destination (step S214).

The Web access control application 200 of the smartphone 400 receives the above HTTP request from the PC 500. The Web access control application 200 acquires the URL (access information) of the Web content being browsed from the Web browser 408. Here, the user is browsing the Web 1 content 1 using the Web browser 408. Therefore, the Web access control application 200 acquires the URL of the Web content 1 as access information. The Web access control application 200 returns an HTTP response that redirects the Web access of the Web browser 506 to the Web content 1 to the PC 500 (step S216).

Here, it is assumed that the “URL” of “Web content 1” acquired as access information indicates the domain name of the server terminal 700, not the “IP address” of the server terminal 700. In this case, it is preferable that the Web access control application 200 converts the domain name into the IP address in the URL, and includes the converted URL in the HTTP response. This eliminates the need for the PC 500 to send a DNS query for resolving the domain name of the server terminal 700, thus speeding up the Web access of the PC 500.

The Web browser 506 interprets the received HTTP response. Then, as a result of the interpretation, the web browser 506 transmits a HTTP request for requesting the web content 1 to the server terminal 700 (step S218). The server terminal 700 transmits a “HTTP” response including the Web content 1 to the PC 500 (step S220). In this way, the web access of the web browser 506 is redirected to the web content 1. As a result, the user can view the “Web contents 1” on the PC 500.

Finally, the Web access control application 200 transmits a request for returning the setting of the home router 300 to the home router 300 (step S222). Upon receipt of this request, home router 300 restores the forwarding destination. Details of the process of restoring the transfer destination will be described later.

Through the above flow, the user can easily browse the Web Web content that was being browsed on the smartphone 400 on the PC 500.

<Details of router information>
FIG. 12 is a diagram illustrating router information stored in the router information storage device 402. Each line of the router information describes the correspondence between the name of each item (hereinafter referred to as item name) and the value of the item in the format of “item name = value”.

“Ip_addr” is the IP address of the home router 300. login_id and login_password are respectively an ID and a password for executing login on the setting screen of the home router 300. Key is the type of home router 300. “get” is a “URL” path for acquiring the setting value of the home router 300. “set” is a “URL” path for setting a setting value in the home router 300. “dns” is a key for acquiring or changing the “DNS setting” of the home router 300. “parse” is another key required when changing the “DNS” setting of the home router 300. dns_disable is a key representing a command for setting the DNS server to empty (NULL).

Here, the router of the user's house that normally makes a provider contract with a telecommunications carrier and uses the Internet is set with the address of the DNS server assigned by the provider (hereinafter referred to as the provider DNS server) as the DNS server address. Yes. Also, the primary DNS settings are often blank. Therefore, it is assumed that the setting of the DNS server of the home router 300 is the same. That is, if the primary DNS setting is blank, the home router 300 forwards the DNS query to the provider DNS server. On the other hand, when the IP address is set in the primary DNS, the home router 300 transfers the DNS query with the IP address as the destination.

<How to change transfer destination of home router 300>
The transfer destination to which the home router 300 transfers the DNS query is changed according to the following flow. First, the web access control application 200 acquires router information from the router information storage device 402. The web access control application 200 logs in to the home router 300 using the router information. Specifically, the Web access control application 200 has an IP address (192.168.1.1) of the home router 300 indicated by the router information as a destination, and includes a login ID (user) and a password (pass) indicated by the router information as parameters. Send a request. In response to this request, home router 300 returns an HTTP response including the contents of the Web content provided after login to smartphone 400.

Next, the Web access control application 200 transmits a HTTP request for acquiring the setting contents of the home router 300 to the home router 300. For this purpose, first, the Web access control application 200 extracts a value (index.cgi / item) corresponding to the item “get” from the router information. Then, the Web access control application 200 transmits an HTTP request requesting index.cgi / item IV to the home router 300. Here, index.cgi / item is the Web content that constitutes the item setting page. The in-home router 300 transmits the HTTP response including the Web content to the smartphone 400.

The Web access control application 200 extracts the setting information of the DNS server of the home router 300 from the received HTTP response and stores it in the router information storage device 402. This information is used in the process of returning the setting of the home router 300 (step S222).

The Web access control application 200 transmits an HTTP request for changing the DNS server setting of the home router 300 to the IP address (192.168.1.2) of the smartphone 400 to the home router 300. Specifically, the Web access control application 200 extracts values corresponding to the items set, dns, and parse from the router information. Then, the Web access control application 200 uses the extracted value and the IP address of the smartphone 400, and sends "DHCP_CLIENT = & SERVER_GW_GET = & DNS_PRIMARY = 192.168.1.2 & DOMAIN = & HOST_NAME = & WEB_PING = & DHCPCLIENT_DECLINE = & ADV_VIEW_OPEN = & DISABLED_CHECKBOX" to the home router 300. Send an “HTTP” request with the parameter “=”.

