Information processing device, relay device, control method, and program

Abstract

To provide an information processing device, an information processing method, an information processing system, and a non-transitory computer-readable medium storing a program, which properly operate a communication network that uses a relay device having a defect.SOLUTION: In an information processing system in which an information processing device and multiple relay devices are connected so as to be able to communicate with each other via a LAN (Local Area Network) cable or the like, the information processing device (10) includes an acquisition unit (11) that acquires information indicating a defect in a first relay device, and a control unit (12) that changes settings related to communication between at least one of the first relay device and a second relay device that communicates with the first relay device on the basis of the information acquired by the acquisition unit.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to an information processing device, an information processing method, a non-transitory computer-readable medium storing a program, and an information processing system. [Background technology]

[0002] When a defect such as a bug (malfunction) or an information security vulnerability (security hole) is discovered in the software (firmware) of a relay device such as a router, it is known that the defect can be corrected by updating the software of the relay device.

[0003] Patent Document 1 describes how, when a router receives a specific command that causes a malfunction, the malfunction can be avoided by executing another command that has been registered in advance instead of the specific command. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2012-124803 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, the technique described in Patent Document 1 has a problem in that, for example, a communication network using a relay device having a defect such as a bug or a vulnerability in terms of information security may not be operated appropriately.

[0006] In consideration of the above-mentioned problems, an object of the present disclosure is to provide an information processing device, an information processing method, an information processing system, and a non-transitory computer-readable medium storing a program, which are capable of properly operating a communication network that uses a relay device having a defect. [Means for solving the problem]

[0007] In a first aspect of the present disclosure, an information processing device has an acquisition means for acquiring information indicating a defect in a first relay device, and a control means for changing settings related to communication between at least one of the first relay device and a second relay device that communicates with the first relay device based on the information acquired by the acquisition means.

[0008] In addition, a second aspect of the present disclosure provides an information processing method for acquiring information indicating a defect in a first relay device, and changing settings related to communication between at least one of the first relay device and a second relay device that communicates with the first relay device based on the information acquired by the acquisition means.

[0009] In addition, in a third aspect of the present disclosure, a non-transitory computer-readable medium is provided that stores a program to cause an information processing device to execute a process of acquiring information indicating a defect of a first relay device, and a process of changing settings regarding communication between at least one of the first relay device and a second relay device that communicates with the first relay device based on the information acquired by the acquisition means.

[0010] In addition, a fourth aspect of the present disclosure provides an information processing system including an information processing device, a first relay device, and a second relay device, wherein the information processing device includes an acquisition means for acquiring information indicating a defect of the first relay device, and a control means for changing settings related to communication between the first relay device and / or the second relay device that communicates with the first relay device, based on the information acquired by the acquisition means. Effect of the Invention

[0011] According to one aspect, it is possible to appropriately operate a communication network that uses a relay device having a defect. [Brief description of the drawings]

[0012] [Figure 1]FIG. 1 is a diagram illustrating an example of a configuration of an information processing device according to an embodiment. [Diagram 2] FIG. 1 is a diagram illustrating an example of a configuration of an information processing system according to an embodiment. [Diagram 3] FIG. 2 is a diagram illustrating an example of a hardware configuration of an information processing device according to an embodiment. [Figure 4] FIG. 4 is a sequence diagram illustrating an example of processing of an information processing system according to an embodiment. [Diagram 5] FIG. 11 is a diagram illustrating an example of data recorded in a relay device DB according to the embodiment. [Figure 6] FIG. 11 is a diagram showing an example of data recorded in a control content DB according to the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] The principles of the present disclosure are described with reference to some exemplary embodiments. It should be understood that these embodiments are set forth for illustrative purposes only, to aid those skilled in the art in understanding and practicing the present disclosure, without implying any limitation on the scope of the present disclosure. The disclosure described herein may be implemented in various ways other than those described below.

[0014] In the following description and claims, unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure belongs.

[0015] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. (Embodiment 1) <Configuration> The configuration of an information processing device 10 according to an embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an example of the configuration of the information processing device 10 according to an embodiment. The information processing device 10 has an acquisition unit 11 and a control unit 12. These units may be realized by cooperation between one or more programs installed in the information processing device 10 and hardware such as a processor 101 and a memory 102 of the information processing device 10.

