Investigation apparatus, communication system, investigation method, and program

Abstract

To provide an investigation apparatus, a communication system, an investigation method, and a program, capable of gripping a path with a high risk by investigating a path of a communication in the Internet with a high accuracy.SOLUTION: There is provided an investigation apparatus or the like, including: a location identification result acquisition part that acquires a location identification result of one or more target nodes to be investigated in a network; and a node visualization output part that visualizes and outputs the target node so as to be arranged onto a map on the basis of the location identification result. The node visualization output part further outputs information on a region to which the target node belongs.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to an investigation apparatus, a communication system, an investigation method, and a program capable of accurately grasping a communication path in the Internet.

Background Art

[0002] Communication by IP (Internet Protocol) in the Internet enables end-to-end two-way communication regardless of the path. That is, it is a mechanism that allows communication even if the communication path is changed regardless of the presence or absence of malice. On the other hand, since the Internet is made for users to communicate without being aware of the communication path, users rarely realize through which path the communication is being performed. For this reason, for example, even if communication is passing through an area where there is a high risk such as a disaster and there is a risk that communication quality and reliability may decrease, it is difficult to take measures such as recognizing this and blocking the communication.

[0003] Patent Document 1 discloses a method of referring to the transit time zone included in the email header to detect targeted attack emails. Patent Document 1 states that "the transit time zone is obtained based on the time zone information included in the Received information of one or more servers passed through from the sending server of the sender to the receiving server.", and "In this way, based on each received email, each time zone information included in the transit server information (Receive information) is extracted as characteristic information. Targeted attack emails may be sent via overseas servers. For this reason, by making the time zone of the transit server of the email to be received the object of comparison as characteristic information, the accuracy of detecting targeted attack emails is improved."

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] It should be noted that the disclosures of the above prior art documents are incorporated herein by reference. The following analysis is made by the present inventors.

[0006] As described above, in the invention disclosed in Patent Document 1, by comparing the time zone information of the relay server included in the received mail header with the typical features of targeted attack mails, the detection accuracy of mails that may be targeted attack mails is aimed to be improved.

[0007] However, in the invention disclosed in Patent Document 1, the time zone information of the relay server can be arbitrarily changed according to the server settings, and it cannot be denied that the time zone information may be disguised. Therefore, even when passing through a server on a risky path, there is a possibility of causing a detection omission of mails at risk of targeted attack mails due to disguise.

[0008] Therefore, in one aspect of the present invention, an object is to provide an investigation device, a communication system, an investigation method, and a program capable of accurately investigating a communication path on the Internet and grasping a high-risk path.

Means for Solving the Problems

[0009] According to a first aspect of the present invention, there is provided an investigation device including a calibration result acquisition unit that acquires calibration results of one or more target nodes to be investigated in a network, and a node visualization output unit that visualizes and outputs by arranging the target nodes on a map based on the calibration results, and the node visualization output unit further outputs information regarding a region to which the target nodes belong.

[0010] According to a second aspect of the present invention, there is provided an investigation apparatus including a calibration result acquisition unit that acquires calibration results of one or more target nodes to be investigated in a network, and a node visualization output unit that visualizes and outputs by arranging the target nodes on a map based on the calibration results, outputs information regarding a region to which the target nodes belong, and calculates and visualizes and outputs a route for reaching the target nodes, and a control signal transmission unit that transmits a signal for causing a communication control device that controls communication to execute predetermined communication control according to the route calculated by the node visualization output unit, and a communication control device including a communication control unit that receives the control signal transmitted from the control signal transmission unit and executes communication control.

[0011] According to a third aspect of the present invention, there is provided an investigation method for causing a computer to execute the following steps: a step of acquiring calibration results of one or more target nodes to be investigated in a network; and a step of arranging the target nodes on a map and visually outputting information regarding a region to which the target nodes belong based on the calibration results.

[0012] According to a fourth aspect of the present invention, there is provided a program for causing a computer to execute a process of acquiring calibration results of one or more target nodes to be investigated in a network, and a process of arranging the target nodes on a map and visually outputting information regarding a region to which the target nodes belong based on the calibration results.

[0013] Note that this program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory one such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. The present invention can also be embodied as a computer program product.

Effects of the Invention

[0014] According to each aspect of the present invention, it is possible to provide an investigation apparatus, a communication system, an investigation method, and a program that can accurately investigate communication paths on the Internet and grasp high-risk paths.