The home router 300 accepts the above HTTP request and changes the setting of the home router 300 according to the contents of the parameters. Here, in the HTTP request, the value of DNS_PRIMARY is 192.168.1.2 (the IP address of the smartphone 400). Therefore, the home router 300 changes the setting of the primary DNS server to “192.” 168.1.2. Then, the in-home router 300 returns a “HTTP” response including the result of updating the DNS server setting to the Web access control application 200.

Through the above flow, the forwarding destination to which the home router 300 forwards the “DNS” query is changed to the smartphone 400.

<How to restore home router 300 settings>
The Web access control application 200 transmits an HTTP request for returning the setting of the home router 300 to the original setting using the router information. Specifically, the Web access control application 200 extracts values corresponding to the items ip_addr, set, parse, and dns_disable from the router information. Then, the Web access control application 200 transmits an HTTP request including “DHCP_CLIENT = & SERVER_GW_GET = & DNS_PRIMARY = & DOMAIN = & HOST_NAME = & WEB_PING = & DHCPCLIENT_DECLINE = & ADV_VIEW_OPEN = & DISABLED_CHECKBOX = & SERVER_DNS_GET = 2” to the home router 300 as a parameter.

In this embodiment, when the setting of the home router 300 is restored, the Web access control application 200 does not need to set the IP address of the provider DNS server for the home router 300. However, depending on the type of router, when returning the home router 300 to the original setting, the Web access control application 200 needs to set the IP address of the provider DNS server for the home router 300. In this case, for example, the Web access control application 200 manages the provider IP by adding the IP address of the DNS server to the router information or describing it in a separately generated file.

As mentioned above, although embodiment of this invention was described with reference to drawings, these are illustrations of this invention, The combination of the said embodiment and various structures other than the said embodiment can also be employ | adopted.

