JP4626741B2 - Network connection participation reception system, node connection method to network, and node setting method - Google Patents

Description

  The present invention relates to a network, and in particular, a connection participation acceptance system to a network capable of checking a setting state and management setting of a communication device used in the network, a method for connecting the communication device to the network, and setting of the communication device Regarding the method.

  In order to communicate by connecting an external device to a network in a network environment to which a device such as a computer is connected, it is necessary to acquire and set information for using the network. In addition, it is necessary to check the eligibility of the setting state of the terminal so as not to cause a problem in the network and other nodes connected to the network when the device is connected to the network.

  For this reason, the user of the device to be connected must perform a procedure for obtaining and setting information for using the network, and the administrator must perform a procedure for checking the suitability of the setting state of the device.

  When a user wants to use the network, these procedures must be performed without taking time, so that it is not easy to perform smoothly and reliably.

  Therefore, the current setting is that only the user who can change the existing setting set in the device to be brought into a setting appropriate for the network to be connected and can sufficiently grasp the setting state of the device can be connected to the network. It is.

  As a method of setting information necessary for using the network, a storage medium storing information necessary for network construction is set in a computer having an automatic setting mechanism, and data is transmitted from the terminal to be set to the computer. There is a technique for connecting and setting via a road (for example, Patent Document 1).

  In addition, as a method of automatically setting the information required to use the network, the information stored in it is automatically received on the terminal side from the DHCP (Dynamic Host Configuration Protocol) server connected to the network. (Patent Document 2, Non-Patent Document 1).

  However, the techniques disclosed in these documents are used on the premise of existence of eligibility of a terminal connected to a network. Therefore, a procedure for inspecting the setting state of the terminal by an administrator or the like is required.

  The inventor of the present application provides a packet monitoring device in a network in Japanese Patent Application Laid-Open No. 2003-218869 (Patent Document 3), and manages configuration information of the terminal and the network when the terminal is newly connected. We proposed a method to detect a new terminal immediately from a packet delivered by a host. This Patent Document 3 is a related technique in that this technique is used in an embodiment of the present invention.

Japanese Patent Laid-Open No. 9-168209 JP 2003-162462 A JP 2003-218869 A R. Droms, “Dynamic Host Configuration Protocol”, RFC 2131, [online], March 1997, [October 8, 2003], Internet <URL: ftp://ftp.rfc-editor.org/in-notes/ rfc2131.txt>

  Therefore, according to the present invention, a terminal that wants to join the main network from the outside connects to a network other than that network, such as checking the eligibility of the terminal settings themselves and setting information acquisition. It is an object of the present invention to provide a system and method for automatically performing a procedure required for the above.

  Since the inspection of the setting state of the communication device and the new setting must be completed before the terminal is connected to the network, in the present invention, a reception device is prepared in a network different from the network to be connected and the inspection is performed. And make settings.

  When the accepting device detects a device connected to the accepting network, the accepting device checks the suitability of the device setting. A setting that does not satisfy the level of eligibility assumed by the administrator is urged to change the setting or to a new setting, and a terminal for which the setting is qualified is given network usage eligibility.

  As the items of eligibility, there are a setting in which a terminal terminal may damage the network itself, and a setting in which the terminal itself may be attacked from the network side. Examples of the former include setting as a DHCP server and setting of router advertisement that become an illegal function in the main network of the final connection destination. As an example of the latter, there is an export setting for file sharing that makes it easy to receive an attack or provides information even if it is not necessary. Furthermore, whether the terminal is contaminated with a virus belongs to the former, and the countermeasures against viruses and the latest software modification file application countermeasures belong to the latter.

  As a result, the reception apparatus gives information necessary for using the network to the terminal that satisfies the eligibility.

The communication device is a reception network system, is provided with necessary information for use of the network by being qualified, and can use the main network.
Further, according to the embodiment of the present invention, it is desirable that the communication environment for performing proper inspection and setting of the terminal is a communication environment including only the receiving device excluding communication devices other than the setting target device and the inspection target. Also includes a virtual communication environment using VLAN technology.

  According to the present invention, a node to be connected to the main network is connected to the main network after the node to use the main network is connected to the reception network to which the reception device is connected and is qualified. The method is obtained.

  The qualification is given to a predetermined setting by checking the setting state of the node. The qualification is given to the predetermined setting according to the request when the setting state of the node is checked and the predetermined setting is not made. The predetermined setting includes installation or setting of an anti-virus program, application of the latest software modification file, update to the latest definition file, and the like.

  Qualification is given to a predetermined setting in response to a request for correction of an illegal setting with respect to a setting whose configuration state may damage the network or an illegal setting that may be attacked from the network. Is done.

The accepting device provides the node with setting information for using the main network. The node is provided with setting information for using the network and performs the setting.
Before setting the setting information for using the network, the node stores the setting information at that time as restoration information so that it can be used for state recovery in the future.

