WO2018123582A1 - Procédé d'affichage, programme d'affichage et système d'affichage - Google Patents

Procédé d'affichage, programme d'affichage et système d'affichage Download PDF

Info

Publication number
WO2018123582A1
WO2018123582A1 PCT/JP2017/044659 JP2017044659W WO2018123582A1 WO 2018123582 A1 WO2018123582 A1 WO 2018123582A1 JP 2017044659 W JP2017044659 W JP 2017044659W WO 2018123582 A1 WO2018123582 A1 WO 2018123582A1
Authority
WO
WIPO (PCT)
Prior art keywords
image
information
display
specific
target network
Prior art date
Application number
PCT/JP2017/044659
Other languages
English (en)
Japanese (ja)
Inventor
昭人 長嶋
諒 野條
Original Assignee
パナソニックＩｐマネジメント株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by パナソニックＩｐマネジメント株式会社 filed Critical パナソニックＩｐマネジメント株式会社
Publication of WO2018123582A1 publication Critical patent/WO2018123582A1/fr

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F13/00—Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]

Definitions

  • the present disclosure relates to a display method (Displaying Method), a display program (Displaying Program), and a display system (Displaying System), and more particularly, to a display method, a display program, and a display system for displaying a detected specific device.
  • Patent Document 1 discloses an unauthorized device connection position specifying device (connection position specifying method).
  • connection position specifying method When detecting an unauthorized connection of a device to a network, the connection position specifying device of Patent Document 1 specifies a terminal network device with a remote management function and a port to which the unauthorized connection device is connected. Then, the connection position specifying device of Patent Document 1 outputs information on a network device with a remote management function to which an illegally connected device is connected and its port.
  • Patent Document 1 simply outputs information on a network device with a remote management function to which an illegally connected device is connected and its port. Therefore, if the user does not fully understand the network to be monitored, it is difficult to quickly cope with detection of a specific device such as an illegally connected device.
  • the problem of the present disclosure is to provide a display method, a display program, and a display system that allow a user to quickly cope with detection of a specific device.
  • the display method includes a first acquisition step, a second acquisition step, and a display step.
  • the first acquisition step is a step of acquiring first information indicating a physical topology of a target network.
  • the second acquisition step is a step of acquiring second information indicating a position of the specific device detected in the target network on the target network.
  • the display step is a step of displaying the first image based on the first information and the second information and displaying the second image in association with the first image.
  • the first image shows a specific part to which at least the specific device is connected in the physical topology of the target network.
  • the second image shows the specific device.
  • the display program is a program that, when executed by a computer system, causes the computer system to execute a first acquisition step, a second acquisition step, and a display step.
  • the first acquisition step is a step of acquiring first information indicating a physical topology of a target network.
  • the second acquisition step is a step of acquiring second information indicating a position of the specific device detected in the target network on the target network.
  • the display step is a step of displaying the first image based on the first information and the second information and displaying the second image in association with the first image.
  • the first image shows a specific part to which at least the specific device is connected in the physical topology of the target network.
  • the second image shows the specific device.
  • the display system includes a first acquisition unit, a second acquisition unit, and a display unit.
  • the first acquisition unit is configured to acquire first information indicating a physical topology of a target network.
  • the second acquisition unit is configured to acquire second information indicating a position of the specific device detected in the target network on the target network.
  • the display unit is configured to display the first image based on the first information and the second information, and to display the second image in association with the first image.
  • the first image shows a specific part to which at least the specific device is connected in the physical topology of the target network.
  • the second image shows the specific device.
  • FIG. 1 is a schematic diagram illustrating a configuration of an entire system including a display system according to an embodiment of the present disclosure.
  • FIG. 2 is a diagram showing an example (normal screen) of a display screen displayed on the image display device by the display system.
  • FIG. 3 is a diagram showing an example (normal screen) of the display screen.
  • FIG. 4 is a diagram showing an example of the display screen (unauthorized terminal display screen).
  • FIG. 5 is a diagram showing an example of the display screen (abnormal terminal display screen).
  • FIG. 1 shows an overall system including a display system 10 of the present embodiment.
  • the display system 10 functions as a viewer for displaying the state of the target network 100.
  • the network 100 includes a plurality of management target devices 20, a controller 30, and a detection system 40, as shown in FIG.
  • the plurality of managed devices 20 include a plurality of connection devices 21.
  • the plurality of management target devices 20 may include one or more terminals 22.
  • the management target device is a so-called node.
  • a node is a device that is a component of a network.
  • the connected device 21 is a device that performs data transfer (data transfer between the management target devices 20 connected to the connected device 21).
  • the connection device 21 is, for example, a switching hub (also abbreviated as a switch). In particular, the connection device 21 is an L2 switching hub.
  • the connected device 21 performs data transfer according to the content of the transfer process.
  • the connection device 21 has a plurality of ports.
  • the connection device 21 has a function of creating a correspondence table indicating a correspondence relationship between a port and identification information (for example, a MAC address) of a device connected to the port for each of a plurality of ports.
  • This function can be realized, for example, by a technique for creating a forwarding database (FDB). Since the technique for creating the forwarding database is well known, detailed description thereof will be omitted.
  • the terminal 22 is, for example, a personal computer or a smartphone.
  • the detection system 40 is directly or indirectly connected to the plurality of management target devices 20.
  • the detection system 40 determines whether a device other than the management target device 20 of the network 100 is connected to the network 100.
  • Devices other than the management target device 20 of the network 100 are devices unknown to the controller 30 (devices not registered in the controller 30).
  • an apparatus unknown to the controller 30 is referred to as an “illegal terminal”.
  • the detection system 40 has a function of detecting unauthorized terminals on the network 100.
  • the detection system 40 outputs unauthorized terminal detection information including identification information (for example, a MAC address) of the unauthorized terminal to the controller 30.