[0016] The acquisition unit 11 acquires various information from an internal or external storage unit and an external device of the information processing device 10. The acquisition unit 11 acquires information indicating defects such as bugs in the relay device and vulnerabilities in information security.

[0017] The control unit 12 performs various processes in the information processing device 10. The control unit 12 changes settings related to communication with the relay device based on information acquired by the acquisition unit 11, for example.

[0018] (Embodiment 2) Next, the configuration of the information processing system 1 according to the embodiment will be described with reference to FIG. <System configuration> Fig. 2 is a diagram showing an example of the configuration of an information processing system 1 according to an embodiment. In Fig. 2, the information processing system 1 includes an information processing device 10. The information processing system 1 also includes a relay device 20A, a relay device 20B, a relay device 20C, a relay device 20D, and a relay device 20E (hereinafter, when there is no need to distinguish between them, they will be simply referred to as "relay devices 20"). Note that the number of information processing devices 10 and relay devices 20 is not limited to the example in Fig. 2.

[0019] The information processing device 10 and the relay device 20 are connected to each other so as to be able to communicate with each other, for example, by a LAN (Local Area Network) cable or the like. In the example of FIG. 2, the relay device 20A is connected to a network N1, a relay device 20B, and a relay device 20E. The relay device 20C is connected to a relay device 20B and a relay device 20D. The relay device 20D is connected to a relay device 20E and a network N2. The network N1 may be an external network such as the Internet, an external network, or a network of another company. In this case, the network N1 may be a local 5G core network.

[0020] The network N2 may be, for example, a network (internal network) of a carrier that operates the relay device 20. In this case, the network N2 may be a core network of a fifth generation mobile communication system (5G). Note that one or more communication devices may be connected to each relay device 20.

[0021] The information processing device 10 manages the operation of the relay device 20. For example, when the information processing device 10 acquires information indicating that the relay device 20 has a defect, the information processing device 10 changes the setting of at least one of the relay device 20 and another relay device 20 so as to reduce the influence of the defect.

[0022] The relay device 20 relays communication between the network N1 etc. and the network N2 etc. The relay device 20 may have a function of a layer 3 switch including a router function and a layer 2 switch function, for example.

[0023] <Hardware configuration> 3 is a diagram illustrating an example of the hardware configuration of the information processing device 10 and the relay device 20 according to the embodiment. In the following, the information processing device 10 will be described as an example. Note that the hardware configuration of the relay device 20 may be the same as the hardware configuration of the information processing device 10 in FIG.

[0024] 3, the information processing device 10 (computer 100) includes a processor 101, a memory 102, and a communication interface 103. These components may be connected by a bus or the like. The memory 102 stores at least a part of a program 104. The communication interface 103 includes an interface required for communication with other network elements.

[0025] When the program 104 is executed by the processor 101, memory 102, etc. in cooperation, the computer 100 performs at least some processing of the embodiments of the present disclosure. The memory 102 may be of any type suitable for a local technology network. The memory 102 may be, as a non-limiting example, a non-transitory computer-readable storage medium. The memory 102 may also be implemented using any suitable data storage technology, such as semiconductor-based memory devices, magnetic memory devices and systems, optical memory devices and systems, fixed memory and removable memory. Although only one memory 102 is shown in the computer 100, several physically different memory modules may be present in the computer 100. The processor 101 may be of any type. The processor 101 may include one or more of a general-purpose computer, a special-purpose computer, a microprocessor, a digital signal processor (DSP), and a processor based on a multi-core processor architecture, as a non-limiting example. The computer 100 may have multiple processors, such as application-specific integrated circuit chips that are time-slaved to a clock that synchronizes the main processor.

[0026] The embodiments of the present disclosure may be implemented in hardware or special purpose circuits, software, logic, or any combination thereof. Some aspects may be implemented in hardware, while other aspects may be implemented in firmware or software that may be executed by a controller, microprocessor or other computing device.

[0027] The present disclosure also provides at least one computer program product tangibly stored on a non-transitory computer-readable storage medium. The computer program product includes computer-executable instructions, such as instructions included in program modules, that execute on a target real or virtual processor device to perform the processes or methods of the present disclosure. Program modules include routines, programs, libraries, objects, classes, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The functionality of the program modules may be combined or split between program modules as desired in various embodiments. The machine-executable instructions of the program modules may be executed in local or distributed devices. In a distributed device, the program modules may be located in both local and remote storage media.