Brief Description of the Drawings

[0015]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Modes for Carrying Out the Invention

[0016] First, an overview of an embodiment will be described. Note that the reference numerals of the drawings appended to this overview are for convenience and are appended to each element as an example to assist understanding, and the description of this overview is not intended to be limiting in any way.

[0017] FIG. 1 shows a block diagram illustrating an example of the configuration of an investigation apparatus according to an embodiment. The investigation apparatus 10 according to an embodiment includes a calibration result acquisition unit 11 and a node visualization output unit 12.

[0018] The calibration result acquisition unit 11 acquires the calibration results of one or more target nodes that are the objects of investigation in the network. The node visualization output unit 12 visualizes and outputs the target nodes by arranging them on a map based on the calibration results. Further, the node visualization output unit outputs information regarding the area to which the target nodes belong.

[0019] Thus, the investigation apparatus according to an embodiment can calibrate target nodes on the Internet, visualize and output them by arranging the target nodes on a map. Further, it is possible to output information regarding the area to which the target nodes belong, and thereby, for example, it is possible to evaluate and output regional risks and the like existing in the routes possessed by the target nodes.

[0020] [First Embodiment] [Configuration of the Apparatus] An example of the configuration of the investigation apparatus according to the first embodiment is as shown in FIG. 2. The investigation apparatus 10 according to the first embodiment includes a calibration result acquisition unit 11, a node visualization output unit 12, a regional attribute value holding unit 13, and a regional information holding unit 14. The characteristic point of this embodiment is that the node visualization output unit 12 further outputs information regarding the area to which the target nodes belong based on the calibration results, the regional attribute values, and the regional information.

[0021] The calibration result acquisition unit 11 acquires the calibration results of one or more target nodes to be investigated in the network. The "network" includes any of a closed network with access restrictions such as a LAN (Local Area Network) and an open network accessible to anyone such as the Internet. The "target node" is a node to be investigated, and the "node" refers to a network device having a network interface on the network, including terminals, servers, routers, switches, etc.

[0022] Here, "acquisition" means temporarily or permanently storing the calculated or generated data in the storage area of the computer. "Calibration" means specifying the physical position information of the target node represented by a certain scale. The physical position information may include absolute position information such as display by latitude and longitude, and position information specified from the direction and distance from a certain position.

[0023] The acquisition of the calibration result may be to directly go to the target node and acquire the latitude and longitude at that point with a GPS (Global Positioning System) etc., and upload it to the investigation device.

[0024] However, on the Internet, the position of the target node is not clear, and the target nodes are installed not only in the country but also abroad. Therefore, it is necessary to proceed with calibration using the existing technology as follows, for example.

[0025] The calibration result acquisition unit 11 of the investigation device 10 transmits an investigation packet P to another target node and receives a response packet R as the transmission result. Next, the transmission time Tp when the investigation packet P is transmitted and the reception time Tr when the response packet R is received are acquired. Next, the round-trip time RTT is calculated using the transmission time Tp, the reception time Tr, and the formula (1).

[0026] Round-trip time RTT = Reception time Tr - Transmission time Tp ··· (1)

[0027] This unit acquires the media speed Vm of the transmission medium between itself and other target nodes. The distance to other target nodes can be calculated using Equation (2).

[0028] Distance r1 = (media speed Vm × round-trip time RTT) ÷ 2 ··· (2)

[0029] Similarly, when distances (r2, r3) from two other points (which may be newly acquired nodes by the investigation packet) to the other target node in addition to r1 are calculated, the position coordinates (x, y) of the other target node can be calculated by so-called three-point positioning. That is, the coordinates (x, y) of the intersection of circles with radii r1, r2, r3 centered at the coordinates (x1, y1), (x2, y2), (x3, y3) of the three points are calculated. (x - x1)^2 + (y - y1)^2 = r1^2 (x - x2)^2 + (y - y2)^2 = r2^2 (x - x3)^2 + (y - y3)^2 = r3^2 By solving for the above x and y, the position coordinates (x, y) of the target node can be calculated. Further, a process of converting the position coordinates to latitude and longitude can be performed to obtain the latitude and longitude (φ, λ).

