Network system

Patent metadata

Field	Value
Publication number	US-10972464-B2
Application number	US-201816174747-A
Country	US
Kind code	B2
Filing date	Oct 30, 2018
Priority date	Oct 31, 2017
Publication date	Apr 6, 2021
Grant date	Apr 6, 2021

Abstract

A network system that can easily augment security is provided. The network system includes an information device included in an internal network connected to an external network, the information device transmitting specific information including its own identification information and device information provided in advance, in conformity with a predefined protocol; and a management unit that monitors the internal network, and collects the specific information from the information device in conformity with the predefined protocol. The management unit collects specific information from an unknown information device, notifies a user of an authorization request for the unknown information device on the basis of the collected specific information, and determines whether or not to authorize access of the unknown information device to the internal network, in accordance with a response from the user to the authorization request.

First claim

The invention claimed is:

1. A network system comprising:
an information device included in an internal network connected to an external network, the information device being configured to transmit specific information including its own identification information and device information provided in advance, in conformity with a predefined protocol; and
a management unit configured to monitor the internal network, and collect the specific information from the information device in conformity with the predefined protocol, wherein
the management unit
collects specific information from an unknown information device, the specific information of the unknown information device including its own identification information and device information,
notifies a user of an authorization request for the unknown information device on a basis of the collected specific information,
determines whether or not to authorize access of the unknown information device to the internal network, in accordance with a response from the user to the authorization request,
generates map information, including connection configuration information which is correspondence information between a port number of each port of an information device with multiple ports and a MAC (media access control) address of the information device connected to each port, representing an image of the following: each information device and each information device with multiple ports, the device information and the port number of the information device with multiple ports connected to each information device, and a connection relationship with other information devices and/or the information device with multiple ports, to make a topology of the internal network visible to the user, on a basis of the collected specific information, and
notifies the user of the generated map information in a manner that is included in the authorization request.

2. The network system according to claim 1 , wherein
when the unknown information device is an information device conforming to the predefined protocol, the management unit
generates the map information on a basis of the device information transmitted from the information device having already been connected to the internal network and the device information transmitted from the unknown information device.

3. The network system according to claim 2 , wherein
when the unknown information device is an information device nonconforming to the predefined protocol, the management unit
generates warning information including the identification information transmitted from the unknown information device, and
notifies the user of the generated warning information in a manner that is included in the authorization request.

4. The network system according to claim 1 , wherein
the management unit searches for the unknown information device by a search system for the external network using the identification information transmitted from the unknown information device, and generates the map information on a basis of a search result.

5. The network system according to claim 1 , wherein
the internal network is a home network,
the predefined protocol is HTIP (home-network topology identifying protocol),
the device information represents a category, a maker name, a model name, and a model number of the information device, and
the identification information is a MAC (media access control) address.

6. The network system according to claim 2 , wherein
the management unit searches for the unknown information device by a search system for the external network using the identification information transmitted from the unknown information device, and generates the map information on a basis of a search result.

7. The network system according to claim 3 , wherein
the management unit searches for the unknown information device by a search system for the external network using the identification information transmitted from the unknown information device, and generates the map information on a basis of a search result.

8. The network system according to claim 2 , wherein
the internal network is a home network,
the predefined protocol is HTIP (home-network topology identifying protocol),
the device information represents a category, a maker name, a model name, and a model number of the information device, and
the identification information is a MAC (media access control) address.

9. The network system according to claim 3 , wherein
the internal network is a home network,
the predefined protocol is HTIP (home-network topology identifying protocol),
the device information represents a category, a maker name, a model name, and a model number of the information device, and
the identification information is a MAC (media access control) address.

10. The network system according to claim 4 , wherein
the internal network is a home network,
the predefined protocol is HTIP (home-network topology identifying protocol),
the device information represents a category, a maker name, a model name, and a model number of the information device, and
the identification information is a MAC (media access control) address.

11. The network system according to claim 6 , wherein
the internal network is a home network,
the predefined protocol is HTIP (home-network topology identifying protocol),
the device information represents a category, a maker name, a model name, and a model number of the information device, and
the identification information is a MAC (media access control) address.

12. The network system according to claim 7 , wherein
the internal network is a home network,
the predefined protocol is HTIP (home-network topology identifying protocol),
the device information represents a category, a maker name, a model name, and a model number of the information device, and
the identification information is a MAC (media access control) address.

Assignees

• Smk Kk

Inventors

• Kim Junsoo
• Kondo Haruhiko

Classifications

• H04L63/02 Primary

  for separating internal from external traffic, e.g. firewalls · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L43/10

  Active monitoring, e.g. heartbeat, ping or trace-route · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• H04L41/0853

  by actively collecting configuration information or by backing up configuration information · CPC title