[0028] The program codes for carrying out the methods of the present disclosure may be written in any combination of one or more programming languages. These program codes are provided to a processor or controller of a general purpose computer, a special purpose computer, or other programmable data processing apparatus. When the program codes are executed by the processor or controller, the functions / operations in the flowcharts and / or the block diagrams they implement are performed. The program codes are executed entirely on the machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine, or entirely on a remote machine or server.

[0029] The program can be stored and provided to the computer using various types of non-transitory computer-readable media. The non-transitory computer-readable media include various types of tangible recording media. Examples of the non-transitory computer-readable media include magnetic recording media, magneto-optical recording media, optical disk media, semiconductor memories, and the like. The magnetic recording media include, for example, flexible disks, magnetic tapes, hard disk drives, and the like. The magneto-optical recording media include, for example, magneto-optical disks, and the like. The optical disk media include, for example, Blu-ray disks, CD (Compact Disc)-ROM (Read Only Memory), CD-R (Recordable), CD-RW (ReWritable), and the like. The semiconductor memory includes, for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (random access memory), and the like. The program may also be provided to the computer by various types of temporary computer-readable media. Examples of the temporary computer-readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire or an optical fiber, or via a wireless communication path.

[0030] <Processing> An example of processing of the information processing system 1 according to the embodiment will be described with reference to Fig. 4 to Fig. 6. Fig. 4 is a sequence diagram showing an example of processing of the information processing system 1 according to the embodiment. Fig. 5 is a diagram showing an example of data recorded in a relay device DB (Data Base) 501 according to the embodiment. Fig. 6 is a diagram showing an example of data recorded in a control content DB 601 according to the embodiment.

[0031] In step S101, the acquisition unit 11 of the information processing device 10 acquires defect information of the relay device 20. The defect information is information indicating that the relay device 20 has a defect. The defect information may include, for example, information such as the model number (model) of the relay device 20 having a defect, the manufacturer (maker) of the relay device, the function name (protocol name), the name of the software or the model number of the hardware part, the version of the software (firmware), and the manufacturer name of the software or the hardware part of the relay device 20.

[0032] Here, the information processing device 10 may acquire the defect information of the relay device 20 from, for example, a predetermined website of the business that manufactured the relay device 20. Also, the information processing device 10 may acquire the defect information of the relay device 20 by, for example, an email sent by the business that manufactured the relay device 20. In this case, the operator of the information processing device 10 may register an email address for receiving the defect information with the business that manufactured the relay device 20 in advance. Also, the information processing device 10 may acquire the defect information of the relay device 20 from, for example, a vulnerability information sharing site operated by a predetermined organization.

[0033] The information processing device 10 may acquire text data indicating details of defects in the relay device 20 from a manufacturer or the like of the relay device 20. The information processing device 10 may then acquire defect information by performing morphological analysis on the acquired text and extracting predetermined keywords from the text data. The information processing device 10 may also acquire defect information from the text data by, for example, artificial intelligence (AI) using deep learning or the like.

[0034] In addition, the information processing device 10 may determine that the software contains a defect if the generation difference between the latest version of a specific software provided by the company that manufactured the relay device 20 and the version of the software currently being used on the relay device 20 is equal to or greater than a threshold value.

[0035] In addition, the information processing device 10 may acquire a log output by a specific software of the relay device 20, and if the ratio of warnings, errors, etc. contained in the acquired log is equal to or greater than a threshold value, determine that the software contains a defect.

[0036] Next, the control unit 12 of the information processing device 10 refers to the relay device DB 501 to identify the relay device 20 having a defect and the defective function (step S102). In the example of Fig. 5, the relay device DB 501 records the model number of the relay device and information on the manufacturer of the relay device in association with the relay device ID. The relay device ID is identification information of the relay device 20. The relay device ID may be, for example, a communication address of the relay device 20 (for example, an IP address or a MAC address).

[0037] Furthermore, in the relay device DB 501, communication settings, software name or hardware part model number, software (firmware) version, name of manufacturer of software or hardware part, and whether or not started are recorded in association with the relay device ID and the function name. The software name is the name of the software that realizes the function related to the function name. The software version is the version of the software that realizes the function related to the function name. Whether or not started is information indicating whether or not the function related to the function name is started in the relay device 20.