  • the controller 30 is directly or indirectly connected to the plurality of management target devices 20.
  • the controller 30 is configured by a server, for example.
  • the controller 30 is configured to perform path control by defining the contents of the transfer processing of the plurality of management target devices 20 (particularly the connected devices 21). That is, the controller 30 manages the plurality of connected devices 21 by using a software defined network (Software Defined Network: SDN) technology.
  • SDN Software Defined Network
  • the controller 30 has a function of acquiring a correspondence table from the plurality of connected devices 21 and generating information (first information) indicating the physical topology of the network 100. Thereby, the controller 30 can grasp the management target device 20 existing on the network 100.
  • the controller 30 makes an abnormality monitoring request to the management target device 20 on the network 100.
  • the managed device 20 on the network 100 responds to the abnormality monitoring request in response to the abnormality monitoring request.
  • the controller 30 can determine whether an abnormality has occurred in the management target device 20 on the network 100 based on whether or not an abnormality monitoring request response has been obtained in response to the abnormality monitoring request.
  • the abnormality may be a failure or a virus infection, for example.
  • the managed device 20 in which an abnormality has occurred is referred to as an “abnormal terminal”.
  • the controller 30 has a function of detecting an abnormal terminal on the network 100.
  • the controller 30 detects the abnormal terminal, the controller 30 refers to the correspondence table of the plurality of connected devices 21 and identifies the position of the abnormal terminal on the network 100. Then, the controller 30 outputs abnormal terminal position information including information indicating the position of the abnormal terminal on the network 100 to the display system 10. At this time, the controller 30 outputs the first information to the display system 10 together with the abnormal terminal position information. Since the function of detecting an abnormal terminal on the network 100 can be realized by a conventionally known technique, detailed description thereof is omitted.
  • the controller 30 when receiving the unauthorized terminal detection information from the detection system 40, the controller 30 refers to the correspondence table acquired from the plurality of connected devices 21 and identifies the position of the unauthorized terminal. Specifically, the controller 30 refers to the correspondence table acquired from the plurality of connected devices 21 and identifies the port associated with the identification information (for example, MAC address) of the unauthorized terminal. Then, the controller 30 determines that the connection device 21 having the specified port is the management target device 20 on the network 100 to which the unauthorized terminal is connected. The controller 30 sets the position of the management target device 20 on the network 100 to which the unauthorized terminal is connected as the unauthorized terminal position. Then, the controller 30 outputs unauthorized terminal position information including information indicating the position of the unauthorized terminal on the network 100 to the display system 10. At this time, the controller 30 outputs the first information to the display system 10 together with the unauthorized terminal position information.
  • the method for specifying the position of the unauthorized terminal on the network 100 is not limited to the above example, and may be a conventionally known method
  • the display system 10 includes an image display device 11, an input device 12, a communication device 13, a storage device 14, and a processing device 15.
  • the image display device 11 is a thin display device such as a liquid crystal display or an organic EL display.
  • the input device 12 is a user interface.
  • the input device 12 is, for example, a pointing device.
  • the input device 12 may be a touch pad installed on the display surface of the image display device 11. That is, the image display device 11 and the input device 12 may constitute a touch panel.
  • the communication device 13 is a communication interface for communicating with the controller 30.
  • the communication method between the communication device 13 and the controller 30 may be a wireless method or a wired method.
  • the storage device 14 is used for storing information necessary for processing in the processing device 15.
  • the storage device 14 is ROM (Read Only Memory), RAM (Random Access Memory), EEPROM (Electrically Erasable Programmable Read Only Memory), or the like.
  • the plurality of management target devices 20 of the target network 100 are classified into one or more groups. Therefore, the storage device 14 stores a table indicating the correspondence between the management target device 20 and the group.
  • the group can be created based on the installation location of the management target device 20, for example.
  • the installation location is, for example, a region (the whole earth, a specific region of the earth, a country, a prefecture, etc.), a building in the region (office building, factory, commercial facility, house, etc.), a floor in the building (1F, 2F, etc.) Or a room (conference room, server room, etc.) on the floor.
  • the group may include another group as a subgroup.
  • a group whose installation location is a region may include a group whose installation location is a building in the region as a subgroup.
  • the installation location is associated with a map image of the installation location.
  • the storage device 14 stores a plurality of map images respectively corresponding to a plurality of installation locations, and stores a table indicating a correspondence relationship between the installation locations and the map images.
  • the map image is, for example, an image such as a map or a sketch.
  • Each of the plurality of management target devices 20 is associated with position information. Therefore, the storage device 14 stores a plurality of pieces of position information respectively corresponding to the plurality of management target devices 20, and stores a table indicating a correspondence relationship between the management target device 20 and the position information.
  • the position information is information indicating the position on the map image of the installation location corresponding to the group to which the management target device 20 belongs. Thereby, the image showing the management target device 20 can be displayed on the map image at a position corresponding to the actual position.
  • the processing device 15 is configured to control the entire display system 10, that is, to control the image display device 11, the input device 12, the communication device 13, and the storage device 14.
  • the processing device 15 is realized, for example, as a main hardware configuration of a device including a processor that executes a program.
  • the device including the processor may be a micro processing unit including an MPU (micro processing unit) in which a semiconductor memory is separately provided, or a micro controller stored in a single package together with the semiconductor memory.
  • the program may be provided by a computer-readable recording medium that is a recording medium such as an optical recording disk or a recording medium including a flash memory.
  • the program may be provided through a telecommunication line such as the Internet or a mobile communication network.
  • the program provided by the recording medium or the telecommunication line is preferably stored in a rewritable nonvolatile memory (for example, EEPROM).