The accepting device may provide information regarding the node to the network based on address information unique to the node.
The reception device is connected in an environment in which the reception network can be shared only with nodes that receive provision of the previous reception process.

  According to the present invention, there is also an accepting device for a node connected to the accepting network and connected to the main network, the means for detecting the node connected to the accepting network, the means for inspecting the setting state of the node, Means for providing predetermined setting information based on the setting state of the node; and means for providing setting information necessary for using the main network when the setting state of the node is qualified. A receiving device is obtained.

The accepting device includes means for requesting storage of the current setting state of the node. The accepting device includes means for providing setting information regarding the accepted node to the main network.
The accepting device includes means for requesting restoration to the saved setting state when the accepted node is disconnected from the accepting network and reconnected.

  The accepting device includes means for storing address information of the node detected by the node detecting means. The reception device includes means for storing the reception date and time of the node.

The accepting device includes means for calculating a time until the node is reconnected when the node is disconnected from the accepting network and reconnected to the accepting device after using the main network.
The accepting device includes means for monitoring packets flowing in the main network and detecting a packet flowing in the main network including predetermined address information of a node accepted by the accepting device, and means for storing the number of packets.

  Furthermore, according to the present invention, there is provided a reception system including a reception network, a reception device connected to the reception network, and a node connected to the reception network and receiving a reception process for using the main network. Means for detecting a node connected to the network; means for inspecting a setting state of the node; means for providing predetermined setting information based on the setting state of the node; and a setting in which the setting state of the node is qualified Means for providing the setting information necessary for using the main network when the node is provided, and the node receives the provision of the predetermined setting information and performs the predetermined setting and for using the main network. A reception system including means for receiving necessary setting information and making necessary settings for using the main network is obtained.

The reception network is in an environment in which the reception device can be shared only with the node. Further, according to the present invention, a node is set by connecting to the reception device connected to the reception network and performing reception processing for using the main network. The accepting device detects a node connected to the accepting network, inspects the setting state of the node, and provides predetermined setting information based on the setting state of the node And providing the setting information necessary for using the main network when the setting state of the node is qualified, the node receiving the predetermined setting information and receiving the predetermined setting information. It is necessary to use the main network upon receiving the setting step and setting information necessary for using the main network. Setting a node comprising the steps of: a Do set is obtained.

  Further, according to the present invention, there is provided a program to be executed by a reception device for a node connected to the main network, the step of detecting a node connected to the reception network, and the step of checking a setting state of the node Providing predetermined setting information based on the setting state of the node, and providing setting information necessary for using the main network when the setting state of the node is qualified. A program to be executed by the accepting device including is obtained.

In the present invention, since the devices participating in the network are connected to the main network after being connected to the reception network and subjected to the qualification inspection by the participation reception device in advance, the devices are connected to the main network. Can be performed before connecting to the main network.
In the present invention, since setting information necessary for performing communication from the accepting device is received and set after participation in the main network, settings necessary for performing communication before connection to the main network can be performed.

  In the present invention, since a device that intends to newly use the network is first connected to the reception network, it is possible to grasp from the device identification information which device is connected to the main network by the reception device.

  The present invention also provides a state in which a device is connected to a local network dedicated to an accepting device that realizes the function of qualifying the setting state of the device and distributing the setting, that is, sharing the network with other network devices. In other words, since it is performed in an environment where the third party's device does not share the reception network at the same time, the setting distribution status will not be peeped from the third party's device, You will not receive unauthorized settings from third-party devices. Authentication of each other's devices is done by a physical method by direct connection between the two using a closed dedicated network, eliminating the need for complicated authentication using communication authentication technology, etc. Yes. For this reason, it is possible to easily and safely perform distribution of setting information from the receiving device, state examination and setting of the terminal, and the like.

  Embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a relationship between a reception network (check-in network) of the present invention, a main network, and a node newly used in the main network.

  In FIG. 1, reference numerals 100 and 200 denote a main network and a check-in network, respectively. The main network includes a LAN cable, a host 111 as a node connected to the cable, a host 112, a router 113, and other communication devices (not shown). The main network is connected to the Internet via a router. In the reception network 200, a reception device (reception box) 220 as a host is connected to a LAN cable. Prior to connection to the main network, a node 300 scheduled to use the main network is connected to the reception network 200 and receives a reception procedure by the reception device 220.

  The accepting device 220 performs accepting processing when participating in the main network. When the node 300 is connected to the reception network, the reception device 220 detects a new node and checks the state of the node. In other words, the eligibility of the connection to the main network of the node is examined to prompt the setting satisfying the eligibility, and the node performs the setting according to the instruction.