[0030] The regional attribute value holding unit 13 holds a regional attribute value that is a value indicating the attribute of the region at the latitude and longitude associated with the latitude and longitude. It holds the value of the regional attribute corresponding to the values of the latitude and longitude that are the results acquired in the calibration result acquisition unit 11. FIG. 3 is a diagram for showing an overview of the regional attribute value held by the regional attribute value holding unit 13 in the investigation apparatus 10 of the present disclosure. As shown in this figure, the corresponding regional attribute value is assigned to the cell of the corresponding latitude and longitude on the map. The regional attribute value, which is the numerical value for assignment, belongs to the category indicating the attribute of the region at the latitude and longitude.

[0031] The regional information storage unit 14 stores regional information, which is information about a region associated with a regional attribute value. FIG. 4 is a diagram for showing an overview of the regional information stored in the regional information storage unit 14 in the survey apparatus 10 of the present disclosure. As shown in this figure, the regional information storage unit 14 stores a regional attribute value and the regional information associated therewith. Note that the regional information may be composed of information (domestic / foreign discrimination) as to whether the region having the regional attribute value is domestic or foreign, and supplementary information that supplements the information for discriminating between domestic and foreign. The supplementary information may provide information such as whether it is at least domestic or foreign, on the sea, on land, in an island area, or on a continent, as the regional information to which it belongs, as shown in FIG. 4.

[0032] In the case of regional information, when the calibration result is outside the map, visualization described later becomes impossible, and there may be cases where the regional attribute value also becomes "N / A (Not Applicable)".

[0033] When the regional information storage unit 14 includes a high-risk region such as a region where there is a risk of a decrease in communication quality or reliability due to, for example, a high risk of a disaster or the like within the covered region, the regional information storage unit 14 may store information indicating that the region having the regional attribute value is at least a high-risk region as the regional information associated with the regional attribute value.

[0034] Note that the above regional attribute value storage unit 13 and regional information storage unit 14 visualize only a part of the regions in Asia in the example, but of course, they can be expanded to nodes of regions all over the world, and maps covering the whole world can be used.

[0035] The node visualization output unit 12 visualizes and outputs by arranging the target node on a map based on the calibration result. As a result of calibration, if position information based on latitude and longitude is obtained, the position on the map is specified and it becomes possible to arrange. FIG. 5 is a diagram for showing an outline of the output result in the node visualization output unit 12 of the present disclosure. As shown in this figure, from points A, B, and C (indicated by × in the figure) where the latitude and longitude are known, target nodes 1 to 4 for which calibration could be performed by calculating the position coordinates of the target node as described above are output to the display device.

[0036] For example, for target node 1, an investigation packet is transmitted from each of nodes A, B, and C to target node 1 to obtain the RTT value. As described above, the distances rA, rB, and rC from nodes A, B, and C to target node 1 can be obtained from half of the product of the medium speed and each RTT value. Since the coordinates of target node 1 are the intersection points of circles with radii rA, rB, and rC centered on nodes A, B, and C, the following simultaneous equations (3) are solved using the known coordinates (xA, yA), (xB, yB), and (xC, yC) of nodes A, B, and C.

[0037] (x - xA)^2 + (y - yA)^2 = rA^2 (x - xB)^2 + (y - yB)^2 = rB^2 (x - xC)^2 + (y - yC)^2 = rC^2 ··· (3) The obtained coordinates (x, y) of target node 1 are in a rectangular coordinate system in a plane, so this is converted into an expression using latitude and longitude. As a result, 45 degrees north latitude and 133.0 degrees east longitude are obtained as the calibration result.

[0038] Regarding the calibration result, when an unstable value is taken, since extrapolation may be required in some cases, a calibration result editing unit (not shown) for editing the calibration result may be further provided.

[0039] The node visualization output unit 12 further outputs information regarding the region to which the target node belongs based on the calibration result, the region attribute value, and the region information. Referring to the region attribute value holding unit 13 and referring to the value of the cell of the table corresponding to 45 degrees north latitude and 133.0 degrees east longitude, "4" is obtained as the region attribute value (see FIG. 3). Next, referring to the region information holding unit 14 (see FIG. 4), the region information related to the region attribute value "4" among the region information is "abroad", and "Sea of Japan - Eurasian continent" is obtained as the accompanying information. The region information thus obtained is used to arrange the target nodes on the map as shown in FIG. 5, and the region information is displayed together.

[0040] When the route to a predetermined target node includes a node on the sea, the node visualization output unit 12 may output a predetermined warning. Further, when the route to a predetermined target node includes a node outside the visualization area, the node visualization output unit may output a predetermined warning. The "predetermined warning" may be, for example, a warning that changes the display mode such as the display color for a node on the sea in FIG. 5, or a warning that outputs a warning sound from a speaker for a node outside the visualization area.