  • the processing device 15 includes a first acquisition unit 151, a second acquisition unit 152, and a display unit 153.
  • the first acquisition unit 151 is configured to acquire first information indicating the physical topology of the target network 100. For example, the first acquisition unit 151 acquires the first information from the controller 30 by communicating with the controller 30. The first acquisition unit 151 may periodically acquire the first information from the controller 30, or may receive the first information from the controller 30 when receiving the unauthorized terminal position information or the abnormal terminal position information from the controller 30. Information may be acquired.
  • the second acquisition unit 152 is configured to acquire second information indicating the position of the specific device detected in the target network 100 on the target network 100.
  • the second acquisition unit 152 acquires unauthorized terminal position information and abnormal terminal position information from the controller 30 by communicating with the controller 30.
  • the unauthorized terminal position information includes information indicating the position of the unauthorized terminal on the network 100
  • the abnormal terminal position information includes information indicating the position of the abnormal terminal on the network 100.
  • the specific device includes an unauthorized terminal and an abnormal terminal.
  • the second information includes information indicating the position of the unauthorized terminal on the network 100 and information indicating the position of the abnormal terminal on the network 100.
  • the second acquisition unit 152 acquires the second information by receiving the illegal terminal position information and the abnormal terminal position information that are spontaneously output from the controller 30. Note that the second acquisition unit 152 may request the controller 30 for the second information.
  • the processing device 15 acquires the first information and the second information from the controller 30. Therefore, the display system 10 does not need to obtain the first information and the second information from different devices. Therefore, the configuration of the display system 10 can be simplified.
  • the display unit 153 displays a display screen that displays the state of the target network 100 on the image display device 11.
  • the display screen includes, for example, normal screens P10 and P20 (see FIGS. 2 and 3), an unauthorized terminal display screen P30 (see FIG. 4), and an abnormal terminal display screen P40 (see FIG. 5). Below, the display screen which the display part 153 displays on the image display apparatus 11 is demonstrated.
  • the normal screens P ⁇ b> 10 and P ⁇ b> 20 are screens that the display unit 153 displays on the image display device 11 at the normal time when there is no abnormality in the target network 100.
  • the normal screens P10 and P20 include a list B10 and a window W10 as shown in FIGS. 2 and 3, the reference numerals and the accompanying items (indicator lines, arrows, etc.) are described for explaining the normal screens P10 and P20, and are included in the normal screens P10 and P20 themselves. I don't mean. This also applies to FIGS. 4 and 5.
  • the list B10 is prepared for selecting a group to be displayed in the window W10.
  • the display unit 153 displays one or more groups in which the plurality of management target devices 20 are classified in the list B10.
  • the list B10 includes “ALL NODE”, “Tokyo head office”, “1F”, “server room”, “2F”, “3F”, “Osaka branch office”, “12F”, “Fukuoka branch office”. ”,“ 7F ”,“ 8F ”, and“ American branch ”.
  • List B10 also displays the relationship between groups. For example, from the list B10, the user knows that the “2F” group is a subgroup of the “Tokyo headquarters” group and the “Tokyo headquarters” group is a subgroup of the “ALL NODE” group. be able to.
  • the names of the plurality of subgroups may be the same when the plurality of subgroups are included in another group.
  • Window W10 is prepared for displaying the physical topology of the group selected in list B10.
  • the display unit 153 displays an image (topology image) indicating the physical topology of the group selected in the list B10 in the window W10.
  • the topology image includes images of one or more management target devices 20 included in the selected group.
  • the two or more management target devices 20 are connected by a line so as to indicate the connection relationship therebetween.
  • the display unit 153 displays a map image of the installation location associated with the group selected in the list B10 in the window W10.
  • the display unit 153 associates and displays an image (topology image) indicating the physical topology of the group selected in the list B10 with the map image of the installation location corresponding to the group selected in the list B10 among the plurality of installation locations. . Specifically, the display unit 153 displays the topology image of the selected group so as to overlap the map image of the installation location corresponding to the selected group. In this case, the display unit 153 refers to the position information of the management target device 20 and displays the image of the management target device 20 at a position on the map image indicated by the position information of the management target device 20.
  • the display unit 153 displays the topology image G10 of the “ALL NODE” group on the window W10 so as to overlap the map image M10 of the installation location corresponding to the selected “ALL NODE” group.
  • the topology image G10 includes images I10, I11, I12 representing the three managed devices 20 (connected devices 21 in FIG. 2), and lines L10, L11 indicating the connection relationship of the three managed devices 20.
  • image I10 is connected to image I11 by line L10
  • image I11 is connected to image I12 by line L11. Thereby, the user can know the physical topology of the group of “ALL NODE”.
  • the user can know that the management target device 20 represented by the image I10 is connected to the management target device 20 represented by the image I11. Further, the user can know that the management target device 20 represented by the image I11 is connected to the management target device 20 represented by the image I12.
  • an image (for example, the images I10, I11, and I12) showing the management target device 20 includes a graphic corresponding to the type of the management target device 20 and a text for identifying the management target device 20 (attached to the management target device 20). Name).
  • the images I10, I11, and I12 correspond to the connected device 21, and therefore the graphics of the images I10, I11, and I12 represent the connected devices (for example, switches).
  • the display unit 153 displays the images I10, I11, and I12 of the management target device 20 at positions on the map image M10 indicated by the corresponding position information. Thereby, the user can know the actual position in the installation place of the management target apparatus 20 represented by the images I10, I11, and I12.
  • the “2F” group included in the “Tokyo head office” group is selected in the list B10.
  • the display unit 153 displays the topology image G20 of the “2F” group on the window W10 so as to overlap the map image M20 of the installation location corresponding to the selected “2F” group.
  • the topology image G20 shows the connection relationship between the images I20, I21, I22, I23, and I24 representing the five managed devices 20 (three connected devices 21 and two terminals 22 in FIG. 3) and the five managed devices 20. And lines L20, L21, L22, and L23 shown.
  • the image I20 is connected to the image I21 by the line L20, and the image I21 is connected to the image I22 by the line L21.
