Device monitoring method, device monitoring apparatus, and program recording medium

Abstract

In the device monitoring method, a message sent from a first device to a second device with the second device as a destination is received (S3001), and it is determined whether the message includes a device control command for controlling the second device (S3004). If the message includes the device control command (S3004: Yes), it is further determined whether to send the message to the second device based on a predetermined condition (S3005). If it is determined that the message is to be sent to the second device (S3005: Yes), the message is sent to the second device (S3006). The predetermined condition includes a first condition, which is a condition that the first device is registered as a device with a predetermined function in a device list including information on whether each device of a plurality of devices is a device with a predetermined function. If the predetermined condition is met, it is determined that the message is to be sent to the second device.

Description

Technical Field

[0001] The present disclosure relates to a device monitoring method, a device monitoring apparatus, and a program recording medium. Background Art

[0002] In recent years, electronic control units in cars, home appliances in homes, equipment in buildings, manufacturing equipment in factories, and other devices have been connected to the local network in vehicles or buildings, and have begun to connect to the Internet via routers. By connecting these devices to the Internet, functions such as remote control, status monitoring, and collaboration of equipment in buildings have been realized. On the other hand, cyber attacks targeting these connected devices have also occurred. In current cyber attacks, routers, personal computers, smartphones, etc. are hijacked and forced to participate in attacks on other servers on the Internet. However, the hijacking of routers, personal computers, smartphones, etc. means that attackers can also attack devices in cars or buildings.

[0003] As a security countermeasure against attacks on devices connected to a network (LAN: Local Area Network, etc.) confined to a certain space such as a car or a building, there is, for example, a method disclosed in Patent Document 1. According to the method of Patent Document 1, for communications completed within the network in a car or a building, a countermeasure device determines whether a packet is passed or discarded, and communication between devices can be restricted at an arbitrary timing. Thus, for example, specific communication services within the network can be restricted.

[0004] Prior art literature

[0005] Patent Document 1: Japanese Patent No. 4082613 Summary of the invention

[0006] Technical problem to be solved by the invention

[0007] However, in the method disclosed in Patent Document 1, an administrator is sometimes required to input data (restriction criteria) that serve as a criterion for determining whether to pass or discard a packet to the countermeasure device. In a network where an administrator is not present, the data that serves as a criterion cannot be input, so the network cannot be protected. In addition, the network cannot be protected until the administrator inputs the data that serves as a criterion. That is, there is room for improvement in security countermeasures against attacks on devices.

[0008] In order to solve the above-mentioned technical problems, the present disclosure provides a device monitoring method with improved safety measures.

[0009] Technical solutions to solve problems

[0010] A device monitoring method involved in a technical solution of the present disclosure is a device monitoring method in a network system having multiple devices, the multiple devices including a first device and a second device connected to a communication network, the device monitoring method including: a first receiving step of receiving, from the first device, a message sent from the first device to the second device with the second device as a sending destination (sending target); a first determining step of determining whether the message received from the first device is a message containing a device control command for controlling the second device; a second determining step of further determining whether to send the message to the second device based on a predetermined condition when the message is a message containing the device control command; and a first sending step of sending the message to the second device when the second determining step determines that the message is to be sent to the second device, the predetermined condition including a first condition, the first condition being a condition that the first device is registered as a device having the predetermined function in a device list containing information on whether each device of the multiple devices is a device having the predetermined function, and in the second determining step, when the predetermined condition is satisfied, determining that the message is to be sent to the second device.

[0011] A device monitoring device involved in a technical solution of the present disclosure is a device monitoring device in a network system including a plurality of devices, wherein the plurality of devices include a first device and a second device connected to a communication network, and the device monitoring device includes: a receiving unit, which receives a message sent from the first device to the second device with the second device as a sending destination; a first determining unit, which determines whether the message received from the first device is a message including a device control command for controlling the second device; a second determining unit, which, if the message is a message including the device control command, further determines whether to send the message to the second device based on a predetermined condition; and a sending unit, which, if the second determining unit determines that the message is to be sent to the second device, sends the message to the second device, wherein the predetermined condition includes a first condition, wherein the first condition is a condition that the first device is registered as a device having the predetermined function in a device list including information on whether each device of the plurality of devices is a device having the predetermined function, and the second determining unit determines that the message is to be sent to the second device when the predetermined condition is satisfied.

[0012] A program recording medium according to one technical solution of the present disclosure is a program recording medium for causing a computer to execute the above-mentioned device monitoring method.

[0013] Effects of the Invention

[0014] According to the present disclosure, it is possible to realize a device monitoring method and the like with improved safety measures. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 This is a diagram showing the overall configuration of the device control command monitoring system according to the first embodiment.

[0016] Figure 2 This is a diagram showing the structure of a home gateway according to the first embodiment.

[0017] Figure 3 This is a diagram showing an example of a device list according to Implementation Example 1.

[0018] Figure 4 This is a flowchart showing an example of the main processing of the home gateway according to the first embodiment.

[0019] Figure 5 This is a flowchart showing an example of classification processing by the classification unit according to the first embodiment.

[0020] Figure 6 This is a flowchart showing an example of determination processing of the home gateway according to the first embodiment.

[0021] Figure 7 This is a diagram showing an example of the overall configuration of the device control command monitoring system according to the second embodiment.

[0022] Figure 8 This is a diagram showing another example of the overall configuration of the device control command monitoring system according to the second embodiment.

[0023] Fig. 9 This is a diagram showing the structure of a home gateway according to the second implementation mode.

[0024] Fig.10 This is a diagram showing an example of a device list according to Implementation Example 2.

[0025] Fig.11 This is a diagram showing another example of a device list according to the second embodiment.

[0026] Fig.12 This is a flowchart showing an example of classification processing by the classification unit of implementation mode 2.

[0027] Fig.13 This is a flowchart showing an example of determination processing of a home gateway according to the second embodiment.

[0028] Fig.14 This is a flowchart showing another example of the determination process of the home gateway according to the second embodiment.

[0029] Fig.15 This is a diagram showing the structure of a home gateway according to the third implementation mode.

[0030] Fig.16 This is a diagram showing an example of a status list according to Implementation Example 3.

[0031] Fig.17 This is a flowchart showing an example of determination processing of a home gateway according to the third embodiment.

[0032] Fig.18 This is a flowchart showing an example of the main processing of the home gateway in Modification 1.

[0033] Fig.19 This is a diagram showing the configuration of a home gateway according to Modification 1.

[0034] Fig. 20 This is a flowchart showing another example of the main processing of the home gateway according to Modification 1.

[0035] Fig.21 This is a diagram of the configuration of a home gateway according to variation 2.

[0036] Fig. 22 This is a flowchart showing a first example of determination processing of a home gateway according to Modification 2.

[0037] Fig.23 This is a flowchart showing a second example of the determination process of the home gateway according to the second modification.

[0038] Fig.24 This is a flowchart showing a third example of the determination process of the home gateway according to the second modification.

[0039] Fig.25 This is a flowchart showing a fourth example of the determination process of the home gateway according to the second modification.

[0040] Fig.26 This is a flowchart showing an example of determination processing of a home gateway according to Modification 3.

[0041] Fig. 27 This is a flowchart showing an example of classification processing by the classification unit of Modification Example 4.

[0042] Fig.28 This is a flowchart showing an example of classification update processing of the classification unit according to Modification Example 5.

[0043] Fig.29 This is a diagram of the structure of a home gateway according to variant example 7.

[0044] Fig.30 This is a flowchart showing an example of classification processing by the classification unit of Modification Example 7.

[0045] Fig.31 This is a diagram of the structure of a home gateway according to variant example 8.

[0046] Fig.32 This is a flowchart showing an example of determination processing of a home gateway according to a modified example.

[0047] Fig.33 It is a diagram showing an example of screen display according to a modification.

[0048] Fig.34 It is a diagram showing an example of screen display according to a modification.

[0049] Fig.35 It is a diagram showing an example of screen display according to a modification.

[0050] Fig.36 It is a diagram showing an example of screen display according to a modification.

[0051] Fig.37 It is a diagram showing an example of screen display according to a modification.

[0052] Fig.38 It is a diagram showing an example of screen display according to a modification.

[0053] Fig.39 It is a diagram showing an example of screen display according to a modification.

[0054] Description of symbols

[0055] 10. Internet

[0056] 11, 11a, 11b Residential Network

[0057] 12 Network for IT equipment

[0058] 13.13b Home appliance network

[0059] 20, 20a, 20b, 20c, 20d, 20e, 20f Home gateway

[0060] 30 PC

[0061] 40 Electronic lock

[0062] 41 Air conditioning

[0063] 42 lighting

[0064] 43 Controller

[0065] 50 Terminal

[0066] 60 Router

[0067] 70 Hub

[0068] 100 Receiving Department

[0069] 110 Initial Equipment List Preparation Department

[0070] 120 Unregistered Equipment Detection Department

[0071] 130 Classification Department

[0072] 140 Home appliance message determination unit (first determination unit)

[0073] 150 Transfer determination unit (second determination unit)

[0074] 160 Sending Department

[0075] 170 Notification Department

[0076] 180 Communication destination change department

[0077] 200 Device list holding unit

[0078] 210 Status holding unit

[0079] 500, 501, 502, 503, 510, 511, 512, 513, 514, 515, 516, 517, 518 Display

[0080] 520 at a glance DETAILED DESCRIPTION

[0081] A device monitoring method involved in a technical solution of the present disclosure is a device monitoring method in a network system having multiple devices, the multiple devices including a first device and a second device connected to a communication network, the device monitoring method including: a first receiving step of receiving, from the first device, a message sent from the first device to the second device with the second device as a sending destination (sending target); a first determining step of determining whether the message received from the first device is a message containing a device control command for controlling the second device; a second determining step of further determining whether to send the message to the second device based on a predetermined condition when the message is a message containing the device control command; and a first sending step of sending the message to the second device when the second determining step determines that the message is to be sent to the second device, the predetermined condition including a first condition, the first condition being a condition that the first device is registered as a device having the predetermined function in a device list containing information on whether each device of the multiple devices is a device having the predetermined function, and in the second determining step, when the predetermined condition is satisfied, determining that the message is to be sent to the second device.

[0082] Thus, in the communication network, it is possible to suppress the situation where a message containing a device control command from a device that does not have the predetermined function is sent to a second device. For example, in a case where the device that does not have the predetermined function is more susceptible to an external network attack than the device that has the predetermined function, it is possible to suppress the situation where a message is sent from a first device that does not have the predetermined function to a second device. In addition, for example, even if a device that does not have the predetermined function is attacked by some kind of attack and pretends to be a "device with the predetermined function", the pretending device can be determined as a "device that does not have the predetermined function" based on the device list. Thus, a device monitoring method with improved security measures can be implemented.

[0083] In addition, for example, the predetermined condition may also include a second condition, and the second condition is that one of the working state of the second device after being controlled by the device control command and the working state of the second device before being controlled by the device control command is a pre-set working state. In the second determination step, if the second condition is met, it is determined that the message is sent to the second device.

