Information processing device

Patent metadata

Field	Value
Publication number	US-2018145875-A1
Application number	US-201715795415-A
Country	US
Kind code	A1
Filing date	Oct 27, 2017
Priority date	Nov 24, 2016
Publication date	May 24, 2018
Grant date	—

Abstract

An information processing device includes a plurality of processing modules. One of the plurality of processing modules includes a storage unit storing configuration information for defining the configuration of the information processing device. When a request related to the configuration information in the storage unit is received from an external terminal, the one processing module performs the request. When the requests are received from one request source in the external terminal, each processing module performs conversion to replace a transmission source address and a port number of each request with the same internal address and internal port number. The information processing device determines whether or not to permit performing each request on the basis of the internal address and the internal port number replaced by the conversion. In this way, it is possible to simply perform exclusive control for a request for the configuration information of a redundant system.

First claim

What is claimed is:

1 . An information processing device comprising:
a plurality of processing modules, wherein, among the plurality of processing modules, one processing module includes a first storage unit that stores configuration information for defining a configuration of the information processing device, when one or more requests related to the configuration information in the first storage unit are received from an external terminal, the one processing module performs each of the requests, when the requests are received from one request source of a plurality of requests sources in the external terminal, each of the plurality of processing modules performs conversion to replace an address and a port number of each of the requests with a same internal address and a same internal port number, and the information processing device determines whether or not to permit performing each of the requests on the basis of the internal address and the internal port number replaced by the conversion.

2 . The information processing device according to claim 1 ,
wherein the determining is performed by the one processing module.

3 . The information processing device according to claim 1 ,
wherein the determining is performed by each of the plurality of processing modules.

4 . The information processing device according to claim 1 ,
wherein the information processing device further includes a second storage unit that stores the internal address and the internal port number replaced by the conversion, when each of the requests is received, the information processing device refers to the second storage unit during the determining, and when the internal address and the internal port number are not stored in the second storage unit, the information processing device stores the internal address and the internal port number replaced by the conversion in the second storage unit and determines to permit performing each of the requests.

5 . The information processing device according to claim 4 ,
wherein, when the internal address and the internal port number are stored in the second storage unit, during the determining, the information processing device compares the internal address and the internal port number stored in the second storage unit with an internal address and an internal port number replaced by the conversion for a currently received request, and when the comparison results are identical to each other, the information processing device determines to permit performing each of the requests.

6 . The information processing device according to claim 5 ,
wherein, when the comparison results are not identical to each other, during the determining, the information processing device determines not to permit performing each of the requests and returns a reset signal to the external terminal.

7 . The information processing device according to claim 1 ,
wherein each of the plurality of processing modules includes an external network interface that is connected to the external terminal through an external network and an internal network interface that is connected to an internal network constructed by a second address system which is different from a first address system of the external network connected to the external network interface, and the internal network interface in each of the plurality of processing modules performs communication between the plurality of processing modules using the second address system.

8 . The information processing device according to claim 7 ,
wherein each of the plurality of processing modules includes an operating system and a loop-back device that performs interprocess communication in the operating system, and an address system of the interprocess communication performed by the loop-back device is used as the second address system.

9 . The information processing device according to claim 8 ,
wherein each of the plurality of processing modules captures a first packet that is generated by a transmission source process and passes through the loop-back device, and the internal network interface outputs the captured first packet to the internal network such that the captured first packet is transmitted to a transmission destination process according to the second address system.

10 . The information processing device according to claim 9 ,
wherein each of the plurality of processing modules blocks the first packet passing through the loop-back device between the loop-back device and a kernel of the OS.

11 . The information processing device according to claim 10 ,
wherein the internal network interface receives a second packet addressed to the processing module, which includes each of the plurality of processing modules, from another processing module according to the second address system, and each of the plurality of processing modules sends the second packet, which is received by the internal network interface, to the transmission destination process through the loop-back device.

12 . The information processing device according to claim 11 ,
wherein each of the plurality of processing modules captures a response packet to the transmission source process which is generated by the transmission destination process and transmitted through the loop-back device, and the internal network interface outputs the captured response packet to the internal network such that the captured response packet is transmitted to the transmission source process according to the second address system.

13 . The information processing device according to claim 12 ,
wherein each of the plurality of processing modules blocks the response packet transmitted through the loop-back device between the loop-back device and the kernel of the OS.

14 . The information processing device according to claim 11 ,
wherein the internal network interface selects the second packet, sends the selected second packet to the transmission destination process through the loop-back device, and transmits packets other than the second packet to other processing modules.

Assignees

• Fujitsu Ltd

Inventors

• Shichino Nobuyuki

Classifications

• H04L61/25

  of the same type · CPC title

• H04L41/0803 Primary

  Configuration setting · CPC title

• H04L69/16

  Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] · CPC title

• H04L61/2517 Primary

  using port numbers · CPC title

• H04L41/28

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title