  • the image I21 is connected to the images I23 and I24 by lines L22 and L23, respectively. Accordingly, the user can know the physical topology of the “2F” group.
  • the image (for example, the images I20, I21, I22, I23, and I24) showing the management target device 20 includes a graphic corresponding to the type of the management target device 20.
  • the graphics of the images I20, I21, and I22 represent connected devices (for example, switches).
  • the graphics of the images I23 and I24 represent a terminal (for example, a personal computer).
  • the display unit 153 displays the images I20, I21, I22, I23, and I24 of the management target device 20 at positions on the map image M20 indicated by the corresponding position information. Thereby, the user can know the actual position at the installation location of the management target device 20 represented by the images I20, I21, I22, I23, and I24.
  • the unauthorized terminal display screen P30 is a screen that the display unit 153 displays on the image display device 11 when an unauthorized terminal is detected. For example, when receiving the unauthorized terminal position information from the controller 30, the display unit 153 starts processing for displaying the unauthorized terminal display screen P30. As shown in FIG. 4, the unauthorized terminal display screen P30 includes a list B10 and a window W10, like the normal screens P10 and P20.
  • the display unit 153 displays the first image on the window W10 of the unauthorized terminal display screen P30 based on the first information and the second information, and displays the second image in association with the first image.
  • the first information is information indicating the physical topology of the target network 100 as described above.
  • the second information is information indicating the position on the target network 100 of the specific device (in this case, an unauthorized terminal) detected in the target network 100.
  • the first image is an image showing a specific part to which at least a specific device (illegal terminal) is connected in the physical topology of the target network 100.
  • the specific portion is a physical topology of a specific group to which the managed device 20 to which the specific device (illegal terminal) is connected belongs among one or more groups.
  • the display unit 153 displays the physical topology of the group to which the managed device 20 to which the specific device is connected belongs. Therefore, the user can easily grasp the location of the management target device 20 to which the specific device is connected. Therefore, the user can deal with the detection of the specific device more quickly.
  • the display unit 153 connects the second image indicating the specific device and the image of the management target device 20 to which the specific device (illegal terminal) is connected with a line. Thereby, the display unit 153 displays the second image in association with the first image.
  • the display unit 153 displays an image G20 indicating the physical topology of the group “2F” in the window W10 as an image (first image) indicating the specific portion.
  • the list B10 is in a state where the group “2F” which is the specific group is selected.
  • the second image is an image showing the specific device.
  • the display unit 153 displays the image G ⁇ b> 21 as an image (second image) indicating the specific device.
  • the image G21 is prepared according to the type of specific device.
  • the image G21 includes a graphic representing an illegal terminal prepared in advance.
  • the display unit 153 displays the image G21 so as to be distinguishable from the images I20 to I24 of any of the management target devices 20 included in the image G20. Thereby, the user can easily distinguish the second image G21 from the images I20 to I24 of the management target device 20 of the first image G20.
  • the image G21 is shaded with dots unlike the images I20 to I24.
  • the image G21 may be different from any of the images I20 to I24 in figure, color scheme, and display mode.
  • the display unit 153 may distinguish from the images I20 to I24 by blinking only the image G21.
  • the display unit 153 is connected to the image (second image) G21 indicating the specific device and the specific device (illegal terminal).
  • the image I21 of the managed device 20 being connected is connected by a line L24.
  • the display unit 153 displays the second image G21 in association with the first image G20.
  • the display unit 153 displays the first image and the second image in association with the map image of the installation location corresponding to the specific group among the one or more installation locations. Specifically, the display unit 153 displays the topology image of the specific group so as to overlap the map image of the installation location corresponding to the specific group. This makes it easier for the user to grasp the location of the management target device 20 to which the specific device is connected. Therefore, the user can deal with the detection of the specific device more quickly.
  • the display unit 153 refers to the position information of the management target device 20, and displays the image of the management target device 20 included in the specific part (physical topology of the specific group) with the position information of the management target device 20. Displayed on the map image.
  • the group “2F” is a specific group. Therefore, the display unit 153 displays the map image M20 of the installation location corresponding to the “2F” group. Further, the display unit 153 displays the images I20, I21, I22, I23, and I24 of the management target device 20 included in the “2F” group at positions on the map image M20 indicated by the corresponding position information. Accordingly, the user can directly know the location of the management target device 20 to which the specific device is connected. Therefore, the user can deal with the detection of the specific device more quickly.
  • the display unit 153 displays an image G21 representing the specific device near the image I21 of the management target device 20 to which the specific device (illegal terminal) is connected on the map image M20. To place. Thereby, it becomes easy to find the image I21 of the management target device 20 to which the specific device (illegal terminal) is connected on the map image M20, and the user can easily cope with the detection of the specific device.
  • the abnormal terminal display screen P40 is a screen that the display unit 153 displays on the image display device 11 when an abnormal terminal is detected. For example, when receiving the abnormal terminal position information from the controller 30, the display unit 153 starts processing for displaying the abnormal terminal display screen P40. As shown in FIG. 5, the abnormal terminal display screen P40 includes a list B10 and a window W10 as in the normal screens P10 and P20.
  • the display unit 153 displays the first image on the window W10 of the abnormal terminal display screen P40 based on the first information and the second information, and displays the second image in association with the first image.
  • the first information is information indicating the physical topology of the target network 100 as described above.
  • the second information is information indicating the position on the target network 100 of the specific device (in this case, an abnormal terminal) detected in the target network 100.
  • the first image is an image showing a specific portion to which at least a specific device (abnormal terminal) is connected in the physical topology of the target network 100.
  • the specific portion is a physical topology of a specific group to which the managed device 20 to which the specific device (abnormal terminal) is connected belongs among one or more groups.