[0084] Thus, when an abnormal device control command is sent and the device is controlled by the abnormal control command to a state that does not normally occur, the abnormality of the device control command can be detected. For example, even if the device-related information contained in the message is disguised by an attacker, the possibility of detecting the abnormal device control command can be increased.

[0085] In addition, for example, it may include: an updating step, in which, when the second condition is satisfied, the status list indicating the working status of the second device is further updated to the working status of the second device after being controlled by the device control command.

[0086] Thus, when the second condition is satisfied, the state list can be updated to the latest state. For example, when determining whether the second condition is satisfied, the state list updated to the latest state can be used, so the determination can be performed efficiently.

[0087] In addition, for example, the plurality of devices may be installed indoors, and the second condition may further include: at the time point of the second determination step, the user is in a predetermined room among the plurality of rooms in the room.

[0088] This makes it possible to detect that the device control command is abnormal while also taking the user's state into consideration. For example, it is possible to more accurately determine a state that does not normally occur, such as a device operating in a room where the user is not present.

[0089] In addition, for example, in the second determination step, when the first condition is not met, a further determination is made as to whether the second device is a device having the predetermined function; when the second device is not a device having the predetermined function, it is determined that the message is sent to the second device.

[0090] Thus, when the second device does not have the predetermined function, the message from the first device is sent to the second device. That is, it is possible to prevent the message to the second device from being excessive (more than necessary) and not being sent. The second device can perform operations corresponding to the device control command.

[0091] In addition, for example, the predetermined condition may also include a third condition, wherein the third condition is a condition that the first device is connected to a first connection port, and the first connection port is a connection port for connecting a device having the predetermined function. In the second determination step, if the third condition is met, it is determined that the message is sent to the second device.

[0092] Thus, when the first device is connected to the first connection port, that is, when the first device is connected to the connection port for connecting a device having a predetermined function, a message from the first device can be sent to the second device. Thus, when the possibility that the message contains an abnormal control command is low, the second device can be operated.

[0093] In addition, for example, in the second determination step, when the third condition is not satisfied, a further determination is made as to whether the first device is a device capable of communicating with the second device; when the first device is a device capable of communicating with the second device, it is determined that the message is sent to the second device.

[0094] Thus, even when the first device is connected to a connection port other than the first connection port, a message from the first device can be sent to the second device. That is, communication between specific devices can be enabled regardless of the connection port. Thus, a flexible network configuration can be achieved.

[0095] In addition, for example, it may also include: a classification step of classifying whether each of the multiple devices is a device with the predetermined function, and in the classification step, when the second device is a device with the predetermined function and the second device is connected to a second connection port different from the first connection port, or when the second device is not a device with the predetermined function and the second device is connected to the first connection port, the predetermined terminal is notified.

[0096] As a result, when the combination of a device having a predetermined function and a connection port does not match, the user holding the terminal can be notified of this fact.

[0097] In addition, for example, it may also include: a classification step of classifying whether each of the multiple devices is a device with the predetermined function, the first device is a device connected to the first connection port and does not have the predetermined function, and the second device is a device connected to the first connection port and has the predetermined function. In the classification step, when the first device is not allowed to communicate with the second device, the message is sent from the first device to the second device via a gateway to which the second device is connected and capable of executing the processing of the second determination step.

[0098] Thus, when communication between the first device and the second device is not permitted, a message from the first device is input to the gateway. Whether to send the message to the second device can be determined in the gateway, thereby preventing an abnormal control command from being sent to the second device.

[0099] In addition, for example, the method may further include: a device list preparation step of sending a determination message for determining whether each of the plurality of devices has a predetermined function to each of the plurality of devices, and preparing the device list based on a response message to the determination message.

[0100] Thus, for example, by preparing a device list in advance, the second determination step can be performed efficiently.

[0101] In addition, for example, it may also include: a device list updating step for updating the device list created in the device list creating step, and the device list updating step includes: a second sending step for sending the determination message to the plurality of devices respectively; a second receiving step for receiving the response message to the determination message; a third determination step for determining whether the determination result based on the response message of whether the device has a predetermined function is consistent with the registration information of the device in the device list; and an updating step for updating the registration status of the device in the device list based on the determination result when it is determined to be inconsistent in the third determination step.

[0102] Thereby, even when a device is added or deleted, a device list reflecting that fact can be created.

[0103] In addition, for example, the predetermined function may include supporting (corresponding to) a predetermined communication protocol in the communication network.

[0104] Thus, it is possible to prevent a device control command from being sent to a second device from a device that does not support (respond to) a predetermined communication protocol. For example, even if a first device pretends to be a device that supports a predetermined communication protocol, if the first device is registered in a device list as a device that does not support the predetermined communication protocol, it is possible to prevent an abnormal control command from being sent to a second device.

[0105] In addition, for example, the predetermined communication protocol may be ECHONET Lite (registered trademark) or ZigBEE (registered trademark).

[0106] This can prevent a device control command from being sent to the second device from a device that does not communicate using short-range wireless communication such as ECHONET Lite or ZigBEE.

[0107] In addition, for example, in the first sending step, when the message is not a message including the device control command, the message is sent to the second device.

[0108] Thus, when the message does not include a device control command, the message from the first device is sent to the second device. That is, it is possible to prevent the message to the second device from being excessively (more than necessary) sent.

[0109] In addition, for example, the second device may be a home appliance, and the device control command may be a command for controlling the home appliance.

[0110] This can prevent abnormal control commands from being sent to home appliances. In other words, it can prevent home appliances from performing abnormal operations based on abnormal control commands. This can improve security measures for home appliances in a communication network connected to the home appliances.

[0111] Furthermore, for example, each of the plurality of devices may be disposed in a house.

[0112] This can prevent the second device in the house from being sent an abnormal control command. In other words, it can prevent the second device from performing an abnormal operation according to the abnormal control command. This can improve the security measures for the device in the communication network connected to the device in the house.

[0113] In addition, a device monitoring device according to a technical solution of the present disclosure is a device monitoring device in a network system having a plurality of devices, wherein the plurality of devices include a first device and a second device connected to a communication network, and the device monitoring device includes: a receiving unit that receives a message sent from the first device to the second device, with the second device as a sending destination; a first determining unit that determines whether the message received from the first device is a message containing a device control command for controlling the second device; a second determining unit that further determines whether to send the message to the second device based on a predetermined condition when the message is a message containing the device control command; and a sending unit that sends the message to the second device when the second determining unit determines that the message is to be sent to the second device, wherein the predetermined condition includes a first condition, wherein the first condition is that the first device is registered as a device having the predetermined function in a device list containing information on whether each device of the plurality of devices is a device having the predetermined function, and the second determining unit determines that the message is to be sent to the second device when the predetermined condition is satisfied. In addition, a program recording medium according to a technical solution of the present disclosure is a program recording medium for causing a computer to execute the above-mentioned device monitoring method.

[0114] Thereby, the same effect as the above-mentioned device monitoring method is achieved.

[0115] In addition, these overall or specific technical solutions can be implemented by a system, method, integrated circuit, computer program or non-transient recording medium such as a computer-readable CD-ROM, or by any combination of systems, methods, integrated circuits, computer programs or recording media. The program can be pre-stored in a recording medium or provided to the recording medium via a wide area communication network including the Internet.

[0116] Hereinafter, the device monitoring method and the like of the embodiments of the present disclosure will be described with reference to the accompanying drawings. In addition, the embodiments described below all represent a preferred specific example of the present disclosure. That is, the numerical values, shapes, materials, constituent elements, configurations of constituent elements, connection forms, steps, order of steps, etc. shown in the following embodiments are examples of the present disclosure and are not intended to limit the present disclosure. The present disclosure is determined based on the records of the claims. Therefore, the constituent elements of the following embodiments that are not recorded in the independent claims of the present disclosure are not necessarily required to solve the technical problems of the present disclosure, but are described as constituent elements constituting a more preferred technical solution.

[0117] (Implementation Method 1)

[0118] [1. System composition]

[0119] Here, as an embodiment of the present disclosure, the device control command monitoring system involved in the present disclosure is described with reference to the accompanying drawings. In addition, in this embodiment, a situation where a home appliance (home appliance device) and a PC (personal computer) are connected to a network (in-home network 11) in a home (in-home) is shown. That is, in this embodiment, the device control command monitoring system can also be said to be an in-home device monitoring system.

[0120] [1.1 Overall structure of the equipment control command monitoring system]

[0121] Figure 1 It is a diagram showing the overall configuration of the device control command monitoring system according to the present embodiment.

[0122] like Figure 1 As shown, the device control command monitoring system includes the Internet 10, the in-house network 11, the home gateway 20, the PC 30, the electronic lock 40, the air conditioner 41, the lighting 42, the controller 43, and the terminal 50. The Internet 10 is a general Internet. The PC 30 is a general personal computer. The home gateway 20, the PC 30, the electronic lock 40, the air conditioner 41, the lighting 42, and the controller 43 are connected by the in-house network 11. When the PC 30, the electronic lock 40, the air conditioner 41, the lighting 42, and the controller 43 communicate with the server or the terminal 50 outside the house, the communication is performed via the home gateway 20. The in-house network 11 is an example of a communication network.

[0123] The home gateway 20 is connected to the PC 30, the electronic lock 40, the air conditioner 41, the lighting 42, and the controller 43, and has the function of mediating (relaying) the communication between the connected devices or the communication between the connected devices and the Internet 10. In addition, the home gateway 20 manages the information such as the IP (Internet Protocol) address required for the communication between the PC 30, the electronic lock 40, the air conditioner 41, the lighting 42, and the controller 43, and allocates the IP address and notifies the information required for communication according to the request from each device. In addition, the home gateway 20 monitors whether an abnormal device control command is being sent to the electronic lock 40, the air conditioner 41, and the lighting 42, and blocks the abnormal device control command as needed. The home gateway 20 is an example of a device monitoring device.

[0124] The electronic lock 40, the air conditioner 41, and the lighting 42 are devices (home appliances) that receive device control commands and interpret the contents of the received device control commands to work. In addition, the electronic lock 40, the air conditioner 41, and the lighting 42 notify other devices of the working status of each device or the information (sensor information) detected by the sensors carried by each device. For example, when the electronic lock 40 performs a locking operation, after the operation is completed, a message notifying the fact that it is in a locked state is sent to other devices. When the unlocking operation is performed, a message notifying the fact that it is in an unlocked state is also sent to other devices. In addition, for example, the air conditioner 41 notifies other devices of the working state such as whether it is in a working (ON) state or a non-working (OFF) state, the working mode of the air conditioner 41 (automatic / cooling / heating / dehumidification / humidification / air supply, etc.), the set temperature set for the air conditioner 41, the information of the sensor carried on the air conditioner 41 (room temperature / humidity / external air temperature), the set value of the air conditioner 41 such as wind direction and wind volume, etc. In addition, for example, the lighting 42 will be notified to other devices of the operating state of ON or OFF, the setting value when having a dimming function, etc. These notifications can be performed regularly, when the state or value has changed, or when inquired from other devices.