[0038] The communication settings are information on settings related to communication in the function associated with the function name. The communication settings of the router may include, for example, information on a route table. The route table may include, for example, information on the destination network, the next hop (forwarding destination), the output interface (output port), and the like.

[0039] The data recorded in the relay device DB 501 may be registered in advance by an operation of an operator of the information processing device 10 or the like. At least a part of the data recorded in the relay device DB 501 may be acquired from the relay device 20 by the information processing device 10 and recorded. The relay device DB 501 may be stored in a storage device inside the information processing device 10 or in a storage device outside the information processing device 10.

[0040] The information processing device 10 extracts relay devices 20 whose model numbers, function names or software names, and software versions match those included in the defect information acquired in step S101 from among the relay devices 20 recorded in the relay device DB 501. Then, the information processing device 10 may identify a relay device 20 having a defective function of a function associated with a matching function name or software name, the function of which is "activated" as "activated."

[0041] Next, the control unit 12 of the information processing device 10 refers to the control content DB 601 based on the defect information, and determines the control content of the settings of one or more relay devices 20 so that the use of the defective function in the defective relay device 20 is reduced (step S103). In the example of FIG. 6, the control content is registered in the control content DB 601 in association with the function name. Note that the data recorded in the control content DB 601 may be registered in advance by an operation of the operator of the information processing device 10 or the like. Note that the control content DB 601 may be stored in a storage device inside the information processing device 10, or may be stored in a storage device outside the information processing device 10.

[0042] The control contents may include, for example, for a defective function, activating the function in another relay device 20 (for example, an adjacent relay device 20), restricting (degenerating, stopping) at least a part of the function, etc. Furthermore, the control contents may include, for example, encapsulating a packet using the function in another relay device 20, changing the path of communication using the function, etc.

[0043] (Example of activating a function on another relay device 20) When the firewall function of the first relay device 20 is defective, the information processing device 10 may activate the firewall function of a second relay device 20 different from the first relay device 20. This allows the firewall function to be executed by the second relay device 20 instead of the defective first relay device 20 or in addition to the defective first relay device 20, for example.

[0044] In the example of Fig. 6, it is stipulated that if there is a defect in the firewall function of a certain relay device 20, the firewall function is activated in relay devices 20 adjacent to the defective relay device 20, and the firewall function is stopped in the defective relay device 20. Also, it is stipulated that if there is a defect in the Layer 2 switch function of a certain relay device 20, the function is stopped in that relay device 20. In this case, in the example of Fig. 2, for example, if there is a defect in the firewall function of relay device 20A, the firewall function is activated in relay devices 20B and 20D adjacent to relay device 20A, and the firewall function in relay device 20A is stopped.

[0045] (Example of restricting (degrading or suspending) at least some of the functions) When the Layer 3 switch function of a certain relay device 20 is defective, the information processing device 10 may disable the Layer 3 switch function of the relay device 20 and execute the Layer 2 switch function of the relay device 20. This can reduce the influence on the network caused by, for example, disabling a defective function.

[0046] 6, it is stipulated that if there is a defect in the router function of a relay device 20, the router function of the relay device 20 is stopped and a layer 2 switch is started (degenerating from a layer 3 switch to a layer 2 switch). It is also stipulated that a layer 3 routing table that does not include the defective relay device 20 is set in a relay device 20 that is another router.

[0047] (Example of changing the communication route using the function) When a relay function for a packet of a specific protocol in a certain relay device 20 is defective, the information processing device 10 may change the settings of other relay devices 20 so as to transmit the packet of the specific protocol via a route that does not pass through the relay device 20. This can reduce the use of the function of the defective relay device 20, for example.

[0048] In the example of Fig. 6, if there is a defect in the VLAN function of a certain relay device 20, the function in the defective relay device 20 is stopped as a priority 1, and a routing table in which VLAN packets do not pass through the defective relay device 20 is set in the other relay devices 20. In this case, in the example of Fig. 2, for example, if there is a defect in the VLAN function of relay device 20B, the VLAN function of relay device 20B is stopped. Also, the routing tables in relay devices 20A and 20D are changed so that VLAN packets are not forwarded to relay device 20B.