  Eligibility items are determined at the level assumed by the network administrator. One such item is whether the node is set to cause damage to the network. That is, whether or not the wrong information is set to flow through the node. For example, on the main network, if the DHCP server setting or router advertisement message (Router advertisement) that will result in providing incorrect autoconfiguration (Autoconfiguration) information is sent, etc. , And prompting the user to change these settings, and when connected to the main network, makes appropriate settings as a node connected to the main network that does not adversely affect the main network.

  Furthermore, as another item of eligibility, the node itself may be set to be attacked from the network side. For example, it is checked whether the node is set to export for file sharing which is unnecessary in the main network, and an appropriate setting is prompted. In addition, the node itself is attacked by the inspection result, and at the same time, in order to prevent the node from damaging the network, installation of a necessary program is urged. For example, if an anti-virus program is not installed, or if the latest software modification file or definition file is not applied, it is provided and prompted to install it. If there is a problem with a program already installed on the node, it can be corrected or a file update instruction can be given.

  In addition, if necessary, you can install a program tool that is specially used for the main network at the node.

  After making the appropriate settings as described above for the node, the accepting device 220 supplies the node 300 with setting information necessary for using the network. As setting information necessary for using the network, there is setting information related to TCP / IP. Set the IP address information that the node uses on the main network from the accepting device. It is also possible to set the address information of the gateway.

In addition, you can also set browser settings and e-mail software settings when using the WEB at the application level. Browser settings include home page address settings and proxy server settings.
The e-mail software settings include mail server settings, account settings, and password settings.

  It is preferable that the node 300 sets the setting information when using another network currently held in the node as restoration information prior to the setting for using the main network.

When the setting of the node 300 is completed, the node 300 moves away from the reception network and connects to the main network. When plug-in is performed on the main network, communication with the main network 100 is possible because the main network has already been set in the accepting device.
When the use of the main network is terminated, plug-out from the main network may be performed. However, in order to return the node to the original state and use the previous network, the connection to the reception network 120 is required. Perform check-out processing. That is, the restoration information stored in the node is restored to the original setting in response to an instruction from the receiving device.

Next, Example 1 will be described with reference to FIG. 2, FIG. 3, and FIG. FIG. 2 is a block diagram showing the relationship between the accepting device 210, the node 300 that intends to newly join the main network, the accepting network 200, and the main network 100. 3 and 4 are sequence diagrams of processing among the node 300, the reception device 210, and the nodes of the main network 100. FIG.
The accepting device 220 is a host including a packet monitoring unit 211, a terminal inspection unit 212, a setting information storage unit 213, an information transmission unit 214, and a restoration request transmission unit 215, and is connected to a LAN via a built-in network interface (not shown). It is connected to the cable and together with these forms a reception network.

  The computer 300 to be a node that intends to join the main network 100 is connected to the reception network before that. The node 300 includes an information acquisition setting unit 310 and a setting restoration unit 320. The information acquisition setting unit 310 includes an address setting unit 311, an information receiving unit 312, and an information setting unit 313. The setting restoration unit 320 includes a restoration information storage unit 322 and a setting request reception unit 311. The node 300 is connected to the LAN cable of the reception network 200 from a network interface (not shown) (step A1).

  In this embodiment, a description will be given assuming that each device is mounted based on IPv6. Furthermore, it is assumed that a stateless autoconfiguration protocol is implemented. When the node 300 is connected to the reception network, the address setting unit 311 sets an address according to the stateless automatic configuration method. The address setting unit of the node 300 generates a candidate address to be a link local address using the link local prefix and the MAC address information. In order to confirm whether the address is a non-overlapping address and can be used as a link local address, the node 300 confirms whether there is a node that already uses the generated candidate address (Neighbor solicitation: ICMPv6 type 134). ) Is issued (step A2). If there is an overlap, a neighbor advertisement message (Neighbor advertisement: ICMPv6 type 136) is issued within a predetermined time.

The packet monitoring unit 211 of the accepting device monitors these packets, and determines that a new node has been detected (step A4) if a predetermined time has elapsed (step A3) and no neighbor notification message message has been detected. The acceptance process is started by detecting this new node.
The terminal inspection unit 212 of the accepting apparatus performs a prior state inspection of the node 300, and if there has been a state investigation or information acquisition setting using this mechanism in the past, or if there is, the latest correct state investigation or information acquisition. It is checked whether a program for setting is installed in advance (step A5). As a result, when the necessary program is not properly installed, the program stored in the setting information storage unit 213 is transferred from the information transmission unit 214 to the information reception unit 312. (Step A6). The information receiving means 312 receives from the information transmitting means 214, and the information setting means 313 installs the program in a storage area (not shown) (step A7).

  In addition, the terminal inspection unit 213 performs state investigation and information acquisition using the installed program, compares the management level of the main network determined in advance with existing settings existing in the node, and sets inappropriate settings. In this case, the information transmission unit 214 sends the correct setting information stored in the setting information storage unit 213 to the information reception unit 312 (step A8), and performs an appropriate setting using the information setting unit (step A9).