[0125] The controller 43 is a device for controlling the electronic lock 40, the air conditioner 41, and the lighting 42, and controls these devices by sending device control commands to the electronic lock 40, the air conditioner 41, and the lighting 42. There are cases where the controller 43 sends device control commands based on input from a user (also recorded as a user) and cases where the device control commands are automatically sent based on pre-set conditions. The controller 43 can be a device dedicated to the communication network or a terminal such as a smart phone.

[0126] The terminal 50 is a device connected to the Internet 10 via a mobile phone network (wireless), and is used to view the status of the electronic lock 40, the air conditioner 41, and the lighting 42 from outside the house, or to receive notifications from the home gateway 20. In addition, there is a server (not shown) connected to the Internet 10, and the home gateway 20 and the terminal 50 communicate with the server via the Internet 10, thereby the home gateway 20 and the terminal 50 can also communicate. The terminal 50 is an example of a predetermined terminal. The terminal 50 may also be a portable terminal.

[0127] In addition, in this embodiment, as devices for receiving control commands, the electronic lock 40, the air conditioner 41, and the lighting 42 are used as the components of the device control command monitoring system, but it is not necessarily these three devices, and it can also be other devices, and it can also be not three. Further, these devices not only receive device control commands, but also send device control commands to other devices, and can also communicate other than device control commands. In addition, these devices can also communicate with a server (not shown) on the Internet 10 via the Internet 10.

[0128] In addition, the terminal 50 is assumed to be connected to the Internet 10 , but is not limited to this. It can also be directly connected to the home gateway 20 to view the status of the electronic lock 40 , the air conditioner 41 , and the lighting 42 or receive notifications from the home gateway 20 .

[0129] [1.2 Configuration of the Home Gateway 20]

[0130] Figure 2 It is a diagram showing the configuration of the home gateway 20 according to the present embodiment.

[0131] like Figure 2 As shown, the home gateway 20 includes a receiving unit 100 , an initial device list creating unit 110 , an unregistered device detecting unit 120 , a classifying unit 130 , a home appliance message determining unit 140 , a forwarding determining unit 150 , a transmitting unit 160 , and a device list holding unit 200 .

[0132] In addition, these structures are structures representing functions, and are realized by the processing unit in the home gateway 20 reading and executing the program stored in the storage unit, storing predetermined data in the storage unit, or performing data transmission and reception via the input and output unit, or by a combination thereof.

[0133] The receiving unit 100 receives communication messages from the Internet 10 or the home network 11. The receiving unit 100 receives not only communication messages destined for the home gateway 20 but also all communication messages flowing through the communication line to which the home gateway 20 is connected.

[0134] The home gateway 20 is connected to the in-home network 11 for the initial device list making unit 110. When the initial device list making unit 110 is started for the first time, when the user instructs the initialization of the device list held in the device list holding unit 200, when there is no device list in the device list holding unit 200, or when the device list has been deleted, the device list making unit 110 performs a process of making a device list. The initial device list making unit 110 searches for devices connected to the in-home network 11 and registers the found devices in the device list. In addition, the initial device list making unit 110 requests the classification unit 130 to classify the devices registered by the initial device list making unit 110. The details will be described later, but the device list includes information about a plurality of devices connected to the in-home network 11. In this embodiment, the device list includes information about the PC 30, the electronic lock 40, the air conditioner 41, the lighting 42, and the controller 43. In addition, the device list may also include information about the terminal 50 connected to the home gateway 20.

[0135] The unregistered device detection unit 120 compares information related to at least one of the source and destination (target) of the communication message received by the receiving unit 100 with information registered in the device list holding unit 200, and checks whether the device of at least one of the source and destination of the communication message is a device registered in the device list holding unit 200. In the case where the device of at least one of the source and destination of the communication message is not registered in the device list holding unit 200, the unregistered device detection unit 120 requests the classification unit 130 to classify the device and register it in the device list holding unit 200.

[0136] The classification unit 130 classifies each of the multiple devices connected to the in-home network 11 as to whether it is a device with a predetermined function. The predetermined function refers to, for example, the fact that the device supports (handles) a predetermined communication protocol in the in-home network 11. In the present embodiment, the classification unit 130 classifies each of the multiple devices connected to the in-home network 11 as a home appliance or other than a home appliance. The classification unit 130, for example, classifies a device that can communicate using a protocol for controlling home appliances (an example of a predetermined communication protocol) as a home appliance, and classifies a device that cannot communicate using a protocol for controlling home appliances as other than a home appliance. In addition, the multiple devices include, for example, at least one home appliance.

[0137] In addition, the predetermined communication protocol is a communication protocol for performing short-range wireless communication through communication between the home gateway 20 and the terminal 50, such as ECHONET Lite (registered trademark, the same below) or ZigBEE (registered trademark, the same below), but is not limited thereto. The classification unit 130 registers, for example, in ECHONET Lite, a device that correctly responds to the inquiry message sent by the home gateway 20 as a home appliance, and registers a device that does not respond and a device that does not respond correctly as other than a home appliance.

[0138] The home appliance message determination unit 140 determines whether the received message received by the receiving unit 100 is a message (home appliance message) related to a protocol for controlling home appliances, and when it is determined that the received communication message is a home appliance message, it requests the forwarding determination unit 150 to determine whether to send (forward) the message to a destination. When determining whether the received message is a home appliance message, for example, in ECHONET Lite, since the standard book states that communication is performed using a port number 3610 of UDP (User Datagram Protocol), when the destination port number of the received message is 3610, the home appliance message determination unit 140 may determine that the message is a home appliance message. In addition, in ECHONET Lite, since the standard also states that the first 2 bytes of the communication data are set to 0x1081 or 0x1082, the home appliance message determination unit 140 may determine that the received message is a home appliance message when the first 2 bytes of the data portion of the received message are 0x1081 or 0x1082. In addition, the home appliance message determination unit 140 may determine by combining the above or by using other information.

[0139] In this way, the home appliance message determination unit 140 determines whether the communication message is consistent with the protocol assumed by the home gateway 20 based on the content of the communication message. When the home gateway 20 supports (handles) multiple protocols, the home appliance message determination unit 140 determines which protocol the communication message is a message of. In this case, when the home appliance message determination unit 140 determines that the communication message does not conform to any protocol, it determines that it is not a message related to the protocol for controlling the home appliance. The home appliance message determination unit 140 is an example of a first determination unit.

[0140] When the message received by the home appliance message determination unit 140 is determined to be a home appliance message, the forwarding determination unit 150 further determines whether to send (forward) the message to the destination described in the received message. The determination process will be described in detail later. The forwarding determination unit 150 is an example of a second determination unit.

[0141] When the message received by the receiving unit 100 is not a home appliance message or when it is determined to be forwarded by the forwarding determination unit 150 , the transmitting unit 160 transmits (forwards) the message to the destination.

[0142] The device list holding unit 200 holds information on a plurality of devices connected to the home network 11 in a list format as a device list. Figure 3 This is a diagram showing an example of a device list according to this embodiment.

[0143] like Figure 3 As shown, in the device list, identifiers (e.g., MAC (Media Access Control) addresses) and device categories classified in the classification unit 130 are registered in association. In addition, in the device list, information other than MAC addresses and device categories may be registered, and information other than MAC addresses may be registered as identifiers. In the device list, for example, IP addresses may be registered, and in the case where the home gateway 20 has multiple communication ports for connecting communication lines, communication ports for connecting devices may also be registered. In addition, in the device list, control messages for controlling home appliances by only sending, only receiving, or a transceiver device may be registered, and detailed categories such as whether the home appliances are electronic locks, air conditioners, lighting, or controllers may also be registered.

[0144] In addition, in the above description, it is assumed that the classification unit 130 classifies the multiple devices connected to the residential network 11 into home appliances and non-home appliances, but it is not limited to this, and can also be classified into devices that can be controlled by the home gateway 20 and devices that cannot be controlled. Devices that cannot be controlled by the home gateway 20 include, for example, devices whose control methods are not installed in the home gateway 20. The device that can be controlled by the home gateway 20 is a device that has a function that can be controlled by the control method installed in the home gateway 20, and is an example of a device with a predetermined function. The device can also be said to be a controlled object device of the home gateway 20. In addition, the device that cannot be controlled by the home gateway 20 is a device that does not have a function that can be controlled by the control method installed in the home gateway 20, and is an example of a device that does not have a predetermined function.

[0145] In addition, the classification unit 130 is not limited to two types of classification, and may be classified into three or more types. Alternatively, the classification unit 130 may classify by the type of the protocol, for example, when a plurality of devices supporting (responding to) different protocols for controlling devices are connected to the home network 11, and when devices supporting the same protocol communicate with each other.

[0146] In addition, for example, when the plurality of devices includes only one home appliance, it is not necessary to create a device list.

[0147] [1.3 Operation of the equipment control command monitoring system]

[0148] The operation of the device control command monitoring system includes the following processing.

[0149] (1) Main Processing

[0150] (2) Classification

[0151] (3) Determination Process

[0152] This will be described below using the diagrams. In addition, the operation of the device control command monitoring system may include at least (3) determination processing.

[0153] [1.3.1 Work during main processing]

[0154] Figure 4 This is a flowchart showing an example of the main process of the home gateway 20 according to the present embodiment.

[0155] like Figure 4 As shown, first, when the home gateway 20 does not have a device registered in the device list holding unit 200 at startup, the initial device list making unit 110 makes a device list (initial device list) (S1001). In order to extract devices connected to the residential network 11, the initial device list making unit 110 sends an ARP (Address Resolution Protocol) message to all IP addresses in the same subnet, and registers the devices that have responded in the device list holding unit 200.

[0156] Next, the initial device list creation unit 110 requests the classification unit 130 to classify the devices registered in the device list storage unit 200 , and the classification unit 130 performs classification processing ( S1002 ).

[0157] Steps S1001 and S1002 can also be said to be processes for initial setting.

[0158] After the classification process is completed, the home gateway 20 receives the communication message and executes the determination process (S1003). The home gateway 20 repeatedly performs the determination process every time it receives a communication message.

[0159] In the preparation of the device list, an ARP message is sent and the devices that respond are registered in the device list holding unit 200, but the present invention is not limited to this. For example, an ICMP (Internet Control Message Protocol) Echo Message may be sent and the device list may be prepared based on the response message.

[0160] [1.3.2 Work during classification processing]

[0161] Figure 5 This is a flowchart showing an example of the classification process of the classification unit 130 according to the present embodiment.