[0049] In addition, if a relay device 20 has a defect in the SyncE (Synchronous Ethernet) function, it is specified that the route is changed so that the relay device 20 is located downstream of the clock distribution route.

[0050] (An example of encapsulating a packet using a function in another relay device 20) When a relay function for a packet of a specific protocol in a certain relay device 20 is defective, the information processing device 10 may change the settings of other relay devices 20 so that the packet of the specific protocol is encapsulated and transmitted to the relay device 20. This can reduce the use of the function of the defective relay device 20, for example.

[0051] In the example of Fig. 6, when a certain relay device 20 has a defect in the VLAN function and it is not possible to stop the function in the relay device 20, it is specified that VLAN packets are encapsulated between adjacent relay devices 20 as a priority order 2. Note that when encapsulating VLAN packets between adjacent relay devices 20, for example, in the example of Fig. 2, when the VLAN function in relay device 20B is defective, VLAN packets are encapsulated between relay devices 20A and 20C adjacent to relay device 20B. Note that encapsulation means, for example, embedding the entire packet in a payload of a communication protocol different from that of the packet and communicating it.

[0052] Next, the control unit 12 of the information processing device 10 determines whether the determined control content is executable or not (step S104). Here, the information processing device 10 may determine that it is impossible to stop the router function when, for example, a firewall function or a gateway (protocol converter) function is activated in the relay device 20 having a defect.

[0053] Furthermore, for example, when stopping a certain function in a defective relay device 20 causes the network functions to be unsustained, the information processing device 10 may determine that it is impossible to stop the function. In this case, for example, when stopping a function for forwarding packets of a predetermined protocol (e.g., a VLAN function) causes a path that does not pass through the relay device 20 to no longer exist, it may be determined that the network functions will not be maintained.

[0054] Furthermore, for example, if the adjacent relay device 20 does not have a specific function (for example, a firewall function, a VLAN function, or the like), the information processing device 10 may determine that it is impossible to activate the function in the adjacent relay device 20.

[0055] When it is determined that the determined control content is not executable, the information processing device 10 may transmit a notification indicating that the determined control content is not executable to the terminal of the administrator of the information processing system 1. Note that the information processing device 10 may include, for example, the defect information acquired in step S101 and information indicating the control content determined in step S103 in the notification.

[0056] If it is determined that the determined control content is executable, the following process is executed. The information processing device 10 may transmit a notification indicating that the determined control content is executable to the terminal of the administrator of the information processing system 1. The information processing device 10 may include, for example, the defect information acquired in step S101 and information indicating the control content determined in step S103 in the notification. Then, if an approval operation is not performed by the administrator of the information processing system 1, the information processing device 10 may not execute the following process. On the other hand, if an approval operation is performed, the information processing device 10 may execute the following process.

[0057] Next, the control unit 12 of the information processing device 10 transmits a command to change the setting contents according to the determined control contents to the defective relay device 20 and at least one of the other relay devices 20 (step S105). Here, the command may include data of communication settings such as a changed routing table, for example.

[0058] Next, the relay device 20 that has received the command changes the communication settings in accordance with the received command (step S106). As a result, for example, if a defect such as a bug or a vulnerability in information security is found in the software of the relay device 20, the effect of the defect can be reduced even until the software is updated. Therefore, the communication network can be operated appropriately.

[0059] In addition, when the software having a defect is updated in a certain relay device 20, the information processing device 10 may restore the communication-related settings of one or more relay devices 20 whose settings have been changed in the process of step S105. Thereby, for example, when the defect is corrected, the settings can be restored to the previous settings. In this case, when the information processing device 10 changes the settings in the process of step S105, the information processing device 10 may record the original communication-related settings of each relay device 20 as history. Then, for example, when a predetermined operation is performed by the administrator of the relay device 20, the relay device 20 may download and install the software with the defect corrected from the website of the manufacturer of the relay device 20. Then, when a predetermined operation is performed by the operator or when a predetermined notification is received from the relay device 20, the information processing device 10 may restore the communication-related settings of each relay device 20 based on the recorded history.

[0060] <Modification> The information processing device 10 may be realized by cloud computing configured by one or more computers, for example. The information processing device 10 and the relay device 20 may be configured as an integrated server (device). Such information processing devices 10 are also included in the examples of the "information processing device" of the present disclosure.