  Next, the setting information necessary for using the main network 100 is read from the setting information storage unit 213, the information transmission unit 214 sends it to the information reception unit 312 (step A10), and the information setting unit 313 performs the setting. Perform (Step A12). Prior to this setting, the setting information set in the node 300 is stored in the restoration information storage unit 322 as information to be restored (step A11). Further, the accepting device can acquire and store MAC address information used by the node 300 during communication with the node 300.

  Note that the processes of steps A5 to A12 can also be performed as follows. The browser of the node 300 is used as a graphic user interface (GUI). Web access on the reception network provided by the reception device by launching the browser uses the Redirect technology that forcibly directs the reception device to the reception device, or uses the service discovery mechanism. Display.

  Click on the web page that appears to download and run the setup script. The setup script inspects the setting state of the node 300 and returns the inspection result to the accepting device. The accepting device provides a new web page according to the inspection result, and the node user downloads the next setup script according to the instructions on the web page, and clicks the screen displayed on the node browser to install the anti-virus program And do it by running. You can also download and execute each setup script from the web page that appears one after another to set the correct setting information, set the information necessary to use the network arc, and save the restoration information. It is also possible to prepare and execute a setup script that can perform these settings all at once.

  In this way, after receiving the inspection for using the main network, the qualification is given, and the setting information for using the main network is acquired, and then the connection is disconnected from the reception network.

  The node 300 disconnected from the reception network is moved to the main network 100 to be used and connected (step A13).

  When connected to the main network, based on the stateless autoconfiguration function, an address to be used is automatically generated, or an address provided in the reception network environment is used. Since the node is already set to use the main network, actual communication can be performed using the main network (step A14).

  If necessary, the global IP address is also automatically acquired in IPv6. If the global IP address is set to be automatically acquired, the IMCPv6 neighbor discovery message will be sent when joining the main network. Can be obtained using. That is, the node 300 issues a router solicitation message (ICMP type 133) packet and receives a router announcement message from the router 113. Since this message includes address information of the network portion corresponding to the upper 64 bits of the global IP address, the global IP address can be generated from the information and the MAC address of the node 300.

  When the actual communication using the main network is completed, the node is disconnected from the main network, connected to the reception network (step A15), and undergoes a checkout procedure. The main purpose of checkout is to stop using the main network and restore the node settings.

  Due to the connection to the reception network, the node 300 sends a packet for confirming address duplication. That is, the node 300 multicasts a neighbor solicitation message (Neighbor solicitation: ICMPv6 type 134) including a link local address, and confirms address duplication (step A16). When there is an overlap, a response by a neighbor advertisement message (Neighbor advertisement: ICMPv6 type 136) is unicast within a predetermined time. The packet monitoring unit 211 monitors the packet, and determines that a new node has been detected (step A18) if no neighbor notification message is detected within a predetermined time (step A17). The reception device starts reception processing upon detection of a new node.

  The terminal inspection unit 213 inspects the state of the node 300 (step A19). Since it can be seen from the MAC address of the node that the node has already been accepted by the accepting device, the restoration request transmitting means 215 sends a restoration request to the restoration request receiving means 321 (step A20). In response to this, the restoration setting information is extracted from the restoration information storage means 322 (step A21), and the information setting unit 313 sets the information as the current setting of the node 300 (step A22).

  As described above, in the present invention, since a device participating in the network is connected to the main network after being connected to the reception network and qualified by the participation reception device in advance, Certification can be done before connecting to the main network.

  In the present invention, since setting information necessary for performing communication from the accepting device is received and set after participation in the main network, settings necessary for performing communication before connection to the main network can be performed.

  The present invention also provides a state in which a device is connected to a local network dedicated to an accepting device that realizes the function of qualifying the setting state of the device and distributing the setting, that is, sharing the network with other network devices. In other words, since it is performed in an environment where the third party's device does not share the reception network at the same time, the setting distribution status will not be peeped from the third party's device, You will not receive unauthorized settings from third-party devices.

  FIG. 5 is a block diagram showing a second embodiment of the present invention. In FIG. 5, reference numerals 100 and 200 denote a main network and a reception network, respectively. The main network includes a LAN cable and a host 111, a host 112, and a router 113 as nodes connected to the cable. The main network is connected to the Internet via a router. In the reception network 200, a reception device (reception box) 220 as a host is connected to a LAN cable. Prior to connection to the main network, a node 300 scheduled to use the main network is connected to the reception network 200 and receives a reception procedure by the reception device 220.