[0162] like Figure 5 As shown, first, the classification unit 130 receives a request from the initial device list creation unit 110 or the unregistered device detection unit 120, connects to the home network 11 using a protocol for controlling home appliances, and sends a message (determination message) to each of the multiple devices for determining whether communication with the multiple devices is possible (S2001). Here, the classification unit 130 can send the determination message in a broadcast or multicast manner that can be received by unspecified devices connected to the home network 11, or can send it individually to the devices registered in the device list holding unit 200.

[0163] Next, the classifier 130 determines whether the device that received the determination message has returned a response message (S2002). When the classifier 130 sends the determination message by broadcast or multicast, after sending the determination message, the classifier 130 waits for the response message until a certain time has passed, and determines that the device that sent the response message is "responded", and the device that did not send the response message until a certain time has passed is "no response". In addition, when the classifier 130 sends a determination message to a device individually, if a response message is received, it is determined as "responded", and if a response message is not received until a certain time has passed, it is determined as "no response".

[0164] The classifying unit 130 determines that the device determined as "no response" (S2002: No) in step S2002 is not a home appliance, and registers it as "other than home appliance" in the device list holding unit 200 (S2003). The classifying unit 130 determines that the device determined as "responded" (S2002: Yes) in step S2002 is a home appliance, and registers it as "other than home appliance" in the device list holding unit 200 (S2004). When the classifying unit 130 registers "home appliance" or "other than home appliance" in the device category of the device list held by the device list holding unit 200 in step S2003 or step S2004, if the information other than the device category of the device list does not exist, it is also registered.

[0165] In this way, the classification unit 130 sends a determination message for determining whether each of the plurality of devices is a home appliance to each of the plurality of devices, and creates a device list based on a response message to the determination message. Steps S2001 to S2004 (S1002) are an example of a device list creation step. In addition, steps S2002 to S2004 are an example of a classification step for classifying whether a device is a device with a predetermined function (e.g., whether it is a home appliance).

[0166] [1.3.3 Work during judgment processing]

[0167] Figure 6 This is a flowchart showing an example of the determination process of the home gateway 20 according to the present embodiment.

[0168] like Figure 6 As shown, first, the receiving unit 100 receives a communication message (S3001). The receiving unit 100 receives a communication message sent from a source device (an example of a first device) to a destination device (an example of a second device) with the destination device as the destination from the source device. Step S3001 is an example of a first receiving step.

[0169] Next, the unregistered device detection unit 120 determines whether the device is registered in the device list of the device list holding unit 200 based on the information (MAC address, IP address, port number, etc.) of the source device of the received communication message (received message) (S3002).

[0170] When the unregistered device detection unit 120 determines that the device is "unregistered" in step S3002 (S3002: No), the unregistered device detection unit 120 requests the classification unit 130 to perform the classification process. Then, the classification unit 130 performs the classification process (S3003).

[0171] When it is determined as "registered" in step S3002 (S3002: Yes), or when it is determined as "unregistered" and the classification process is performed (S3003), the home appliance message determination unit 140 determines whether the received message is a home appliance message (S3004). The home appliance message determination unit 140 performs the determination in step S3004, for example, based on whether the destination port number present in the received message is 3610 or whether the first 2 bytes of the data portion of the communication message are 0x1081 or 0x1082.

[0172] When the home appliance message determination unit 140 determines in step S3004 that the received message is "a home appliance message" (S3004: Yes), the forwarding determination unit 150 is requested to make an additional determination. The received message "is a home appliance message" means that the device of the sending destination is a home appliance and the message contains a device control command for controlling the home appliance. Step S3004 is an example of a first determination step. In addition, when the home appliance message determination unit 140 determines in step S3004 that the received message is "not a home appliance message" (S3004: No), the sending unit 160 is requested to send the message. The received message determined to be "not a home appliance message" is a normal message, such as a message used for communication in a browser, but is not limited to this.

[0173] The forwarding determination unit 150 obtains the device category information of the device of the source of the received message from the device list holding unit 200, and determines whether the model category of the device of the source is a home appliance (S3005). When the forwarding determination unit 150 determines that the device of the source is a "home appliance" in step S3005 (S3005: Yes), the sending unit 160 is requested to send the message. In addition, when the forwarding determination unit 150 determines that the device of the source is "other than a home appliance" in step S3005 (S3005: No), the received message is not sent and the determination process is ended. Step S3005 is an example of a second determination step for determining whether to send the received message to the device of the destination based on a predetermined condition. Whether the device of the source is a "home appliance" is an example of a predetermined condition. For example, whether the device of the source is a "home appliance" can be determined based on whether the first device is registered as a device with a predetermined function in the device list. In addition, whether the first device is registered as a device with a predetermined function in the device list is an example of the first condition. Alternatively, it can be said that in step S3005, when the first condition is satisfied, it is determined that the received message is to be sent.

[0174] The transmission unit 160 receives the message transmission request from the home appliance message determination unit 140 or the forwarding determination unit 150 and transmits the message (S3006), and ends the determination process. For example, when the forwarding determination unit 150 determines "yes" in step S3005, the transmission unit 160 transmits the received message to the device of the transmission destination. Step S3006 is an example of the first transmission step.

[0175] In addition, after executing the classification processing (S3003), the home gateway 20 requests the home appliance message determination unit 140 to determine whether the received message is a home appliance, but this is not limited to this. The home gateway 20 can either end the determination processing after the classification processing and wait to receive the next message, or notify the sending source of the received message of an error.

[0176] In addition, the unregistered device detection unit 120 determines whether the device is registered in the device list based on the information of the device of the source of the received message, but is not limited to this. It can also determine whether the device is registered in the device list based on the device information of the destination of the received message, and can also determine based on the device information of both the destination and the source.

[0177] [1.4 Effects of Implementation Method 1]

[0178] In this embodiment, the devices connected to the residential network 11 are classified into "home appliances" and "other than home appliances", and only "home appliance messages" sent by home appliances are forwarded in the home gateway 20. As a result, it is possible to suppress the situation where an abnormal "home appliance message" sent from a "other than home appliances" device, which is easily attacked by an external network first, to a "home appliance" device is sent to a second device. In other words, it is possible to prevent the "other than home appliances" from abnormally sending "home appliance messages". In addition, when the home gateway 20 is started, the initial device list preparation unit 110 prepares a device list and classifies the devices into "home appliances" and "other than home appliances". As a result, even if a device is attacked in some way and pretends to be a "home appliance" from the way, the home gateway 20 will determine the pretended device as "other than home appliances", so it is possible to prevent the sending of abnormal "home appliance messages" from the pretended device.

[0179] (Implementation Method 2)

[0180] In the first embodiment of the present disclosure, the in-home network 11 is a single network to which various devices are connected, and whether or not to forward a device control command is determined by the home gateway 20 according to the type of the device at the transmission source.

[0181] In this embodiment, a configuration is described in which a home network 11 is divided into an IT equipment network 12 to which a PC 30 or a terminal 50 (eg, a portable terminal such as a smartphone) is connected and a home appliance network 13 to which home appliances are connected by a home gateway 20 .

[0182] Hereinafter, a device control command monitoring system according to a second embodiment of the present disclosure will be described.

[0183] [2. System composition]

[0184] Here, as Embodiment 2 of the present disclosure, a device control command monitoring system according to the present disclosure will be described with reference to the drawings. Components having the same functions as those in Embodiment 1 of the present disclosure are denoted by the same reference numerals, and detailed descriptions thereof are omitted.

[0185] [2.1 Overall structure of the equipment control command monitoring system]

[0186] Figure 7 It is a diagram showing an example of the overall configuration of the device control command monitoring system according to the present embodiment.

[0187] like Figure 7 As shown, the device control command monitoring system may also include the Internet 10, a residential network 11a, an IT equipment network 12, a home appliance network 13, a home gateway 20a, a PC 30, an electronic lock 40, an air conditioner 41, lighting 42, a controller 43, a terminal 50, and a router 60.

[0188] The home gateway 20a is connected to the electronic lock 40, the air conditioner 41, the lighting 42, the controller 43, and the router 60, and mediates the communication between the connected devices. The home gateway 20a has two connection ports: a connection port for connecting to the communication line of the IT equipment network 12 and a connection port for connecting to the communication line of the home appliance network 13. Figure 7 In the home gateway 20a, there is one connection port (IT equipment connection port) for the IT equipment network 12, and four connection ports (home appliance connection ports) for the home appliance network 13. The IT equipment connection port is connected to a router 60, and the home appliance connection ports are connected to home appliances such as an electronic lock 40, an air conditioner 41, a lighting 42, and a controller 43. Whether each connection port is an IT equipment connection port or a home appliance connection port can be determined in advance, can be set by the user, or can be automatically determined by the home gateway 20a. As a method for automatically making a determination, for example, a connection port to which a device classified as "home appliance" by the classification unit 130 of the home gateway 20a is connected may be determined as a "connection port for home appliance", and a connection port to which a device classified as "other than home appliance" by the classification unit 130 is connected may be determined as a "connection port for IT equipment", or a connection port to which a device that is sending and receiving home appliance messages is connected may be determined as a "connection port for home appliance", and other connection ports may be determined as "connection ports for IT equipment" based on communication messages sent and received by each device, or other methods may be used. In addition, a "connection port for home appliance" is an example of a first connection port, and an "connection port for IT equipment" is an example of a second connection port.

[0189] The router 60 is a device for connecting the Internet 10 and the home network 11a. The home gateway 20a and the PC 30 are connected to the router 60. When the home gateway 20a or the PC 30 communicates with a server on the Internet 10, the communication is performed via the router 60. In addition, the terminal 50 may also be connected to the router 60.

[0190] In addition, the overall configuration of the device control command monitoring system of this embodiment is not limited to Figure 7 The composition shown. Figure 8It is a diagram showing another example of the overall configuration of the device control command monitoring system according to the present embodiment.

[0191] like Figure 8 As shown, the device control command monitoring system may also include the Internet 10, a residential network 11b, an IT equipment network 12, a home appliance network 13b, a home gateway 20a, a PC 30, an electronic lock 40, an air conditioner 41, a lighting 42, a controller 43, a terminal 50, a router 60, and a hub 70. Figure 7 There is a difference in whether each home appliance is directly connected to the home gateway 20 a or connected to the home gateway 20 a via the hub 70 .

[0192] The home gateway 20a is connected to a router 60 and a hub 70. The home gateway 20a has one IT equipment connection port and one home appliance connection port. The IT equipment connection port is connected to the router 60, and the home appliance connection port is connected to the hub 70. Whether each connection port is an IT equipment connection port or a home appliance connection port can be determined in advance, can be set by the user, or can be automatically determined by the home gateway 20a.

[0193] The hub 70 is connected to the home gateway 20a, the electronic lock 40, the air conditioner 41, the lighting 42, and the controller 43, and relays communications.