[0041] [Description of Operations] FIG. 6 is a flowchart for explaining the operation of the investigation apparatus of the present disclosure. As shown in this figure, first, one or more target node calibration results are acquired (step S61). Next, the region attribute value is acquired from the acquired calibration result (step S62). Information regarding the region associated with the acquired region attribute value is acquired (step S63). Finally, based on the calibration result, the region attribute value, and the region information, information (region information) regarding the region to which the target node belongs is output (step S64).

[0042] [Hardware Configuration] Next, the hardware configuration of the investigation apparatus according to the first embodiment will be described. FIG. 7 is a block diagram showing an example of the hardware configuration of the investigation apparatus 10 according to the embodiment of the present disclosure.

[0043] The investigation device 10 can be configured by an information processing device (computer) and has the configuration illustrated in FIG. 7. For example, the investigation device 10 includes a CPU (Central Processing Unit) 71, a memory 72, an input / output interface 73, and a NIC (Network Interface Card) 74 which is a communication means, all of which are interconnected by an internal bus 75.

[0044] However, the configuration shown in FIG. 7 is not intended to limit the hardware configuration of each device constituting the investigation device 10. The investigation device 10 may each include hardware not shown, or may not include the input / output interface 73 if not necessary. Also, the number of CPUs etc. included in the investigation device 10 is not intended to be limited to the example shown in FIG. 7, and for example, a plurality of CPUs may be included in each device.

[0045] The memory 72 is a RAM (Random Access Memory), a ROM (Read Only Memory), and an auxiliary storage device (such as a hard disk).

[0046] The input / output interface 73 is a means serving as an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display or the like. The input device is a device that receives user operations such as a keyboard and a mouse.

[0047] The functions of the investigation device 10 are realized by a calibration result acquisition program which is a processing module, a node visualization output program, a table that holds regional attribute values, a table that holds regional information, a medium speed (Vm), etc.

[0048] The above processing module is realized, for example, by the CPU 71 executing programs stored in the memory 72 respectively. Also, the program can be downloaded via a network or updated using a storage medium storing the program. The above processing module may be realized by a semiconductor chip. That is, any means for executing the functions performed by the above processing module using some hardware and / or software may be sufficient.

[0049] [Operation of Hardware] When the hardware of the survey device 10 starts processing, the calibration result acquisition program is called from the memory 72 and becomes in an execution state by the CPU 71. This program causes three survey nodes S1 to S3 (three or more, which may include the survey device 10) in the network to send survey packets to one target node and receive response packets, thereby obtaining the value of the round-trip time RTT and storing the three RTT values in the memory 72. This program calculates the value of ((each RTT value × Vm) ÷ 2) for these three RTT values by the arithmetic processing of the CPU 71 and obtains the distances r1 to r3. Substitute r1 to r3 and the coordinate values (x1, y1), (x2, y2), (x2, y2) of the known survey nodes S1 to S3 into the above formula (3), and obtain the solution (x, y) by the arithmetic processing of the CPU 71 as a system of simultaneous equations. This series of processing is executed for N target nodes to obtain the coordinate values (x1, y1) to (xN, yN) of the target nodes 1 to N. These are temporarily stored in the memory 72.

[0050] The coordinate values (x1, y1) to (xN, yN) are converted into latitudes and longitudes (φ1, λ1) to (φN, λN) in the CPU 71 by an existing method. Next, the node visualization output program is called from the memory 72 to the CPU 71 and becomes in an execution state. This program reads a table (shown in FIG. 3) that holds the regional attribute values stored in the memory 72. Next, this program reads the coordinate values (φ1, λ1) to (φN, λN) that are the calibration results and obtains the regional attribute values a1 to aN of the cells corresponding to each value.

[0051] Next, the program reads a table (shown in FIG. 4) that holds the area information stored in the memory 72. The program reads the area information held from the area attribute values a1 to aN related to each acquired target node.

[0052] The read area attribute values and area information are visualized by the program and output by an input / output interface 73 such as a display (see FIG. 5). The output may be arranged together with icons or the like on the screen corresponding to the corresponding latitude and longitude on the pre-loaded map.