  This embodiment differs from FIG. 1 in that the reception device 220 has a back-end reception device (Back-end reception unit) 230 in addition to the front-end reception unit 230 having the function of the reception device shown in FIG. reception unit) 210. The post-accepting device 210 obtains the latest information regarding the main network, or provides information about a node that intends to newly join the main network to a host or the like connected to the main network. The front reception device 230 and the rear reception device 210 are hosts connected to the reception network and the main network, respectively. Since both apparatuses are hosts and not routers, a packet flowing to the main network or a packet flowing to the receiving network is not forwarded between the post-receiving apparatus 210 and the front-receiving apparatus 230. When each accepting device provides information and needs to send it to the network based on the information, each device generates a packet.

  In this embodiment, the setting on the main network side where the node 300 finally moves can be performed in advance as a proxy via the post-accepting device. For example, the MAC address information of the node 300 can be acquired and registered in the main network database. As such, for example, the MAC address is registered as filtering information in the registration entry of the switching hub or access point. Also, register the IP address in the registration entry of the router. The domain name system (DNS) server can register the node's domain name (host name) and IP address. Moreover, you may register to a mailing list.

  In this embodiment, in response to a request from the front receiving device, the back receiving device from the database (not shown) connected to the main network or the Internet via the main network is used to update the latest programs and files including the OS. You can get things or get an updated version of an antivirus program. These files can be transferred to the post-reception device by the post-reception device, stored in the cache of the front-reception device, and installed according to the inspection result of the new node.

  Since the parts other than the post-accepting device are the same as those in the first embodiment, the detailed description is omitted. However, the node 300 receives the node inspection by the pre-accepting device 230 and sets the eligibility for using the main network. Receive setting information for using the main network. Also, if necessary, prior to the setting for using the main network, the setting information held at that time is stored as restoration information.

  The node set in this way moves away from the reception network and is plugged into the main network and used.

  Next, the embodiment will be described in more detail with reference to FIGS. 6, 7 and 8. FIG. FIG. 6 is a block diagram showing the relationship between the accepting device 210, the node 300 that intends to newly join the main network, the accepting network 200, and the main network 100. 7 and 8 are sequence diagrams of processing among the node 300, the accepting device 220, and the nodes of the main network 100. FIG.

  The reception device 220 includes a front reception device 230 and a rear (back-end) reception device 210. The front reception device 230 is a host including a packet monitoring unit 211, a terminal inspection unit 212, a setting information storage unit 213, an information transmission unit 214, and a restoration request transmission unit 215, and has a built-in network interface card (not shown). It is connected to the LAN cable via this, and constitutes a reception network together with these. In this embodiment, the reception apparatus includes a post-reception apparatus 210 in addition to the reception apparatus 210 described in the first embodiment. The post-reception device 210 supports the front-reception device 230 and has a function of setting the main network before a node that intends to newly join the network joins the main network.

  The post-receiving device 210 has a built-in network interface card (not shown) and is connected to the main network and has an IP address related to the main network.

  The computer 300 to be a node that intends to participate in the main network 100 is connected to the reception network 200 before that. The node 300 includes an information acquisition setting unit 310 and a setting restoration unit 320. The information acquisition unit 310 includes an address setting unit 311, an information receiving unit 312, and an information setting unit 313. The setting restoration unit includes restoration information storage means 322 and setting request reception means 311. Node 300 is connected to a LAN cable of reception network 200 from a network interface card (not shown).

  In this embodiment, a description will be given assuming that each device is mounted based on IPv6. Assume that a stateless autoconfiguration protocol is implemented. When connected to the reception network, the address setting means 311 sets an address. Since the accepting device connected to the accepting network is a host and not a router, the address setting unit of the node 300 generates a link local address using the link local prefix and the MAC address and sets it in the storage area. Then, the node 300 multicasts a neighbor solicitation message (Neighbor solicitation: ICMPv6 type 134) to the generated link local address, and confirms address duplication. When there is an overlap, a response by a neighbor advertisement message (Neighbor advertisement: ICMPv6 type 136) is unicast within a predetermined time.

  The packet monitoring unit 211 of the accepting apparatus monitors these packets, and determines that a new node has been detected if a predetermined time has elapsed and no neighbor notification message message has been detected (step C1). The steps so far are the same as those in FIG. 5 relating to the first embodiment, but only step C1 is shown in FIG. 8 for the sake of simplicity. The acceptance process is started by detecting this new node.

  That is, state inspection (step C2), sending of an anti-virus program (step C3), its installation (step C4), sending of correct setting information (step C5), its setting (step C6), setting for using the network Information transmission (step C7), restoration information storage (step C8), and setting of information for using the network (step C9) are the same as steps A5 to A12 in FIG. Description is omitted.

  The packet monitoring unit 211 can extract the address information included in the packet by monitoring the packet flowing from the node 300. This is because the packet includes MAC address information and IP address information unique to the node.