[0194] [2.2 Configuration of Home Gateway 20a]

[0195] Fig. 9 This is a configuration diagram of the home gateway 20a of the present embodiment. The same reference numerals are given to the components having the same functions as those in Embodiment 1, and detailed descriptions are omitted. The home gateway 20a includes a receiving unit 100, an initial device list making unit 110, an unregistered device detecting unit 120, a classifying unit 130, a home appliance message determining unit 140, a forwarding determining unit 150, a sending unit 160, a notifying unit 170, and a device list holding unit 200. The home gateway 20a further includes a notifying unit 170 on the basis of the home gateway 20 of Embodiment 1. In addition, the residential networks 11a and 11b are also described below as simply the residential network 11.

[0196] The classification unit 130 classifies the devices connected to the residential network 11 as home appliances or other than home appliances, similarly to the classification unit 130 of the first embodiment. Furthermore, the classification unit 130 of the present embodiment determines whether the combination of the device category and the connected connection port as a classification result is appropriate, and notifies the user via the notification unit 170 when the combination is abnormal. For example, the classification unit 130 determines that the combination of a device classified as a "home appliance" and connected to a "home appliance connection port" and a device classified as "other than home appliances" connected to a "IT equipment connection port" are correct combinations, and determines that the combination of a device classified as "other than home appliances" connected to a "home appliance connection port" and a device classified as a "home appliance" connected to a "IT equipment connection port" are abnormal combinations.

[0197] When the home appliance message determination unit 140 determines that the received message is a home appliance message, the forwarding determination unit 150 uses the information of whether the connection port that received the communication message is a connection port for IT equipment or a connection port for home appliances to determine whether to send (forward) the received message to the destination recorded in the received communication message.

[0198] When the combination of the classification result and the connected connection port is incorrect, the notification unit 170 notifies the user. As a notification method, a message may be displayed on the terminal 50, an email may be sent to a pre-registered email address, a voice notification may be made by calling a pre-registered phone number, or other methods may be used to notify other devices.

[0199] The device list storage unit 200 stores information on devices connected to the home network 11 in a list format as a device list. Fig.10 and Fig.11 The device list of this embodiment is described. Fig.10 This is a diagram showing an example of a device list according to this embodiment. Fig.11 This is a diagram showing another example of the device list according to the present embodiment.

[0200] like Fig.10 As shown, the device list of this embodiment includes information on whether the device is connected to the IT device connection port or the home appliance connection port of the home gateway 20a in addition to the information held in the device list of the first embodiment.

[0201] In addition, if Fig.11 As shown, it can also be Fig.10 The displayed device list includes a flag indicating whether communication is permitted when the combination of device type and connection port is abnormal. This flag may be acquired from the user in advance, for example.

[0202] [2.3 Operation of the equipment control command monitoring system]

[0203] The operation of the device control command monitoring system includes the following processing.

[0204] (1) Main Processing

[0205] (2) Classification

[0206] (3) Determination Process

[0207] The process of (1) is the same as that of the first embodiment, and therefore the description thereof is omitted here.

[0208] The following describes the processing of (2) and (3) using the diagrams.

[0209] [2.3.1 Work during classification processing]

[0210] Fig.12 This is a flowchart showing an example of the classification process of the classification unit 130 according to the present embodiment.

[0211] Fig.12 The processing of steps S2001 to S2004 shown is the same as that of the first embodiment, and therefore the description thereof is omitted here.

[0212] After registering the device to be classified (the device that is the source of the received message) as other than a home appliance in step S2003, the classifier 130 determines whether the receiving port that received the communication message is an IT device connection port or a home appliance connection port. For example, the classifier 130 determines whether the connection type of the receiving port that received the communication message is an IT device connection port (S2006).

[0213] When the classification unit 130 determines in step S2006 that the port is an IT equipment connection port (S2006: Yes), the classification process ends.

[0214] When the classification unit 130 determines that the device is a home appliance connection port in step S2006 (S2006: No), it notifies the user that the combination of the device type and the connection port is abnormal (S2007).

[0215] After registering the device to be classified (device that is the source of the received message) as a home appliance in step S2004, the classifier 130 determines whether the connection port (receiving port) that received the communication message is an IT device connection port or a home appliance connection port. For example, the classifier 130 determines whether the connection type of the receiving port that received the communication message is a home appliance connection port (S2008).

[0216] When the classification unit 130 determines that the port is a home appliance connection port in step S2008 ( S2008 : Yes), the classification process ends.

[0217] When the classification unit 130 determines that the connection port is an IT device connection port in step S2008 (S2008: No), it notifies the user that the combination of the device type and the connection port is abnormal (S2007).

[0218] Thus, in the classification steps (S2002 to S2007), when a device (e.g., a second device) is a device with a predetermined function (e.g., a home appliance) and the device is connected to a connection port for an IT device, or when the device is not a device with a predetermined function (e.g., not a home appliance) and the device is connected to a connection port for a home appliance, this situation is notified to the terminal 50.

[0219] Furthermore, when the classification unit 130 notifies the user of the abnormal combination in step S2007, upon receiving an instruction from the user to allow communication, it may set a communication permission flag in the device list of the device list holding unit 200 (see Fig.11 ).

[0220] [2.3.2 Work during judgment processing]

[0221] Fig.13 This is a flowchart showing an example of the determination process of the home gateway 20a according to the present embodiment.

[0222] Fig.13 The processing of steps S3001 to S3004 and step S3006 is the same as that of the first embodiment, and therefore, the description thereof is omitted here.

[0223] like Fig.13 As shown, when the home appliance message determination unit 140 determines in step S3004 that the received message is "a home appliance message" (S3004: Yes), the forwarding determination unit 150 determines whether the connection port (receiving port) that received the communication message is an IT device connection port or a home appliance connection port. For example, when the forwarding determination unit 150 determines "Yes" in step S3004, it further determines whether the connection type of the receiving port is an IT device connection port (S3008). The forwarding determination unit 150 makes the determination in step S3008 based on the connection type of the receiving port to which the device of the sending source is connected. The connection type of the receiving port is a home appliance connection port, that is, the connection type of the receiving port is not an IT device connection, which is an example of the third condition.

[0224] When the forwarding determination unit 150 determines in step S3008 that the receiving port is a home appliance connection port (S3008: No), the transmission unit 160 is requested to transmit a message. When the forwarding determination unit 150 determines in step S3008 that the receiving port is an IT equipment connection port (S3008: Yes), the received message is not transmitted and the determination process is terminated.

[0225] In addition, the case of "No" in step S3008, for example, the second device is connected to the first connection port for connecting the device having the predetermined function, is an example of the fourth condition. In addition, the forwarding determination unit 150 may further determine to send the received message (home appliance message) to the device of the destination when the fourth condition is satisfied.

[0226] In addition, the processing of the transfer determination unit 150 is not limited to Fig.13 See the process shown. Fig.14 Another example of the process performed by the transfer determination unit 150 will be described. Fig.14 2 is a flowchart showing another example of the determination process of the home gateway 20a of the present embodiment. Fig.14 The work shown in Fig.13 Step S3011 is also performed based on the work shown.

[0227] like Fig.14 As shown, the forwarding determination unit 150 may determine in step S3008 that the receiving port is an IT equipment connection port (S3008: Yes), instead of Fig.13 The processing is terminated as shown in the figure, but the information related to the transmission source of the received communication message is further obtained from the device list holding unit 200, and the communication permission flag indicating whether the communication is permitted when the combination of the device type and the connection port is abnormal is determined based on the permission (refer to Fig.11 ), and determines whether the transmission source is an allowed terminal (S3011). At this time, if the forwarding determination unit 150 determines in step S3011 that the "communication permission flag" is set to "yes" and the transmission source is an allowed home appliance (S3011: Yes), the transmission unit 160 is requested to send the message. In addition, if the forwarding determination unit 150 determines in step S3011 that the "communication permission flag" is set to "no" and the transmission source is a non-allowed home appliance (S3011: No), the determination process ends.

[0228] In this way, the forwarding determination unit 150 may further determine whether the device of the sending source is a device that can communicate with the device of the sending destination when the answer is "No" in step S3011, that is, when the third condition is not met (S3011). When the device of the sending source is a device that can communicate with the device of the sending destination (S3011: Yes), it is determined that a communication message is sent to the device of the sending destination.

[0229] [2.4 Effects of Implementation Method 2]

[0230] In this embodiment, a home gateway 20a is used to separate the residential network 11 into an IT equipment network 12 and a home appliance network 13. Two types of connection ports are provided on the home gateway 20a: a connection port for connecting a communication line to the IT equipment network 12 and a connection port for connecting a communication line to the home appliance network 13.

[0231] Thus, the home gateway 20a can detect the situation that the home appliance is connected to the IT equipment network 12, or the situation that other than the home appliance such as PC30 is connected to the home appliance network 13, and notify the user. The user can connect the device to the appropriate network by receiving the notification and performing the operation for connecting the device to the appropriate network. In addition, in the case where a device control command for abnormally controlling the home appliance is sent from a device other than the home appliance connected to the IT equipment network 12, if the connection port that receives the received message is the IT equipment connection port, it can also be determined as an abnormal device control command. In addition, even if the location where the device is installed is a location where it is good to connect to the IT equipment network 12, even if the device is assumed to be a home appliance, the sending of the device control command for the home appliance on the home appliance network 13 can be allowed by the user's judgment, so that a flexible network configuration can be achieved.

[0232] (Implementation method 3)

[0233] In the first embodiment of the present disclosure, the home gateway 20 determines whether to transfer the device control command according to the device type of the transmission source.

[0234] Here, as a third embodiment of the present disclosure, a configuration for determining whether to transfer a device control command based on the operating state of each home appliance, the state of a resident living in a home where the home gateway 20 is installed, and the like will be described.

[0235] Hereinafter, the device control command monitoring system according to the present embodiment will be described.

[0236] [3. System composition]

[0237] Here, the device control command monitoring system of this embodiment is described with reference to the drawings. In addition, the same reference numerals are used for components having the same functions as those in Embodiment 1 or Embodiment 2 of the present disclosure, and detailed descriptions are omitted.

[0238] [3.1 Overall structure of the equipment control command monitoring system]

[0239] The overall configuration of the device control command monitoring system of the present embodiment is the same as that of the first embodiment of the present disclosure, and therefore, the description thereof will be omitted.

[0240] In addition, the overall configuration of the device control command monitoring system of this embodiment can also be applied to the overall configuration of the second embodiment of the present disclosure. In the following description, unless otherwise specified, the overall configuration of the first embodiment of the present disclosure will be described.

[0241] [3.2 Configuration of the Home Gateway 20]

[0242] Fig.15 2 is a configuration diagram of the home gateway 20b of the present embodiment. The same reference numerals are given to the components having the same functions as those in Embodiment 1, and detailed descriptions are omitted. The home gateway 20b includes a receiving unit 100, an initial device list making unit 110, an unregistered device detecting unit 120, a classifying unit 130, a home appliance message determining unit 140, a forwarding determining unit 150, a sending unit 160, a device list holding unit 200, and a state holding unit 210. The home gateway 20b further includes a state holding unit 210 on the basis of the home gateway 20 in Embodiment 1.