Hereinafter, examples of the reference form will be added.
1. An access control device communicably connected to a relay device that transfers a name resolution request received from a second terminal to another device,
Name resolution means for receiving the name resolution request transferred by the relay device and returning the address of the access control device as a result of the name resolution request;
An access information acquisition means for acquiring information for identifying Web content accessed by a first terminal different from the second terminal;
An access request for receiving an access request for accessing web content from the second terminal and transmitting a response for redirecting web access of the second terminal to the web content accessed by the first terminal in response to the access request Processing means;
An access control device.
2. 1. Transfer destination changing means for changing the transfer destination to the access control device when the transfer destination of the relay device is not the access control device. The access control device described in 1.
3. The name resolution means returns the address of the access control device as a result of the name resolution request only when the number of the name resolution requests received within a predetermined period is equal to or less than the predetermined number. Or 2. The access control device described in 1.
4). When the name resolution means receives the name resolution request from each of the plurality of second terminals within a predetermined period, the name resolution target domain name or the name resolution request is transmitted for each name resolution request. Target display means for displaying specific information for specifying the first terminal;
Object selection means for accepting selection of one or more of the domain name or the specific information displayed by the object display means,
The name resolution means returns the address of the access control apparatus as a result of the name resolution request only for the name resolution request corresponding to the domain name or the specific information selected using the target selection means. ,
1. Or 2. The access control device described in 1.
5. The access control apparatus is provided in the first terminal. To 4. The access control apparatus as described in any one.
6). The access control apparatus is provided in a web server that provides web content accessed by the first terminal. To 4. The access control apparatus as described in any one.
7). 1. Or 2. An access control system comprising the access control device according to claim 1 and the first terminal,
The access control system according to claim 1, wherein the first terminal includes a transfer destination changing unit that changes the transfer destination to the access control device when the transfer destination of the relay device is not the access control device.
8). The first terminal is
When the name resolution means receives the name resolution request from each of the plurality of second terminals within a predetermined period, the name resolution target domain name or the name resolution request is transmitted for each name resolution request. Target display means for displaying specific information for specifying the first terminal;
Object selection means for accepting selection of one or more of the domain name or the specific information displayed by the object display means,
The name resolution means returns the address of the access control device as a result of the name resolution request only for the name resolution request corresponding to the domain name or the specific information selected using the target selection means. ,
The access control system according to claim 7.
9. An access control method executed by an access control apparatus communicably connected to a relay apparatus that transfers a name resolution request received from a second terminal to another apparatus,
A name resolution step of receiving the name resolution request transferred by the relay device and returning an address of the access control device as a result of the name resolution request;
An access information acquisition step of acquiring information for identifying Web content accessed by a first terminal different from the second terminal;
An access request for receiving an access request for accessing web content from the second terminal and transmitting a response for redirecting web access of the second terminal to the web content accessed by the first terminal in response to the access request Processing steps;
An access control method.
10. 8. a transfer destination changing step of changing the transfer destination to the control method when the transfer destination of the relay device is not the control method; The access control method described in 1.
11. 8. The name resolution step returns an address of the control method as a result of the name resolution request only when the number of the name resolution requests received within a predetermined period is equal to or less than the predetermined number. Or 10. The access control method described in 1.
12 When the name resolution step receives the name resolution request from each of the plurality of second terminals within a predetermined period, the name resolution target domain name or the name resolution request is transmitted for each name resolution request. A target display step for displaying specific information for identifying the first terminal;
A target selection step for accepting selection of one or more of the domain name or the specific information displayed by the target display step,
The name resolution step returns an address of the control method as a result of the name resolution request only for the name resolution request corresponding to the domain name or the specific information selected using the target selection step.
9. Or 10. The access control method described in 1.
13. 8. The access control device is provided in the first terminal. To 12. The access control method according to any one of the above.
14 8. The access control device is provided in a web server that provides web content accessed by the first terminal. To 12. The access control method according to any one of the above.
15. A system control method for controlling an access control system comprising: a first terminal; and an access control apparatus communicatively connected to a relay apparatus that transfers a name resolution request received from the second terminal to another apparatus. ,
A transfer destination changing step in which the first terminal changes the transfer destination to the control method when the transfer destination of the relay device is not the control method;
A name resolution step in which the access control device receives the name resolution request transferred by the relay device and returns the address of the access control device as a result of the name resolution request;
An access information acquisition step in which the access control apparatus acquires information for identifying Web content accessed by a first terminal different from the second terminal;
The access control device receives an access request for accessing web content from the second terminal, and redirects the web access of the second terminal to the web content accessed by the first terminal in response to the access request. An access request processing step for sending a response;
A system control method comprising:
16. When the first terminal receives the name resolution request from each of the plurality of second terminals within a predetermined period in the name resolution step, for each of the name resolution requests, the domain name of the name resolution target or its name A target display step for displaying specific information for identifying the first terminal that has transmitted the solution request;
The first terminal has a target selection step of receiving selection of one or more of the domain name or the specific information displayed in the target display step;
The name resolution step returns the address of the control method as a result of the name resolution request only for the name resolution request corresponding to the domain name or the specific information selected using the target selection step.
15. A system control method according to claim 1.
17. A program for causing a computer to have a function of operating as an access control device communicably connected to a relay device that transfers a name resolution request received from a second terminal to another device,
A name resolution function for receiving the name resolution request transferred by the relay device and returning the address of the access control device as a result of the name resolution request;
An access information acquisition function for acquiring information for identifying Web content accessed by a first terminal different from the second terminal;
An access request for receiving an access request for accessing web content from the second terminal and transmitting a response for redirecting web access of the second terminal to the web content accessed by the first terminal in response to the access request Processing functions,
A program to give
18. 16. The computer is provided with a transfer destination changing function for changing the transfer destination to the program when the transfer destination of the relay device is not the program. The program described in.
19. The name resolution function returns the address of the program as a result of the name resolution request only when the number of name resolution requests received within a predetermined period is equal to or less than the predetermined number. Or 18. The program described in.
20. In the computer,
When the name resolution function receives the name resolution request from each of the plurality of second terminals within a predetermined period, the name resolution target domain name or the name resolution request is transmitted for each name resolution request. A target display function for displaying specific information for identifying the first terminal;
A target selection function for receiving selection of one or more of the domain name or the specific information displayed by the target display function,
The name resolution function returns the address of the program as a result of the name resolution request only for the name resolution request corresponding to the domain name or the specific information selected using the target selection function.
17. Or 18. The program described in.
21. 16. The access control device is provided in the first terminal. To 20. The program as described in any one.
22. 16. The access control device is provided in a web server that provides web content accessed by the first terminal. To 20. The program as described in any one.
23. A system control program for controlling an access control system having a first terminal and an access control apparatus communicably connected to a relay apparatus that transfers a name resolution request received from a second terminal to another apparatus. ,
The first terminal is provided with a transfer destination changing function for changing the transfer destination to the program when the transfer destination of the relay device is not the program,
In the access control device,
A name resolution function for receiving the name resolution request transferred by the relay device and returning the address of the access control device as a result of the name resolution request;
An access information acquisition function for acquiring information for identifying Web content accessed by a first terminal different from the second terminal;
The access control device receives an access request for accessing web content from the second terminal, and redirects the web access of the second terminal to the web content accessed by the first terminal in response to the access request. An access request processing function for sending a response;
System control program to have
24. In the first terminal,
When the name resolution function receives the name resolution request from each of the plurality of second terminals within a predetermined period, the name resolution target domain name or the name resolution request is transmitted for each name resolution request. A target display function for displaying specific information for identifying the first terminal;
A target selection function for receiving selection of one or more of the domain name or the specific information displayed by the target display function,
The name resolution function returns the address of the program as a result of the name resolution request only for the name resolution request corresponding to the domain name or the specific information selected using the target selection function.
23. System control program described in 1.