  Depending on the necessity of the scenario using the acquired MAC address information and IP address information etc. (In a scenario using a device that does not pass packets without performing MAC address registration, MAC address information cannot be used without IP address registration. (In the case of a device or a server, IP address information) When the node 300 participates in the main network, the pre-accepting device 230 that acquired the address information so that a communication device such as a router of the main network or a server can be used. Transmits the information to the post-reception device 210. The post-reception device 210 that has received the information performs registration in accordance with a procedure known in advance in a communication device such as a router or a server that must register address information that is already known in a preset scenario (step C10, C11, C12).

  By completing these registration operations in the reception network, the node 300 can immediately use the provided service in a communication device or server such as a router or a wireless LAN access point when connected to the main network. .

  Referring to FIG. 8, the node 300 is disconnected from the reception network 200, moves to the main network 100 to be used, and is connected (step C13).

  In this way, after receiving the inspection for using the main network, the setting information for using the main network is obtained by being qualified, and for the node newly joining the main network in advance. After setting, it is connected to the network.

  Subsequent actual communication using the main network (step C14), disconnection from the main network and connection to the reception network (step C15) up to step C21 are the same as steps A16 to A22 regarding the first embodiment. . For simplification of description, in FIG. 8, the address duplication confirmation (step A16) and the elapse of a predetermined time (step A17) in FIG. 4 are represented as an address setting packet (C16).

  Thus, after the setting of the node 300 is restored in step C21, the accepting device creates a setting deletion request for the node 300 in order to delete the information set in the main network in order to use the main network (step C22). Then, a setting deletion request packet is sent from the communication setting means 221 of the post-reception accepting device to the node of the main network (step C23), and the node receiving it deletes the setting for the node 300 (step C24).

  In this embodiment, since the reception device has a front reception device connected to the reception network and a rear reception device connected to the main network, the main network is set in advance for a node that receives reception processing in the reception network. You can also

  The third embodiment incorporates a function for calculating a usage fee when the main network is used in the nodes participating in the main network in the first embodiment.

  FIG. 9 is a block diagram showing the relationship between the accepting device 220, the node 300 that intends to newly join the main network, the accepting network 200, and the main network 100. 10 and 11 are sequence diagrams of processing among the node 300, the receiving device 220, and the nodes of the main network 100. FIG.

  The difference from FIG. 3 regarding the structural example 1 shown in FIG. 9 is that the reception device 220 has a new communication status storage means 216.

  In FIG. 10, the procedure from step B1 to step B9 after connection to the reception network 200 is the same as that from step A2 to A12 in FIG. However, the display corresponding to steps A2 and A3 is omitted in FIG.

  Therefore, when the setting information for using the network is set in step B9, the receiving apparatus stores the MAC address information of the node 300 and records the date and time at that time in the communication status storage unit 216 (step B10). .

  After that, disconnect from the reception network and connect to the main network (step B11), actual communication using the main network (step B12), check at the reception network from disconnection due to termination of use of the main network in FIG. The procedure for out (B13 to B19) is the same as that in FIG. 4 (steps A15 to A22) for the first embodiment. However, in the display of FIG. 11, the address duplication confirmation (step A16) and the elapse of a predetermined time (step A17) in FIG. 4 are displayed as the address setting packet (step B14), which is the same procedure. Therefore, description of these series of procedures is omitted.

  The accepting device issues a setting information restoration request, and when the node 300 makes the setting, the accepting device records the date and time at that time in the communication status recording means 216. Since the packet monitoring unit 211 detects the MAC address of the node from the packet related to address duplication confirmation performed when the node is connected to the reception network for checkout, the reception device records the communication status when the address is checked-in. It is determined whether the MAC address is the same as the MAC address recorded in the means 216. If it is the same, the checkout date and time is recorded in correspondence with the MAC address of the communication status recording means. Record the time from check-in to check-out. Based on this time, the operator operating the main network can charge.

  The fourth embodiment is a reception system that can output data based on the traffic on the main network, whereas the third embodiment outputs data on the main network in the time from check-in to check-out to the reception device. is there.

Referring to FIG. 12, in the system of the fourth embodiment, the receiving device 220 includes a front receiving device 210 and a rear receiving device 220. The main configuration of the front receiving apparatus is the same as that of the receiving apparatus (FIG. 9) described in regard to the third embodiment. And the procedure is substantially the same. Therefore, the MAC address of the node checked into the accepting device is recorded in the communication status recording means 216.
The rear receiving device 210 is connected to the main network via a network interface. This post-accepting device has packet monitoring means 222 and monitors packets flowing through the main network.

  The node 300 that has performed the reception process in the reception network connects to the main network and performs actual communication using the network. The post-reception device 210 refers to the MAC address of the node recorded in the communication status recording unit 216 of the front-reception device, and monitors and detects whether there is a packet having the same MAC address among the packets flowing through the main network. The number of packets is counted every time, and the count value is stored in the storage area of the post-reception device in association with the MAC address.