[0243] like Fig.15 As shown, when the home appliance message determination unit 140 determines that the received communication message (received message) is a home appliance message, the forwarding determination unit 150 obtains information about the device of the transmission source from the received message and obtains the device No. (number) of the device list maintained by the device list maintenance unit 200. The forwarding determination unit 150 obtains information about the status of the device that sent the communication message from the received message and registers the status list maintained by the status maintenance unit 210 in the "current" row (see the following description). Fig.16 ) status No. In addition, based on the sensor information included in the communication message, the status of the resident (user) living at home is estimated, and the status No. of the status list is registered in the "now" row.

[0244] In addition, when the home gateway 20 has a certain sensor (such as a human sensor), it estimates the state of the resident living at home based on the sensor information and registers the state No. of the state list in the "now" row. In addition, the state of the resident may be, for example, information indicating the room where the resident exists.

[0245] When the received message includes a device control command, the forwarding determination unit 150 checks whether the state after the execution of the device control command is included in the state list, and determines to forward the communication message if it is included in the state list.

[0246] The status storage unit 210 stores information on the status of home appliances connected to the home network 11 in a list format as a status list. Fig.16 An example of a status list according to this embodiment is shown.

[0247] like Fig.16 As shown, the status list includes the device No. of the home appliance in the device list held by the device list holding unit 200 and the status of the resident living at home. Fig.16 ON and OFF are illustrated in the example, but are not limited to this. For example, if the home appliance is an electronic lock 40, the unlocked / locked state can also be registered. If it is an air conditioner 41, the set temperature, operation mode (cooling / heating, etc.) and the like can also be registered in addition to ON / OFF. In addition, for example, if the device is a lighting 42, the dimming state can also be registered in addition to ON / OFF. In addition, for example, if the device is a human sensor (not shown), it can also be registered whether a person is detected / no person is detected. If the device is a temperature and humidity sensor (not shown), the temperature and humidity values ​​themselves can also be registered. In addition, as the status of the resident, in addition to being present / absent, information on where in the home is located, such as only in 1F (first floor) / only in 2F, only in the bedroom / only in the living room / in the dining room or kitchen, can also be registered. The attributes of people who are at home, such as only children / only grandparents, can also be registered. It is also possible to register what they are doing in bed, etc. In addition, in Fig.16 In the example, one status is registered for each device and resident, but multiple statuses may be registered, and the registration may be performed by status.

[0248] State No. "now" indicates the current state of the device and the resident. The current state of the device may also be the operating state of the device at the destination after being controlled by the device control command and the operating state of the device at the destination before being controlled by the device control command. States No. "1" to "3" respectively indicate the states of the device and the resident that are preset in order to determine whether the "now" state is a state for sending a received message. The state indicated by state No. "now" is consistent with any of states No. "1" to "3" is an example of the second condition.

[0249] In addition, the status list may include at least one of the status of the device and the status of the resident. For example, the status list may also include at least the status of the device. In this case, the second condition included in the predetermined condition includes that the working status of the device at the destination after being controlled by the device control command and the working status of the device at the destination before being controlled by the device control command are the preset working status.

[0250] The states indicated by state Nos. "1" to "3" may be operating states that are assumed to be normally possible in the use of the equipment, past use states of the equipment, or states set by the resident.

[0251] [3.3 Operation of the equipment control command monitoring system]

[0252] The operation of the device control command monitoring system includes the following processing.

[0253] (1) Main Processing

[0254] (2) Classification

[0255] (3) Determination Process

[0256] The processing of (1) and (2) is the same as that of the first embodiment, and therefore the description thereof is omitted here.

[0257] The following describes the process of (3) using a diagram.

[0258] [3.3.1 Work during judgment processing]

[0259] Fig.17 This is a flowchart showing an example of the determination process of the home gateway 20 according to the present embodiment.

[0260] Fig.17 The processing of steps S3001 to S3006 shown in FIG. 1 is the same as that of the first embodiment, and therefore, the description thereof is omitted here. Fig.17 In the description, a case is described in which it is determined whether to send a received message based on the status of the device and the resident after the device control command is executed.

[0261] like Fig.17 As shown, when the received message includes a device control command and the device determined as the source of transmission in step S3005 is a "home appliance" (S3004 and S3005: Yes), the forwarding determination unit 150 determines whether the state after the device control command is executed (the state of the device and the resident) is included in the state list (S3012). The forwarding determination unit 150 determines that the state after the device control command is executed is "normal" if it is included in the state list, and determines that it is "abnormal" if it is not included in the state list.

[0262] In addition, the home appliance message may also include a message indicating a change in the state of the device (state change message) instead of the device control command or together with the device control command. The forwarding determination unit 150, for example, determines as yes in step S3004 when the home appliance message includes any one of the device control command and the state change message. In addition, the forwarding determination unit 150 may also determine as yes in step S3012 when the home appliance message includes at least a state change message. That is, the determination of whether step S3012 is normal may also be determined based on whether a state change message is received from the home appliance (whether the state of the home appliance is changed normally). In addition, the forwarding determination unit 150 may also make a normal / abnormal determination in step S3012 after reflecting the information related to the state to the information registered in the state list when the home appliance message includes at least a state change message. Thus, the forwarding determination unit 150 can register the change in the state list based on the state change message when the state of the home appliance is changed.

[0263] In addition, when the received message includes not only the device control command and the status change message but also the information indicating the status of the device, the forwarding determination unit 150 may determine yes in step S3012. In addition, the forwarding determination unit 150 may also make a normal / abnormal determination in step S3012 after reflecting the information related to the status to the information registered in the status list.

[0264] When the forwarding determination unit 150 determines that it is "normal" in step S3012 (S3012: Yes), when it is necessary to update the information of the status list maintained by the status maintenance unit 210 with the information included in the received message, the status is registered (S3013). It can also be said that when the forwarding determination unit 150 determines that it is "normal" in step S3012, that is, when the status of the device and the resident meets the second condition, the status list indicating the operating status of the device at the destination is further updated to the operating status of the device at the destination after being controlled by the device control command. Step S3013 is an example of an updating step. In addition, step S3013 is not a necessary process.

[0265] Then, the forwarding determination unit 150 requests the transmission unit 160 to transmit the message. That is, the forwarding determination unit 150 determines to transmit the received message to the device of the transmission destination when the second condition is satisfied.

[0266] If the forwarding determination unit 150 determines "abnormal" in step S3012 (S3012: No), the determination process ends. That is, if the status of the device and the resident does not match the status list (the status of the device and the resident does not exist in the status list), the received message is not sent to the destination device.

[0267] [3.4 Effects of Implementation Method 3]

[0268] In this embodiment, the state of each device and the state of at least one of the residents are estimated based on the home appliance message received by the home gateway 20, and the forwarding of the device control command is allowed only when the state is correct based on the state list. As a result, when an abnormal device control command is sent and the device is controlled by the abnormal control command to a state that does not normally occur, the abnormality of the device control command can be detected, and even if the device-related information contained in the message is disguised by an attacker, the possibility of detecting the abnormal device control command can be increased.

[0269] [4. Other Modifications]

[0270] The present disclosure is of course not limited to the various embodiments described above, and as long as it does not deviate from the purpose of the present disclosure, technical solutions obtained by implementing various modifications that can be thought of by those skilled in the art to the embodiments and technical solutions constructed by combining constituent elements in different embodiments are also included in the scope of the present disclosure. For example, the following modified examples are also included in the present disclosure.

[0271] [4.1 Modification 1]

[0272] (1) In the above embodiment, all devices connected to the home network 11 are registered in the initial device list during the main process, but the present invention is not limited to this. For example, Fig.18 As shown, the home gateway does not perform the initial device list creation ( S1001 ) process, but only performs the classification process ( S1002 ) and the determination process ( S1003 ). Fig.18 This is a flowchart showing an example of the main processing of the home gateway of this modification.

[0273] In addition, the configuration of such a home gateway is shown in Fig.19 . Fig.19 2 is a diagram showing the configuration of a home gateway 20c according to this modification.

[0274] like Fig.19 As shown, the home gateway 20c of this modified example is, for example, a structure of the home gateway 20 of the first embodiment (see Figure 2 ) becomes a configuration without the initial device list creation unit 110.

[0275] In addition, even if Fig.19 The configuration shown, for example, also creates a device list. For example, the device list may be created and updated every time a reception message is received.

[0276] In addition, for example Fig. 20 As shown, the classification process (S1002) may not be performed, and only the determination process (S1003) may be performed. Fig. 20 This is a flowchart showing another example of the main processing of the home gateway 20c of this variant. The configuration of the home gateway 20c in this case may also be Fig.19 In other embodiments and modified examples, similar changes in configuration and processing can also be made.

[0277] This can reduce the processing time and bus load at the time of initial startup, and thus it is possible to protect the home appliances connected to the home network 11 right after the home gateway 20 c is started.

[0278] [4.2 Modification 2]

[0279] (2) In the above embodiment, the home gateway 20 determines whether the received message is a home appliance message. Only when the received message is a home appliance message, the forwarding determination unit 150 makes the determination. However, the present invention is not limited to this. The forwarding determination unit 150 may make the determination for all communications. Fig.21 The configuration of the home gateway in this case will be described. Fig.21 2 is a diagram showing the configuration of a home gateway 20d according to this variation.

[0280] like Fig.21 As shown, the home gateway 20d of this modification is constructed from the home gateway 20 of the first embodiment ( Figure 2 ) becomes a configuration without the home appliance message determination unit 140. Figure 22 to Figure 25 The operation of the home gateway 20d will be described. Figure 22 to Figure 25 1 and 2 are flowcharts showing examples of determination processing by the home gateway 20d according to the present modification.

[0281] like Figure 22 to Figure 25 As shown, the determination process of this modification example is different from the determination process of the first embodiment ( Figure 6 ) becomes a step (S3004) without determining whether the received message is a home appliance message. Fig. 22 In the example, instead of step S3004, the forwarding determination unit 150 determines whether to send the message based on the information of the source and destination of the received message (S3005 and S3007). Fig.23In place of step S3004, for example, whether to send a communication message is determined based on the connection port (receiving port) that receives the communication message and the connection port (destination port) of the destination of the communication message (sending destination port) (S3008 and S3009).

[0282] In addition, Fig.24 In the example, instead of step S3004, it is determined whether to send a communication message based on the information of the receiving port and the sending destination (S3008 and S3010). Fig.25 In the embodiment, instead of step S3004, it is determined whether to send a communication message (S3008, S3010 and S3011) based on the receiving port, whether the destination is a home appliance and whether the source device is allowed. In other embodiments and modified examples, the same configuration changes and processing changes can also be made.

[0283] Thus, even when it is difficult to determine whether a received message is a home appliance message, it is possible to prevent the sending of abnormal device control commands. In addition, by restricting only messages from outside the home appliance to the home appliance that are likely to be attacked, and not restricting other communications, it is possible to effectively prevent attacks from outside the home appliance to the home appliance.