This application claims priority based on Japanese Patent Application No. 2013-237612 filed on November 18, 2013, the entire disclosure of which is incorporated herein.

Claims

An access control device communicably connected to a relay device that transfers a name resolution request received from a second terminal to another device,
Name resolution means for receiving the name resolution request transferred by the relay device and returning the address of the access control device as a result of the name resolution request;
An access information acquisition means for acquiring information for identifying Web content accessed by a first terminal different from the second terminal;
An access request for receiving an access request for accessing web content from the second terminal and transmitting a response for redirecting web access of the second terminal to the web content accessed by the first terminal in response to the access request Processing means;
An access control device.
The access control apparatus according to claim 1, further comprising a transfer destination changing unit that changes the transfer destination to the access control apparatus when the transfer destination of the relay apparatus is not the access control apparatus.
The name resolution means returns the address of the access control device as a result of the name resolution request only when the number of the name resolution requests received within a predetermined period is equal to or less than the predetermined number. The access control device described.
When the name resolution means receives the name resolution request from each of the plurality of second terminals within a predetermined period, the name resolution target domain name or the name resolution request is transmitted for each name resolution request. Target display means for displaying specific information for specifying the first terminal;
Object selection means for accepting selection of one or more of the domain name or the specific information displayed by the object display means,
The name resolution means returns the address of the access control apparatus as a result of the name resolution request only for the name resolution request corresponding to the domain name or the specific information selected using the target selection means. ,
The access control apparatus according to claim 1 or 2.
The access control device according to any one of claims 1 to 4, wherein the access control device is provided in the first terminal.
The access control apparatus according to any one of claims 1 to 4, wherein the access control apparatus is provided in a Web server that provides Web content accessed by the first terminal.
An access control system comprising the access control device according to claim 1 or 2 and the first terminal,
The access control system according to claim 1, wherein the first terminal includes a transfer destination changing unit that changes the transfer destination to the access control device when the transfer destination of the relay device is not the access control device.
The first terminal is
When the name resolution means receives the name resolution request from each of the plurality of second terminals within a predetermined period, the name resolution target domain name or the name resolution request is transmitted for each name resolution request. Target display means for displaying specific information for specifying the first terminal;
Object selection means for accepting selection of one or more of the domain name or the specific information displayed by the object display means,
The name resolution means returns the address of the access control device as a result of the name resolution request only for the name resolution request corresponding to the domain name or the specific information selected using the target selection means. ,
The access control system according to claim 7.
An access control method executed by an access control apparatus communicably connected to a relay apparatus that transfers a name resolution request received from a second terminal to another apparatus,
A name resolution step of receiving the name resolution request transferred by the relay device and returning an address of the access control device as a result of the name resolution request;
An access information acquisition step of acquiring information for identifying Web content accessed by a first terminal different from the second terminal;
An access request for receiving an access request for accessing web content from the second terminal and transmitting a response for redirecting web access of the second terminal to the web content accessed by the first terminal in response to the access request Processing steps;
An access control method.
A program for causing a computer to have a function of operating as an access control device communicably connected to a relay device that transfers a name resolution request received from a second terminal to another device,
A name resolution function for receiving the name resolution request transferred by the relay device and returning the address of the access control device as a result of the name resolution request;
An access information acquisition function for acquiring information for identifying Web content accessed by a first terminal different from the second terminal;
An access request for receiving an access request for accessing web content from the second terminal and transmitting a response for redirecting web access of the second terminal to the web content accessed by the first terminal in response to the access request Processing functions,
A program to give