  Therefore, when the node 300 is disconnected from the main network and connected to the reception network for checkout, the same procedure as that in FIG. 11 of the third embodiment is performed, and the MAC address is set in the communication status record (step B20). The number of packets held is transferred from the storage area of the post-reception accepting device to the communication status storage means 216 and registered.

  In this embodiment, when the use of the main network is completed after checking in the setting status of the terminal, assigning eligibility, setting the information necessary for using the network, tick-in the accepting device By checking out, it is possible to calculate the amount of traffic that the node uses the main network.

  In the above embodiments, the stateless autoconfiguration is described as being implemented. However, the present invention can also be applied to the case of stateful autoconfiguration.

  FIG. 13 is a block diagram when the present invention is implemented using a wireless LAN. In the figure, reference numerals 100 and 200 denote a main network and a reception network, respectively. The main network includes a LAN cable and a host 111, a host 112, and a router 113 as nodes connected to the cable.

  The main network is connected to the Internet via a router. An access point (AP) 114 is connected to the main network. The access point 114 has an interface to the LAN cable and an interface to the wireless LAN 150. Inside the access point, both LANs are connected by a bridge (not shown).

  The reception network 200 includes a wired LAN and a wireless LAN 250. The front receiving device 230 of the receiving device 220 and the access point 240 are cable-connected to the wired LAN. As with the access point 114, the access point 240 also has an interface for a wired LAN and an interface for a wireless LAN. Both LANs are bridged inside the access point.

  A node 300 that is to receive a reception procedure in the reception network 200 is equipped with a wireless LAN card card (not shown) as an interface, and performs wireless communication with the access point 240. The access point 340 is set so as to emit radio waves with extremely low power, and there is a distance limit for allowing mutual response. In order for the node 300 to communicate, the node needs to be close to the access point 240. . Both the access point 340 and the node 300 perform communication in the any mode. In this mode, access is possible without a special key for the access point.

  The node 300 acquires information for accessing the access point 114 in order to participate in the main network after the node finishes the reception process. For example, it functions as a password for accessing the access point 114 and acquires a service set identifier (SSID) to be added to a packet transmitted on the wireless LAN. Further, a Wep key (WEP key: Wired equivalent privacy key) that is an encryption key for preventing eavesdropping of frame transmission between the access point 114 and the node 300 is received.

  The front-end reception device 230 can also acquire the MAC address of the network interface of the wireless node 300, pass it to the access point 114 of the main network via the rear-end reception device 210, and perform MAC address registration for packet filtering. it can.

  Although the above description relates to setting information for using a network specific to wireless when using a main network using an access point that is an interface between a wireless network and a wired network, the access points 240 and 114 are Both are bridges, and the destination of the packet from the node 300 is the accepting device that is the host of the accepting network and the node of the main network. Therefore, the setting for imparting eligibility to the network can be performed in the same manner as in the second embodiment. Prior to the setting for using the main network, it is desirable to save the setting information held at that time as restoration information.

  Thus, the node set by the accepting device can be separated from the accepting network, plug into the main network, communicate with the access point 114, and enter the main network.

  Also, when the use of the main network ends, plug-out and access to the accepting device restore the setting information.

  In this embodiment, since the wireless node can be connected to the reception network in advance to receive a data link level setting specific to the wireless, it can be applied to a hot spot service.

It is a block diagram of an embodiment of the invention. It is a block diagram of Example 1 of the present invention. It is a figure which shows the procedure of Example 1 of this invention. It is a figure which shows the procedure of Example 1 of this invention. It is a block diagram of Example 2 of the present invention. It is a more detailed block diagram of Example 2 of the present invention. It is a figure which shows the procedure of Example 2 of this invention. It is a figure which shows the procedure of Example 2 of this invention. It is a block diagram of Example 3 of the present invention. FIG. 10 is a diagram showing a procedure of Example 3. FIG. 10 is a diagram showing a procedure of Example 3. It is a block diagram of Example 4 of the present invention. It is a block diagram of Example 5 of the present invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Main network 111,112 Host 113 Router 114 Access point 200 Reception network 220 Reception apparatus 210 Post reception apparatus 230 Front reception apparatus 240 Access point 300 Node

Claims (18)