[0284] [4.3 Modification 3]

[0285] (3) In the above embodiment, the home gateway 20 determines whether the received message is a home appliance message and whether the device type of the transmission source is a home appliance, but the present invention is not limited thereto. Fig.26 As shown, the forwarding determination unit 150 of the home gateway 20 further determines whether the device type of the destination is a home appliance (S3007). If it is a home appliance (S3007: Yes), the communication message is not sent, but if it is not a home appliance (S3007: No), the communication message is sent. It can also be said that in the second determination step, when the first condition is not satisfied (S3005: No), the forwarding determination unit 150 further determines whether the device of the destination is a device with a predetermined function (such as a home appliance). When the device of the destination is not a device with a predetermined function (S3007: No), it is determined to send the communication message to the device of the destination. Fig.26 This is a flowchart showing an example of the determination process of the home gateway 20 according to the present modification.

[0286] Thus, home appliance messages sent from outside the home appliance to outside the home appliance can be set as not being the object (outside the object) of the determination by the forwarding determination unit 150, thereby reducing the environment that brings adverse effects. In other words, it is possible to prevent home appliance messages sent from outside the home appliance to outside the home appliance from being cut off unnecessarily.

[0287] [4.4 Modification 4]

[0288] (4) In the above-mentioned embodiment, the devices are classified by sending a determination message during the classification process, but the present invention is not limited to this. For example, Fig. 27 As shown, the classification unit 130 may determine whether the received message is a home appliance message (S2005), and if it is a home appliance message, register the device of the transmission source as a home appliance (S2004). Fig. 27 This is a flowchart showing an example of the classification process performed by the classification unit 130 according to the present modification.

[0289] [4.5 Modification 5]

[0290] (5) In the above embodiment, classification processing is performed when the home gateway 20 is first activated or when the source of the received communication message is not registered in the device list, but the present invention is not limited thereto. The home gateway 20 may further perform classification update processing to update the classification (update the device list). Fig.28 2 is a flowchart showing an example of the classification update process of the classification unit 130 according to the present modification. The classification update process is an example of a device list update procedure.

[0291] like Fig.28 As shown, in the classification update process, the classification unit 130 first sends a determination message to the network (S4001). The classification unit 130 uses a protocol for controlling home appliances to connect to the home network 11, and sends a message (determination message) to each of the multiple devices to determine whether communication with the multiple devices is possible. Step S4001 is an example of the second sending step.

[0292] Next, the classification unit 130 determines whether a response message to the determination message is received (S4002). When the classification unit 130 receives a response message in step S4002 (S4002: Yes), the classification unit 130 extracts the transmission source from the response message (S4003) and determines whether the extracted transmission source is registered in the device list (S4004). When the classification unit 130 is not registered in the device list in step S4004 (S4004: No), it is registered (added) to the device list because it means that a new device is connected. At this time, the classification unit 130 registers it as a home appliance as a device category (S4005). In addition, the case of "Yes" in step S4002 is an example of the second receiving step.

[0293] Next, if the response message is not received after a certain period of time in step S4002 (S4002: No), or if the transmission source is registered in the device list in step S4004 (S4004: Yes), the classification unit 130 determines whether there is a difference with the registration information in the device list (S4006). It can also be said that the classification unit 130 determines whether the determination result based on the response message of whether it is a device with a predetermined function is consistent with the registration information of the device in the device list. Step S4006 is an example of the third determination step.

[0294] Next, if the classification unit 130 determines that there is a difference with the registration information of the device list in step S4006 (S4006: Yes), the classification unit 130 updates the information of the device list of the device (S4007). If the classification unit 130 determines that it is Yes in step S4006, the classification unit 130 updates the registration status of the device in the device list based on the determination result of step S4006. Step S4007 is an example of an updating step.

[0295] In addition, when the classification unit 130 finds that the registration information is the same as the registration information in the device list in step S4006 (S4006: No), the classification update process is terminated.

[0296] This makes it possible to cope with the addition or deletion of devices. Fig.28 The classification update process shown may be executed periodically or based on an instruction from the user.

[0297] [4.6 Modification 6]

[0298] (6) In the above-mentioned Embodiment 2, it is provided that the user is notified when the combination of the device type and the connection port is abnormal, but it is not limited to this. After notifying the user, further exclusion processing may be performed to prevent the device with the abnormal combination of the device type and the connection port (abnormal device) from communicating, or exclusion processing may be performed immediately without notifying the user.

[0299] [4.7 Modification 7]

[0300] (7) In the above-mentioned second embodiment, when the combination of device type and connection port is abnormal, the user is notified, and when the user permits communication, the communication message is forwarded, but the present invention is not limited to this. Fig.29 2 is a diagram showing the configuration of a home gateway 20e according to this variation.

[0301] like Fig.29As shown, the home gateway 20e of this variant further includes a communication destination change unit 180 based on the home gateway 20 of implementation mode 1. The communication destination change unit 180 changes the communication destination of the communication message from the device to other devices. For example, the communication destination change unit 180 changes the communication destination when the user allows it. It can also be said that the communication destination change unit 180 changes the communication path of the communication message from the device to other devices. Fig.30 : is a flowchart showing an example of the classification process of the classification unit 130 of this modification. Fig.30 S2001 to S2004, S2006 and S2008 shown in FIG. Fig.12 It is the same, and the explanation is omitted.

[0302] like Fig.30 As shown, when the classification unit 130 performs classification processing, when a device other than a home appliance is connected to the home appliance connection port (S2002 and S2006: No), or when a home appliance is connected to the IT equipment connection port (S2002: Yes and S2008: No), the classification unit 130 further determines whether the communication is permitted by the user (S2009). The classification unit 130 can perform the determination in step S2009 by receiving from the user whether the communication between the source device and the destination device is permitted, or can perform the determination in step S2009 based on a list of devices that are permitted to communicate.

[0303] Next, the communication destination changing unit 180 does not change the communication destination if the user permits (S2009: Yes). In addition, the communication destination changing unit 180 may change the communication destination of the home appliance (S2010), the communication destination of each device communicating with the home appliance, or the communication destination of a device other than the home appliance if the user does not permit (S2009: No). As a method for changing the communication destination, there is, for example, a method using an ARP message as described in Patent Document 1, but it is not limited to this as long as the communication destination is changed.

[0304] As described above, when the source device is connected to the home appliance connection port and is a non-functional device other than a home appliance, and the destination device is connected to the home appliance connection port and is a home appliance, in the classification step, when communication between the source device and the destination device is not permitted, a communication message is sent from the source device to the destination device via the home gateway 20e to which the destination device is connected. The home gateway 20e can perform the second determination by the forwarding determination unit 150.

[0305] For example, consider the following situation: The overall structure diagram of the monitoring system based on the device control command is shown in Figure 8 , a PC30 is connected to a hub 70. It can also be said that a device other than a home appliance is connected to a connection port for a home appliance. At this time, for example, when the PC30 sends a communication message to a home appliance (such as an air conditioner 41), the communication message is sent and received via the hub 70. That is, when the PC30 sends a communication message to the home appliance, the communication is not performed via the home gateway 20e. This means that the determination process of the forwarding determination unit 150 is not performed. Therefore, as described above, when the communication from the PC30 (an example of a device other than a home appliance) to the home appliance is not permitted by the user (S2009: No), the communication sending destination of the communication message from the PC30 is changed so that the communication message is sent to the home appliance via the home gateway 20e. In addition, when the controller 43 connected to the hub 70 is a terminal such as a smart phone, the same process is performed.

[0306] As a result, the forwarding determination unit 150 can determine whether to forward the communication of the unauthorized device, thereby enhancing security.

[0307] [4.8 Modification 8]

[0308] (8) In the above embodiment, the unregistered device detection unit 120 determines whether the source of the received communication message is registered in the device list, and registers it by adding it if it is not registered, but the present invention is not limited to this. Fig.31 20f is a diagram showing the configuration of a home gateway 20f according to this modification.

[0309] like Fig.31 As shown, the home gateway 20f may be configured not to include the unregistered device detection unit 120 as compared to the home gateway 20 according to the first embodiment. Fig.32 This is a flowchart showing an example of the determination process of the home gateway 20f according to the present modification.

[0310] like Fig.32 As shown, it is possible to Figure 6 The flowchart shown omits the processing of steps S3002 and S3003. Even in such a configuration, the home gateway 20f can disable communication when a malfunctioning home appliance is newly added to the home network 11.

[0311] [4.9 Modification 9]

[0312] (9) In the above embodiment, the user is notified when the combination of the device type and the connection port is abnormal, but the user may be prompted to display the notification on the screen of the terminal 50. In this case, the user may input permission / non-permission of communication to the home appliance with the abnormal combination of the device type and the connection port, exclude or allow communication to the computer connected to the home appliance connection port, or may input whether to allow communication to the home appliance when communication is allowed to the computer (e.g., PC 30) connected to the home appliance connection port. In the case where communication is not allowed to the computer connected to the home appliance connection port, the communication destination may be changed and checked by the forwarding determination unit 150.

[0313] Figure 33 to Figure 38 The following are diagrams showing examples of screen displays according to this modification.

[0314] Fig.33 For example, in Fig.12 An example of a screen display when the judgment is No in step S2008. The screen display includes, for example, a display 500 indicating that the category (device category) is a home appliance controller and that the device is connected to the IT device connection port and a display 501 (so-called icon) for accepting input from the user.

[0315] Fig.34 For example, in Fig.12 An example of a screen display when the determination in step S2008 is No and the device is not connected to the network on the home appliance side. The screen display includes, for example, the display 500 described above and a display 510 for accepting an input from the user as to whether to allow the home appliance controller to control the home appliance, and the display 510 includes a display 511 indicating "allow" for the home appliance controller to control the home appliance and a display 512 indicating "not allow".

[0316] Fig.35 For example, in Fig.12 This screen display includes, for example, a display 502 indicating that the category (device category) is lighting and that the device is connected to the IT device connection port, and a display 503 (so-called icon) for accepting input from the user.

[0317] Fig.36 For example, in Fig.12An example of a screen display when the determination in step S2008 is No and the device is not connected to the network on the home appliance side. The screen display includes, for example, the above-mentioned display 502 and a display 513 for accepting an input from the user as to whether to allow control of the lighting from other devices, and the display 513 includes a display 514 indicating "allow" and a display 515 indicating "not allow" for the lighting to accept control from other devices.

[0318] Fig.37 For example, in Fig.12 An example of a screen display when the judgment is No in step S2006. The screen display includes, for example, a display 504 indicating that the category (device category) is a computer and that the device is connected to the home appliance connection port, a display 505 indicating that the computer is excluded, and a display 506 indicating that communication is allowed.