  • the display unit 153 replaces the image of the management target device 20 determined to be an abnormal terminal included in the first image with a second image representing the abnormal terminal. Thereby, the display unit 153 displays the second image in association with the first image.
  • the display unit 153 displays an image G20 indicating the physical topology of the group “2F” in the window W10 as an image (first image) indicating the specific portion.
  • the list B10 is in a state where the group “2F” which is the specific group is selected.
  • the second image is an image showing the specific device.
  • the display unit 153 displays the image G22 as an image (second image) indicating the specific device.
  • the image G22 is prepared according to the type of specific device.
  • the display unit 153 displays the image G22 so that it can be distinguished from the images I20 to I23 of any management target device 20 included in the image G20. Accordingly, the user can easily distinguish the second image G22 from the images I20 to I23 of the management target device 20 of the first image G20.
  • the image G22 is shaded with dots.
  • the image G22 may be different from any of the images I20 to I23 in figure, color scheme, and display mode.
  • the image G22 may include a graphic representing an abnormal terminal prepared in advance.
  • the image G22 has the same image as the image of the management target device 20 determined to be an abnormal terminal, but preferably has a different color scheme and display mode. In this case, it becomes easier to visually understand that an abnormality has occurred in the management target device 20.
  • the display unit 153 may distinguish from the images I20 to I23 by blinking only the image G22.
  • the display unit 153 determines that the management target device 20 is determined as the abnormal terminal. Is replaced with the second image G22 representing the abnormal terminal. Thereby, the display unit 153 displays the second image G22 in association with the first image G20.
  • the display unit 153 displays the first image and the second image in association with the map image of the installation location corresponding to the specific group among the one or more installation locations. Specifically, the display unit 153 displays the topology image of the specific group so as to overlap the map image of the installation location corresponding to the specific group. This makes it easier for the user to grasp the location of the management target device 20 to which the specific device is connected. Therefore, the user can deal with the detection of the specific device more quickly.
  • the display unit 153 refers to the position information of the management target device 20, and displays the image of the management target device 20 included in the specific part (physical topology of the specific group) with the position information of the management target device 20. Displayed on the map image.
  • the group “2F” is the specific group. Therefore, the display unit 153 displays the map image M20 of the installation location corresponding to the “2F” group.
  • the display unit 153 displays the images I20, I21, I22, and I23 of the management target device 20 included in the “2F” group at positions on the map image M20 indicated by the corresponding position information. Accordingly, the user can directly know the location of the management target device 20 to which the specific device is connected. Therefore, the user can deal with the detection of the specific device more quickly.
  • the display unit 153 replaces the image I24 of the management target device 20 determined to be an abnormal terminal with a second image G22 representing the abnormal terminal. Therefore, the position of the second image G22 is the same as the position of the image I24 on the map image M20. In other words, the display unit 153 uses the position information of the management target device 20 determined as an abnormal terminal as the position information of the abnormal terminal.
  • the display system 10 includes the first acquisition unit 151, the second acquisition unit 152, and the display unit 153.
  • the first acquisition unit 151 is configured to acquire first information indicating the physical topology of the target network 100.
  • the second acquisition unit 152 is configured to acquire second information indicating the position on the target network 100 of the specific device detected in the target network 100.
  • the display unit 153 is configured to display the first image G20 based on the first information and the second information, and to display the second images G21 and G22 in association with the first image G20.
  • the first image G20 shows a specific portion to which at least a specific device is connected in the physical topology of the target network 100.
  • the second images G21 and G22 show a specific device. Therefore, according to the display system 10, the user can quickly cope with the detection of the specific device.
  • the display system 10 of the present embodiment described above can be realized by, for example, a computer system executing a display program.
  • the display program when executed by the computer system, it causes the computer system to function as the display system 10 of the present embodiment. That is, the computer system executes a first acquisition step, a second acquisition step, and a display step.
  • the first acquisition step is a step of acquiring first information indicating the physical topology of the target network 100.
  • the second acquisition step is a step of acquiring second information indicating the position on the target network 100 of the specific device detected in the target network 100.
  • the display step is a step of displaying the first image G20 based on the first information and the second information, and displaying the second images G21 and G22 in association with the first image G20.
  • the first image G20 shows a specific portion to which at least a specific device is connected in the physical topology of the target network 100.
  • the second images G21 and G22 show a specific device.
  • this display program as with the display system 10, the user can quickly cope with detection of a specific device.
  • a display program may be provided to a computer system through an electric communication line such as the Internet or recorded on a recording medium such as a memory card, or may be recorded in advance in a memory of the computer system. Also good.
  • the computer system executes the following display method by executing the display program. That is, the display method includes a first acquisition step, a second acquisition step, and a display step.
  • the first acquisition step is a step of acquiring first information indicating the physical topology of the target network 100.
  • the second acquisition step is a step of acquiring second information indicating the position on the target network 100 of the specific device detected in the target network 100.
  • the display step is a step of displaying the first image G20 based on the first information and the second information, and displaying the second images G21 and G22 in association with the first image G20.
  • the first image G20 shows a specific portion to which at least a specific device is connected in the physical topology of the target network 100.
  • the second images G21 and G22 show a specific device. According to this display method, similarly to the display system 10, the user can quickly cope with detection of a specific device.
  • the layouts of the display screens such as the normal screens P10 and P20, the unauthorized terminal display screen P30, and the abnormal terminal display screen P40 (for example, the presence / absence of the list B10 and the size and position of the list B10 and the window W10) are not particularly limited.