[0053] [Description of Effects] As described above, the survey device of the present embodiment can visualize information regarding the area to which the target nodes belong on a map by calibrating each target node based on latitude and longitude. Thereby, it is possible to easily visualize in what route or environment the communication is being performed.

[0054] [Second Embodiment] [Configuration of the Device] An example of the configuration of the survey device of the second embodiment is as shown in FIG. 8. The survey device 10 of the second embodiment includes a calibration result acquisition unit 11, a node visualization output unit 12, an area attribute value holding unit 13, and an area information holding unit 14. Since the above-described constituent elements have been described in the above embodiment, the description thereof is omitted. The features of the present embodiment are that it newly has a control signal transmission unit 15, and the node visualization output unit 12 can further calculate, visualize, and output the route to reach the target node.

[0055] The node visualization output unit 12 of the present embodiment can further calculate, visualize, and output the route to reach the target node. For example, by sending a traceroute command or the like to the target node, it is possible to acquire the addresses of nodes such as the target node and router in the route.

[0056] FIG. 9 is a diagram for explaining the route calculation process of the node visualization output unit 12 in the investigation apparatus of the present disclosure. As shown in this figure, there are an investigation node ID that transmits an investigation packet, an investigation target, that is, a node ID of the destination of the investigation packet, and a reference target node ID that is a node ID of a waypoint intervening between the investigation node and the investigation target node. In FIG. 9, as a result of transmitting investigation packets from investigation nodes A, B, and C to each of the investigation target nodes, reference nodes corresponding to nodes 5 and 6 are discovered and shown in a mode recognized as a route. FIG. 10 shows an output obtained by illustrating the route based on the information in FIG. 9 by line segments on a map.

[0057] The control signal transmission unit 15 transmits a signal for causing a communication control device that performs communication control to execute predetermined communication control according to the route calculated by the node visualization output unit 12. "According to the calculated route" includes, for example, a case where a route to a predetermined target node includes a node outside the visualization area. The "communication control device" refers to a network device such as a router. "Predetermined communication control" may include communication interruption, detour to another route, and the like.

[0058] For example, the control signal transmission unit 15 may execute a process of transmitting a control signal for causing the node visualization output unit 12 to execute predetermined communication control when a route to a predetermined target node has a predetermined change within a predetermined time.

[0059] Specifically, when the path length to a predetermined target node changes by a predetermined amount or more within a predetermined time in the node visualization output unit 12, the control signal transmission unit 15 may execute processing such as transmitting a control signal for executing control to close the path leading to the target node. Note that the "path length" of each path can be calculated based on the respective path elapsed times that can be investigated by investigation packets (such as by ping or traceroute commands) and the medium speed (Vm) of the path. When the path length suddenly becomes longer than the timing of the previous node visualization output, some abnormality has occurred on the network, and it is highly likely that a detoured path is being used. Even if there is a prospect of recovery, it is highly likely that the route remains a high-risk route. When there is a risk that an abnormality has occurred in such a network, control may be performed to shorten the predetermined time interval for executing the processing by the calibration result acquisition unit 11 and the node visualization output unit 12 to perform more detailed investigation and monitoring.

[0060] When the path to a predetermined target node has a predetermined change within a predetermined time, the node visualization output unit 12 may visualize and output the degree of the predetermined change with at least one of elements such as a numerical value, a figure, and a color. For example, as a result of the calibration by the calibration result acquisition unit 11, when the path length to a target node becomes 1.5 times longer than the previous calibration result, visualization such as blinking an icon that is a figure indicating the target node may be performed.

[0061] [Description of Operations] FIG. 11 is a flowchart for explaining an example of the operation of the survey apparatus according to an embodiment of the present disclosure. As shown in this figure, when the survey apparatus starts operating, it acquires one or more target node calibration results (step S1101). Next, the processes corresponding to steps S62 to S64 in FIG. 6 are executed (description is omitted). Next, the survey apparatus calculates a path to reach the target node, visualizes it, and outputs it (step S1102). Next, it is determined whether the output path length has changed by a predetermined amount or more compared to the previous output (step S1103). If there is a change (step S1103, Y), a control signal for executing control to close the path leading to the target node is transmitted to the control device (step S1104). If there is no change (step S1103, N), the process proceeds to a process of waiting for a predetermined time (step S1105). After the predetermined time has elapsed, it is determined whether to end (step S1106). If it does not end, the process returns to the process of acquiring the calibration result again (step S1101).