A method for connecting a node to a network, in which communication is shared between a reception device that performs reception processing before connecting the node to the main network and a node that is to be provided with reception processing, and no other communication device is connected Connect to the reception network in the environment, and the setting state of the node may cause damage to the main network itself, the setting that the node itself may be attacked from the main network side, and the conditions for entering the main network Provided when the setting status of the node is qualified and the configuration status of the node is qualified by receiving the specified configuration information provided on the basis of the inspection result. Receiving the setting information necessary for using the main network to be set in the node and automatically performing the reception process, and then receiving the reception network From disconnecting, how to connect the nodes, characterized by connecting the node accepting processed in the main network to the network.   2. The node according to claim 1, wherein the node receives the setting information necessary for using the main network and stores the existing setting information as restoration information before setting the node in the node. Method. The node connected to the main network by the method of connecting the node according to claim 2 to the network is disconnected from the main network after using the main network, connected to the reception network, and the restoration information is set. How to set the node to be used. Set the node by connecting to the reception network in the communication environment that is shared by the reception device that performs reception processing before connecting the node to the main network and the node that should receive the reception processing and that is not connected to other communication devices It is checked whether the status is a setting that can damage the main network itself, a setting that the node itself may be attacked from the main network side, and a setting that satisfies the conditions for entering the main network. In response to the predetermined setting information provided based on the inspection result, the setting state of the node is changed to an appropriate setting, and the setting necessary for using the main network provided when the setting state becomes an appropriate setting. Receives the information and sets it as a node, automatically accepts it, then disconnects it from the accepting network and places the node that has undergone accepting processing on the main network. A reception device for receiving a node connected to a reception network, which is used in a method for connecting a node characterized by being connected to a work to the network, and means for detecting a node connected to the reception network The setting state of the node is a setting that may cause damage to the main network itself, the setting that the node itself may be attacked from the main network side, and the setting that satisfies the condition for entering the main network. Means for inspecting whether or not, means for providing predetermined setting information based on the setting state of the node, and setting necessary for using the main network when the setting state of the node is qualified A receiving device including means for providing information. 5. The reception apparatus according to claim 4, wherein the main network and the reception network are TCP / IP networks. 6. The reception apparatus according to claim 4 , further comprising means for requesting storage of an existing setting state of the node. The receiving apparatus according to claim 6 , further comprising means for providing setting information regarding the received node to the main network. 8. The reception apparatus according to claim 5 , further comprising means for requesting restoration of the existing setting state when the node subjected to the reception process is disconnected from the reception network and reconnected. 9. The accepting apparatus according to claim 8 , further comprising means for requesting deletion of the setting of the main network with respect to the node when the node is disconnected from the accepting network and reconnected. 7. The receiving apparatus according to claim 4 , further comprising means for storing address information of the node detected by the node detecting means. 11. The reception apparatus according to claim 10 , further comprising means for storing the reception date and time of the node. 12. The receiving apparatus according to claim 11 , further comprising means for calculating a time until the node is reconnected when the node is disconnected from the receiving network and reconnected to the receiving apparatus after using the main network. A means for monitoring a packet flowing through the main network and detecting a packet flowing through the main network including predetermined address information of a node accepted by the accepting device, and means for storing the number of packets. 12. The accepting device according to 12 . 14. The accepting apparatus according to claim 13, wherein billing information is output from the number of packets stored in the means for storing the number of packets. A system that controls the connection of a node to a network, and accepts a communication environment that is shared by the main network, the accepting device that performs the accepting process, and the node that should receive the accepting process and is not connected to other communication devices Including a network, the reception network is configured such that a node setting state may damage the main network itself with respect to a node connected to the reception network before being connected to the main network, the node itself from the main network side Checks whether the node satisfies the settings that may be attacked and the conditions for entering the main network, and provides predetermined setting information based on the inspection results. When the setting is appropriate, the setting information necessary for using the main network is provided and the reception process is performed. When the node separated from the network and connected to the main network is connected to the main network after being separated from the main network, the node sets necessary setting information for using the main network. A system which makes a restoration request for restoration information which is existing setting information previously stored in a node. Set the node by connecting to the reception network in the communication environment that is shared by the reception device that performs reception processing before connecting the node to the main network and the node that should receive the reception processing and that is not connected to other communication devices It is checked whether the status is a setting that can damage the main network itself, a setting that the node itself may be attacked from the main network side, and a setting that satisfies the conditions for entering the main network. In response to the predetermined setting information provided based on the inspection result, the setting state of the node is changed to an appropriate setting, and the setting necessary for using the main network provided when the setting state becomes an appropriate setting. Receives the information and sets it as a node, automatically accepts it, then disconnects it from the accepting network and places the node that has undergone accepting processing on the main network. A program used in a method for connecting a node connected to a work to a network and executed by a reception device that performs reception for a node connected to a reception network, and detecting a node connected to the reception network; Whether the setting state of the node may cause damage to the main network itself, the setting that the node itself may be attacked from the main network side, and the setting that satisfies the condition for entering the main network A step of checking whether or not, a step of providing predetermined setting information based on a setting state of the node, and a setting information necessary for using the main network when a setting state of the node is qualified A program for causing the reception device to execute the program. The program according to claim 16, wherein the reception device includes a step of requesting to save an existing setting state of the node. 18. The program to be executed by the accepting device according to claim 17 , further comprising a step of requesting restoration of the existing setting of the node when the node that has been accepted is reconnected to the accepting network.

Images