  • the images I10 to I13 and I20 to I24 representing the management target device 20 are merely examples, and may be changed according to the user's preference.
  • display / non-display may be selected according to the type of the management target device 20.
  • the connected device 21 may be displayed and the terminal 22 may not be displayed.
  • the display system 10 may change the position information of the management target device 20 on the normal screens P10 and P20 by moving an image representing the management target device 20 (for example, the image I10).
  • the controller 30 may function as the display system 10.
  • the display system 10 may include at least the first acquisition unit 151, the second acquisition unit 152, and the display unit 153. That is, the display system 10 can be realized by a computer system that functions as the first acquisition unit 151, the second acquisition unit 152, and the display unit 153.
  • the computer system which comprises the display system 10 may be comprised by the single computer, and may be a system comprised by a some computer.
  • the display system 10 may be configured by at least one of a plurality of computers. A plurality of computers may share the functions of the display system 10 (the first acquisition unit 151, the second acquisition unit 152, and the display unit 153).
  • at least some of the functions of the display system 10 may be realized by, for example, cloud (cloud computing).
  • the computer used here does not need to be a dedicated device, and may be a smartphone, a tablet computer, a personal computer, or the like.
  • the display method of the first aspect includes a first acquisition step, a second acquisition step, and a display step.
  • the first acquisition step is a step of acquiring first information indicating a physical topology of the target network (100).
  • the second acquisition step is a step of acquiring second information indicating a position of the specific device detected in the target network (100) on the target network (100).
  • the display step displays the first image (G20) based on the first information and the second information, and displays the second image (G21, G22) in association with the first image (G20). It is a step to do.
  • the first image (G20) shows a specific part to which at least the specific device is connected in the physical topology of the target network (100).
  • the second images (G21, G22) indicate the specific device. According to the first aspect, the user can quickly cope with the detection of the specific device.
  • the display method of the second mode can be realized by a combination with the first mode.
  • the plurality of management target devices (20) of the target network (100) are classified into one or more groups.
  • the specific portion is a physical topology of a specific group to which a management target device (20) to which the specific device is connected belongs among the one or more groups. According to the 2nd aspect, it becomes easy for a user to grasp
  • the display method of the third aspect can be realized by a combination with the second aspect.
  • the one or more groups are respectively associated with one or more installation locations.
  • the display step displays the first image (G20) and the second image (G21, G22) in association with a map image (M20) of the installation location corresponding to the specific group among the one or more installation locations.
  • M20 map image
  • the display method of the fourth aspect can be realized by a combination with the third aspect.
  • each of the plurality of management target devices (20) is associated with position information.
  • the location information indicates the location on the map image (M20) of the installation location corresponding to the group to which the associated management target device (20) belongs.
  • the display step displays an image of the management target device (20) included in the specific portion at a position on the map image (M20) indicated by the position information of the management target device (20).
  • the user can directly know the location of the management target device 20 to which the specific device is connected. Therefore, the user can deal with the detection of the specific device more quickly.
  • the display method of the fifth aspect can be realized by a combination with any one of the first to fourth aspects.
  • the display step includes the second image (G21, G22) as an image of any of the management target devices (20) included in the specific portion displayed in the first image (G20). Display distinguishably. According to the fifth aspect, the user can easily distinguish the second image (G21, G22) from the image of the management target device (20) of the first image (G20).
  • the display program according to the sixth aspect is a program that, when executed by a computer system, causes the computer system to execute a first acquisition step, a second acquisition step, and a display step.
  • the first acquisition step is a step of acquiring first information indicating a physical topology of the target network (100).
  • the second acquisition step is a step of acquiring second information indicating a position of the specific device detected in the target network (100) on the target network (100).
  • the display step displays the first image (G20) based on the first information and the second information, and displays the second image (G21, G22) in association with the first image (G20). It is a step to do.
  • the first image (G20) shows a specific part to which at least the specific device is connected in the physical topology of the target network (100).
  • the second images (G21, G22) indicate the specific device. According to the sixth aspect, the user can quickly cope with the detection of the specific device.
  • the display system (10) includes a first acquisition unit (151), a second acquisition unit (152), and a display unit (153).
  • the first acquisition unit (151) is configured to acquire first information indicating a physical topology of the target network (100).
  • the second acquisition unit (152) is configured to acquire second information indicating a position on the target network (100) of a specific device detected in the target network (100).
  • the display unit (153) displays the first image (G20) based on the first information and the second information, and the second image (G21, G22) is displayed on the first image (G20). Configured to display in association.
  • the first image (G20) shows a specific part to which at least the specific device is connected in the physical topology of the target network (100).
  • the second images (G21, G22) indicate the specific device. According to the seventh aspect, the user can quickly cope with the detection of the specific device.
  • the display system (10) of the eighth aspect can be realized by a combination with the seventh aspect.
  • the target network (100) defines a plurality of connected devices (21) that perform data transfer according to the content of the transfer processing, and the details of the transfer processing of the plurality of connected devices (21).
  • the first acquisition unit (151) is configured to acquire the first information from the controller (30).
  • the second acquisition unit (152) is configured to acquire the second information from the controller (30).
  • the display system (10) does not need to obtain the first information and the second information from different devices. Therefore, the configuration of the display system (10) can be simplified.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer And Data Communications (AREA)
  • Small-Scale Networks (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