[0062] [Description of Effects] As described above, the survey apparatus according to the present embodiment can calculate and visualize a path to reach a target node. Further, by calibrating each target node at predetermined time intervals and calculating the path, it becomes possible to observe large fluctuations in the network path caused by obstacles or the like, and it is possible to execute processes for control such as closing or detouring the path. Therefore,

[0063] [Third Embodiment] In the third embodiment, a communication system including the survey apparatus in the second embodiment and a network control device that controls a communication path will be described.

[0064] [Configuration of the Device] FIG. 12 is a diagram for showing an example of the configuration of a communication system according to an embodiment of the present disclosure. As shown in this figure, the communication system of this embodiment includes an investigation device 10 and a communication control device 20. The investigation device 10 includes a calibration result acquisition unit 11, a node visualization output unit 12, a regional attribute value holding unit 13, a regional information holding unit 14, and a control signal transmission unit 15. Since these constituent elements have been described in the above embodiment, the description thereof is omitted. The characteristic point of the communication system of this embodiment is that, in addition to the constituent elements of the investigation device 10 of the above embodiment, it has a communication control device 20 and a communication control unit 21.

[0065] The communication control device 20 corresponds to network devices such as routers and switches. A plurality of communication control devices 20 may exist. The communication control unit 21 receives the control signal transmitted from the control signal transmission unit 15 and executes communication control. The "control signal" is a signal for controlling processes generally executed by routers and the like, such as blocking the communication path of packets to a specific destination and rerouting the communication path of packets to a specific destination. In receiving the signal, processes such as device authentication may be involved, and the configuration may be such that reception of an illegal control signal is prevented.

[0066] [Description of Effects] According to the communication system of this embodiment, it is possible to execute appropriate communication control according to the state of the communication path. In particular, even when the situation on the path is unknown in the Internet, by visualizing and monitoring the changes in the path, it is possible to reduce risks such as interruption and delay of communication caused by failures and the like.

[0067] Some or all of the above embodiments may be described as follows, but are not limited thereto. [Form 1] It is as described in the investigation device according to the first aspect described above. [Form 2] A region attribute value holding unit that holds a region attribute value which is a value indicating an attribute of a region at its latitude and longitude associated with the latitude and longitude, and a region information holding unit that holds region information which is information related to the region associated with the region attribute value. The node visualization output unit further outputs information related to the region to which the target node belongs based on the calibration result, the region attribute value, and the region information. Preferably, it is an investigation apparatus of Form 1. [Form 3] The region information holding unit holds, as the region information associated with the region attribute value, whether the region having the region attribute value is at least one of within the country, outside the country, on the sea, or outside the visualization area. Preferably, it is an investigation apparatus of Form 2. [Form 4] The node visualization output unit further calculates, visualizes, and outputs a route for reaching the target node. Preferably, it is an investigation apparatus of Form 3. [Form 5] It further has a control signal transmission unit that transmits a signal for causing a communication control apparatus that performs communication control according to the route calculated by the node visualization output unit to execute predetermined communication control. Preferably, it is an investigation apparatus of Form 4. [Form 6] The control signal transmission unit transmits a control signal for causing the execution of predetermined communication control when, in the node visualization output unit, the route to reach a predetermined target node has a predetermined change within a predetermined time. Preferably, it is an investigation apparatus of Form 5. [Form 7] The node visualization output unit visualizes and outputs the degree of a predetermined change by at least one of a numerical value, a figure, and a color. Preferably, it is an investigation apparatus of Form 6. [Form 8] The control signal transmission unit transmits a control signal for executing control to close the route leading to the target node when, in the node visualization output unit, the route length to reach a predetermined target node has a change of a predetermined amount or more within a predetermined time. Preferably, it is an investigation apparatus of Form 6. [Form 9] The control signal transmission unit is preferably an investigation device of form 5 that transmits a control signal for causing the node visualization output unit to execute control of a predetermined communication when a node outside the visualization area is included in the path to reach a predetermined target node. [Form 10] The node visualization output unit is preferably an investigation device of form 4 that outputs a predetermined warning when a node on the sea is included in the path to reach a predetermined target node. [Form 11] The node visualization output unit is preferably an investigation device of form 4 that outputs a predetermined warning when a node outside the visualization area is included in the path to reach a predetermined target node. [Form 12] An investigation device preferably of any one of forms 1 to 11, further having a calibration result editing unit that edits the calibration result. [Form 13] It is as in the communication system according to the above second perspective. [Form 14] It is as in the investigation method according to the above third perspective. [Form 15] It is as in the program according to the above fourth perspective.