[0319] Fig.38 For example, in Fig.12 2 is an example of a screen display when the determination in step S2006 is negative and the device is not connected to the network on the IT side. The screen display includes, for example, the display 504 described above and a display 516 for accepting an input from the user as to whether to allow the control of the home appliance from the computer, and the display 516 includes a display 517 indicating "allow" and a display 518 indicating "not allow" for the computer to control the home appliance.

[0320] In addition, if Fig.39 As shown, the terminal 50 may have a function of displaying a list 520 of devices connected to the home gateway 20 to display which devices the user has permitted communication with.

[0321] [4.10 Variations other than the above]

[0322] (10) In the above embodiment, home appliances and other than home appliances are registered as device categories, but the present invention is not limited thereto. When there are multiple communication protocols for controlling home appliances in the residential network 11, for example, the device categories may be registered as devices of protocol 1, devices of protocol 2, and other than devices. Furthermore, the forwarding determination unit 150 may determine to perform transmission (forwarding) when the device category of the transmission source and the device category of the transmission destination are the same, and may determine not to perform transmission when the device category of the transmission source and the device category of the transmission destination are different.

[0323] (11) In the above embodiment, a configuration in which home appliances and PCs are connected to the residential network 11 is described, but the present invention is not limited thereto. A configuration in which control equipment or PCs are connected to a factory network, a configuration in which building equipment, management equipment or PCs are connected to a building network, or a configuration in which various electronic control units are connected to a vehicle network may be described. Any configuration may be used as long as a plurality of devices are connected to a network limited to a certain space and communication for controlling those devices is performed.

[0324] (12) In the above-mentioned embodiment, only a residential network 11, an IT equipment network 12 or a home appliance network 13 is set, but these can be connected via Ethernet (registered trademark), CAN, other wired communications, or via Bluetooth (registered trademark), Wi-Fi (registered trademark), ZigBEE, Z-Wave (registered trademark), or other wireless communications, regardless of the communication method.

[0325] (13) Specifically, each device in the above-mentioned embodiment is a computer system composed of a microprocessor, ROM (Read Only Memory), RAM (Random Access Memory), a hard disk unit, a display unit, a keyboard, a mouse, etc. A computer program is recorded in the RAM or the hard disk unit. The microprocessor operates according to the computer program, and each device realizes its function. Here, the computer program is composed of a plurality of command codes representing instructions to the computer in order to realize a predetermined function.

[0326] (14) Some or all of the components of each device in the above-mentioned embodiment may be constituted by a system LSI (Large Scale Integration). System LSI is a multifunctional LSI manufactured by integrating multiple components on a single chip. Specifically, it is a computer system composed of a microprocessor, ROM, RAM, etc. A computer program is recorded in the RAM. The microprocessor operates according to the computer program, so that the system LSI realizes its functions.

[0327] Furthermore, each unit of the constituent elements constituting each of the above-mentioned devices may be individually integrated into a single chip, or a part or all of them may be integrated into a single chip.

[0328] In addition, although it is set as system LSI here, it is sometimes also called IC (Integrated Circuit), LSI, super LSI, and very LSI according to the difference in integration. In addition, the method of integrated circuit is not limited to LSI, and it can also be realized by a dedicated circuit or a general-purpose processor. It is also possible to use an FPGA (Field Programmable Gate Array) that can be programmed after LSI manufacturing and a reconfigurable processor that can reconfigure the connection and setting of the circuit unit inside the LSI.

[0329] Furthermore, if integrated circuit technology that replaces LSI emerges due to the advancement of semiconductor technology or other derived technologies, it is natural that such technology can be used to integrate functional blocks. Application of biotechnology, etc. becomes possible.

[0330] (15) A part or all of the components constituting each of the above-mentioned devices may also be constituted by an IC card or a single module that can be detached from each device. The IC card or module is a computer system composed of a microprocessor, ROM, RAM, etc. The IC card or module may also be a super-multifunctional LSI including the above-mentioned. The IC card or module realizes its function by the microprocessor operating according to the computer program. The IC card or module may also be tamper-resistant.

[0331] (16) The present disclosure may also be the methods shown above. In addition, the present disclosure may be a computer program that realizes the methods by a computer, or a digital signal composed of the computer program.

[0332] In addition, the present disclosure may also be an invention in which the computer program or digital signal is recorded on a computer-readable recording medium, such as a floppy disk, a hard disk, a CD-ROM, an MO, a DVD, a DVD-ROM, a DVD-RAM, a BD (Blu-ray (registered trademark) disk), a semiconductor memory, etc. In addition, it may be a digital signal recorded on these recording media.

[0333] Furthermore, the present disclosure may be an invention in which a computer program or a digital signal is transmitted via an electric communication line, a wireless or wired communication line, a network represented by the Internet, data broadcasting, or the like.

[0334] Furthermore, the present disclosure may be a computer system including a microprocessor and a memory, wherein the memory stores the above-mentioned computer program and the microprocessor operates according to the computer program.

[0335] Alternatively, the program or digital signal may be recorded on a recording medium and transferred, or the program or digital signal may be transferred via a network or the like so that the program or digital signal can be executed by another independent computer system.

[0336] (17) The above-mentioned embodiment and the above-mentioned modification examples may be combined.

[0337] In addition, the technology can also be implemented as a method including part or all of the steps of the processing performed by each component in the above-mentioned embodiments or their variations, or as a program executed by a processor of the device control command monitoring system for the device control command monitoring system to implement the method. In addition, in the above-mentioned embodiments or their variations, the processing performed by a specific component can be replaced by another component. In addition, the order of multiple processing can be changed, and multiple processing can be performed in parallel.

[0338] Industrial Applicability

[0339] The present disclosure is useful, for example, in a network in which home appliances and devices other than home appliances are connected.

Claims

1. A device monitoring method is a device monitoring method in a network system having a plurality of devices, wherein the plurality of devices include a first device and a second device connected to a communication network, the device monitoring method comprising: A first receiving step of receiving, from the first device, a message sent from the first device to the second device with the second device as a sending destination; A first determination step is to determine whether the message received from the first device is a message containing a device control command for controlling the second device; a second determination step, in the case where the message is a message containing the device control command, further determining whether to send the message to the second device based on a predetermined condition; as well as a first sending step, in which, when the second determining step determines that the message is to be sent to the second device, the message is sent to the second device; The predetermined condition includes a first condition, wherein the first condition is a condition that the first device is registered as the home appliance in a device list including information on whether each device of the plurality of devices is a home appliance, In the second determination step, when the first condition is met, it is determined to send the message to the second device.

2. The device monitoring method according to claim 1, The predetermined condition also includes a second condition, wherein the second condition is a condition that one of the working state of the second device after being controlled by the device control command and the working state of the second device before being controlled by the device control command is a preset working state, In the second determination step, further, when the second condition is met, it is determined to send the message to the second device.

3. The device monitoring method according to claim 2, comprising: An updating step, when the second condition is met, further updating the status list representing the working status of the second device to the working status of the second device after being controlled by the device control command.

4. The device monitoring method according to claim 2 or 3, The multiple devices are arranged indoors. The second condition also includes: At the time point of the second determination step, the user is in a predetermined room among the plurality of rooms in the room.

5. The device monitoring method according to any one of claims 1 to 3, In the second determination step, when the first condition is not satisfied, a determination is further made as to whether the second device is the home appliance. When the second device is not the home appliance, it is determined that the message is to be sent to the second device.

6. The device monitoring method according to any one of claims 1 to 3, The predetermined condition further includes a third condition, wherein the third condition is a condition that the first device is connected to a first connection port, and the first connection port is a connection port for connecting the home appliance. In the second determination step, further when the third condition is met, it is determined that the message is sent to the second device.

7. The device monitoring method according to claim 6, In the second determination step, when the third condition is not met, a further determination is made as to whether the first device is a device capable of communicating with the second device. When the first device is a device capable of communicating with the second device, it is determined that the message is sent to the second device.

8. The device monitoring method according to claim 6, further comprising: a classification step of classifying whether each of the plurality of devices is the household electrical appliance; In the classification step, when the second device is the home appliance and is connected to a second connection port different from the first connection port, or when the second device is not the home appliance and is connected to the first connection port, the predetermined terminal is notified.

9. The device monitoring method according to claim 6, further comprising: a classification step of classifying whether each of the plurality of devices is the household electrical appliance; The first device is connected to the first connection port and is not the home appliance. The second device is connected to the first connection port and is the home appliance. In the classification step, when the first device and the second device are not permitted to communicate, the message is sent from the first device to the second device via a gateway connected to the second device and capable of executing the processing of the second determination step.

10. The device monitoring method according to any one of claims 1 to 3 and 7 to 9, further comprising: The device list preparation step includes sending a determination message for determining whether each of the plurality of devices is the home appliance to each of the plurality of devices, and preparing the device list based on a response message to the determination message.

11. The device monitoring method according to claim 10, further comprising: a device list updating step, updating the device list created in the device list creating step, The device list updating step comprises: A second sending step of sending the determination message to the plurality of devices respectively; A second receiving step of receiving the response message to the determination message; A third determination step is to determine whether the determination result of whether the response message is the home appliance is consistent with the registration information of the device in the device list; and An updating step, when the third determination step determines that there is a mismatch, updating the registration status of the device in the device list based on the determination result.

12. The device monitoring method according to any one of claims 1 to 3, 7 to 9, and 11, The household appliance supports a predetermined communication protocol in the communication network.

13. The device monitoring method according to claim 12, The predetermined communication protocol is ECHONET Lite or ZigBEE, and both ECHONET Lite and ZigBEE are registered trademarks.

14. The device monitoring method according to any one of claims 1 to 3, 7 to 9, 11 and 13, In the first sending step, when the message is not a message including the device control command, the message is sent to the second device.

15. The device monitoring method according to any one of claims 1 to 3, 7 to 9, 11 and 13, The second device is a household appliance, The device control command is a command for controlling the home appliance.

16. The device monitoring method according to any one of claims 1 to 3, 7 to 9, 11 and 13, The plurality of devices are each disposed in a residence.

17. A device monitoring device, comprising: a device monitoring device in a network system having a plurality of devices, the plurality of devices including a first device and a second device connected to a communication network, the device monitoring device comprising: a receiving unit configured to receive, from the first device, a message sent from the first device to the second device, with the second device as a destination; a first determination unit configured to determine whether the message received from the first device is a message including a device control command for controlling the second device; a second determination unit, which, if the message is a message including the device control command, further determines whether to send the message to the second device based on a predetermined condition; as well as a sending unit, which sends the message to the second device when the second determination unit determines that the message is to be sent to the second device, The predetermined condition includes a first condition, wherein the first condition is a condition that the first device is registered as the home appliance in a device list including information on whether each device of the plurality of devices is a home appliance, The second determination unit determines to send the message to the second device when the first condition is satisfied.

18. A program recording medium for causing a computer to execute the device monitoring method according to any one of claims 1 to 16.

19. A computer program product, comprising a computer program, the program being configured to cause a computer to execute the device monitoring method according to any one of claims 1 to 16.

Images