Un problème abordé par la présente invention est de fournir un procédé d'affichage, un programme d'affichage et un système d'affichage, avec lesquels il est possible qu'un utilisateur réagisse rapidement lorsqu'un dispositif spécifié est détecté. Ce procédé d'affichage, ce programme d'affichage et ce système d'affichage comprennent une première étape d'acquisition, une seconde étape d'acquisition et une étape d'affichage. La première étape d'acquisition est une étape d'acquisition de premières informations qui indiquent une topologie physique d'un réseau d'intérêt. La seconde étape d'acquisition est une étape d'acquisition de secondes informations qui indiquent une position sur le réseau d'intérêt d'un dispositif spécifié qui a été détecté dans le réseau d'intérêt. L'étape d'affichage est une étape consistant, sur la base des premières informations et des secondes informations, à afficher une première image (G20) qui indique, dans la topologie physique du réseau d'intérêt, au moins une partie spécifiée à laquelle le dispositif spécifié est connecté, et à afficher, en association avec la première image (G20), une seconde image (G21) qui indique le dispositif spécifié.
PCT/JP2017/044659 2016-12-27 2017-12-13 Procédé d'affichage, programme d'affichage et système d'affichage WO2018123582A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2016254535A JP2018106565A (ja) 2016-12-27 2016-12-27 表示方法、表示プログラム、表示システム
JP2016-254535 2016-12-27