[0061] The present invention is not limited to the above-described embodiment, and can be modified as appropriate without departing from the spirit and scope of the present invention.

[0062] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes. (Appendix 1) an acquisition means for acquiring information indicating a defect in the first relay device; a control unit for changing settings related to at least one of communication between the first relay device and a second relay device that communicates with the first relay device, based on the information acquired by the acquisition unit; An information processing device having the above configuration. (Appendix 2) The control means determining settings for communication between at least one of the first relay device and the second relay device such that use of a faulty function in the first relay device is reduced; 2. An information processing device according to claim 1. (Appendix 3) The control means When the defective software in the first relay device is updated, a setting related to communication between at least one of the first relay device and the second relay device is restored to an original setting. 3. The information processing device according to claim 1 or 2. (Appendix 4) The control means Identifying a function having a defect in the first relay device from a sentence indicating the content of the defect in the first relay device. 4. The information processing device according to claim 1 . (Appendix 5) The control means If the firewall function of the first relay device is defective, activating the firewall function of the second relay device. 5. An information processing device according to any one of claims 1 to 4. (Appendix 6) The control means If the router function of the first relay device is defective, the router function of the first relay device is stopped, and the Layer 2 switch function of the first relay device is executed. 6. An information processing device according to any one of claims 1 to 5. (Appendix 7) The control means When a relay function of the first relay device for relaying a packet of a specific protocol is defective, a setting of the second relay device is changed so that the packet of the specific protocol is encapsulated and transmitted to the first relay device. 7. An information processing device according to any one of claims 1 to 6. (Appendix 8) The control means when there is a defect in a relay function of the first relay device for a packet of a specific protocol, changing a setting of the second relay device so as to transmit the packet of the specific protocol via a route that does not pass through the first relay device; 8. An information processing device according to any one of claims 1 to 7. (Appendix 9) Obtaining information indicating a defect in the first relay device; changing settings related to at least one of communication between the first relay device and a second relay device that communicates with the first relay device based on the acquired information; Information processing methods. (Appendix 10) In the information processing device, A process of acquiring information indicating a defect in the first relay device; A process of changing settings related to at least one of communication between the first relay device and a second relay device that communicates with the first relay device based on the acquired information; A non-transitory computer-readable medium having stored thereon a program for executing the program. (Appendix 11) An information processing system including an information processing device, a first relay device, and a second relay device, The information processing device includes: an acquisition means for acquiring information indicating a defect in the first relay device; a control unit for changing settings related to at least one of communication between the first relay device and the second relay device that communicates with the first relay device, based on the information acquired by the acquisition unit; An information processing system having the above configuration. (Appendix 12) The control means determining settings for communication between at least one of the first relay device and the second relay device such that use of a faulty function in the first relay device is reduced; 12. The information processing system according to claim 11. [Explanation of symbols]

[0063] 1. Information Processing Systems 10. Information processing device 11 Acquisition Department 12 Control section 20 Relay Device

Claims

1. A control means for activating a firewall function of a second relay device which communicates with a first relay device when the firewall function of the first relay device has a defect in terms of information security; An information processing device having the above configuration.

2. A means for acquiring information indicating a flaw in the information security by AI (Artificial Intelligence), The information processing device according to claim 1 .

3. A relay device, a control means for activating a firewall function of the relay device that communicates with the other relay device when the firewall function of the other relay device has a defect in terms of information security; A relay device having the above configuration.

4. Having a means for acquiring information indicating a flaw in the information security by AI (Artificial Intelligence), The relay device according to claim 3 .

5. An information processing device comprising: when a firewall function of a first relay device has a defect in terms of information security, activating a firewall function of a second relay device that communicates with the first relay device; Control methods.

6. A relay device comprising: When a firewall function of another relay device has a defect in terms of information security, the firewall function of the relay device that communicates with the other relay device is activated. Control methods.

7. When a firewall function of a first relay device has an information security defect, a firewall function of a second relay device that communicates with the first relay device is activated. A program that causes a computer to carry out processing.

8. A computer of the relay device, When a firewall function of another relay device has a defect in terms of information security, the firewall function of the relay device that communicates with the other relay device is activated. A program that executes a process.

Images