Publications (1)

Publication Number Publication Date
WO2018123582A1 true WO2018123582A1 (fr) 2018-07-05

Family

ID=62707261

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2017/044659 WO2018123582A1 (fr) 2016-12-27 2017-12-13 Procédé d'affichage, programme d'affichage et système d'affichage

Country Status (2)

Country Link
JP (1) JP2018106565A (fr)
WO (1) WO2018123582A1 (fr)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP7032637B2 (ja) * 2017-11-21 2022-03-09 株式会社バッファロー ネットワークマップを表示するコンピュータプログラム、および、無線ｌａｎ装置

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2005051579A (ja) * 2003-07-30 2005-02-24 Hitachi Software Eng Co Ltd 接続監視システム
JP2016146519A (ja) * 2015-02-06 2016-08-12 Ｎｅｃエンジニアリング株式会社 ネットワーク監視システム、監視装置および監視方法

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2005051579A (ja) * 2003-07-30 2005-02-24 Hitachi Software Eng Co Ltd 接続監視システム
JP2016146519A (ja) * 2015-02-06 2016-08-12 Ｎｅｃエンジニアリング株式会社 ネットワーク監視システム、監視装置および監視方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
MATSUHISA MASAYUKI: "Reintroduction for Network Administrators", TCP/IP, 31 December 2000 (2000-12-31), pages 58 - 69 *

Also Published As

Publication number Publication date
JP2018106565A (ja) 2018-07-05

Similar Documents

Publication Publication Date Title
US9552135B2 (en) Security system and method with multistate alert user interface
US10121268B2 (en) Displaying information technology conditions with heat maps
JP5927242B2 (ja) 画像データ作成装置および携帯端末装置
US20230269203A1 (en) Augmented reality for internet connectivity installation
JP6370547B2 (ja) 広域管理システム、広域管理装置、建物管理装置、広域管理方法、センサ情報送信方法、データ取得方法、およびプログラム
US9164851B2 (en) Keyboard, video and mouse switch identifying and displaying nodes experiencing a problem
CN103150407A (zh) 楼宇设施可视化展示方法及其展示装置
CN103959278A (zh) 用于将装置与摄像机的覆盖区域相关联的方法和系统
KR20160058498A (ko) 멀티 디스플레이 장치의 레이아웃을 검출하는 장치 및 방법
WO2018123582A1 (fr) Procédé d'affichage, programme d'affichage et système d'affichage
US8942854B2 (en) System and method for identifying electrical devices in a power management system
US20140081968A1 (en) Methods, Systems, and Program Products for Automatically Managing Tagging of a Resource
US20110087991A1 (en) Methods and Apparatus for Reliable Entry and Enhanced Presentation of IPv6 Addresses
JP2007259319A (ja) ネットワーク構成管理プログラム、ネットワーク構成管理方法およびネットワーク構成管理装置
US10791325B2 (en) Method and system for monitoring equipment state
US20140137023A1 (en) Method for visually mapping network ports to network interface cards
CN110661639A (zh) 一种云服务网络的展示方法和装置
US8650490B2 (en) Apparatus and methods for displaying a physical view of a device
CN104363394B (zh) 视频墙的多媒体资源的处理方法和装置
US8676941B2 (en) Using wireless technology to direct complex wiring configurations
US9383901B1 (en) Methods and apparatus for navagating data center using advanced visualization
JP2016072668A (ja) 影響範囲特定装置、影響範囲特定方法、及びプログラム
JP6538769B2 (ja) ヒートマップを用いた情報技術の状況の表示
CN107645377B (zh) 用于将非固有部分添加到联网装置的装置密钥中的系统和方法
WO2023113125A1 (fr) Procédé de visualisation de trajet et de comportements d'utilisateurs en relation avec un noyau de sécurité et une menace de sécurité vis-à-vis d'un réseau de connexion serveur/terminal, dispositif associé, et support d'enregistrement lisible par ordinateur

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17887336

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17887336

Country of ref document: EP

Kind code of ref document: A1