[0068] The disclosures of the above-mentioned patent documents and the like cited are hereby incorporated by reference in this document. Within the scope of the entire disclosure of the present invention (including the claims), further modifications and adjustments of the embodiments or examples can be made based on the basic technical idea. Also, within the scope of the entire disclosure of the present invention, various combinations or selections of various disclosure elements (including each element of each claim, each element of each embodiment or example, each element of each drawing, etc.) are possible. That is, the present invention naturally includes all various deformations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, for the numerical ranges described in this document, any numerical value or small range included within the range should be construed as specifically described even in the absence of separate description.

Explanation of Reference Numerals

[0069] 10: Survey device 11: Calibration result acquisition unit 12: Node visualization output unit 13: Regional attribute value holding unit 14: Regional information holding unit 15: Control signal transmission unit 20: Communication control device 21: Communication control unit 71: CPU 72: Memory 73: Input / output interface 74: NIC 75: Internal bus

Claims

1. A calibration result acquisition unit that acquires calibration results of one or more target nodes to be investigated in a network, A node visualization output unit that visualizes and outputs by arranging the target nodes on a map based on the calibration results, having, The node visualization output unit further outputs information regarding the area to which the target node belongs. An investigation device.

2. A regional attribute value holding unit that holds a regional attribute value, which is a value indicating the attribute of the area at the latitude and longitude associated with the latitude and longitude, A regional information holding unit that holds regional information, which is information regarding the area, associated with the regional attribute value, further having, The node visualization output unit further outputs information regarding the area to which the target node belongs based on the calibration result, the regional attribute value, and the regional information. The investigation device according to Claim 1.

3. The regional information holding unit holds any one of whether the area having the regional attribute value associated with the regional attribute value is at least within the country, outside the country, at sea, or outside the visualization area. The investigation device according to Claim 2.

4. The node visualization output unit further calculates, visualizes, and outputs a route for reaching the target node. The investigation device according to Claim 3.

5. A control signal transmission unit that transmits a signal for causing a communication control device that performs communication control according to the route calculated by the node visualization output unit to execute predetermined communication control. The investigation device according to Claim 4, further having.

6. The control signal transmission unit transmits a control signal for causing execution of predetermined communication control when, in the node visualization output unit, a route to reach a predetermined target node has changed by a predetermined amount within a predetermined time. The investigation device according to Claim 5.

7. The node visualization output unit visualizes and outputs at least one of a numerical value, a figure, and a color for a predetermined degree of change. The investigation device according to Claim 6.

8. The control signal transmission unit transmits a control signal for executing control to close the route leading to the target node when, in the node visualization output unit, the route length to reach a predetermined target node has changed by a predetermined amount or more within a predetermined time. The investigation device according to Claim 6.

9. When a node outside the visualization area is included in the path to reach a predetermined target node in the node visualization output unit, the control signal transmission unit transmits a control signal for executing control of predetermined communication. The survey device according to claim 5.

10. When a node on the sea is included in the path to reach a predetermined target node, the node visualization output unit outputs a predetermined warning. The survey device according to claim 4.

11. When a node outside the visualization area is included in the path to reach a predetermined target node, the node visualization output unit outputs a predetermined warning. The survey device according to claim 4.

12. A calibration result editing unit for editing the calibration result The survey device according to any one of claims 1 to 11, further comprising:

13. A calibration result acquisition unit that acquires calibration results of one or more target nodes that are survey targets in a network; Based on the calibration result, the target node is visualized and output by arranging it on a map, information regarding the area to which the target node belongs is output, and a path for reaching the target node is calculated and visualized and output. A node visualization output unit; A control signal transmission unit that transmits a signal for causing a communication control device that performs communication control to execute control of predetermined communication according to the path calculated by the node visualization output unit; A survey device having: A communication control unit that receives a control signal transmitted from the control signal transmission unit and executes communication control; A communication control device having: A communication system including:

14. A survey method for causing a computer to execute the following steps: A step of acquiring calibration results of one or more target nodes that are survey targets in a network; Based on the calibration result, arranging the target node on a map and visualizing and outputting information regarding the area to which the target node belongs; A survey method having:

15. A process of acquiring calibration results of one or more target nodes that are survey targets in a network; Based on the calibration result, arranging the target node on a map and visualizing and outputting information regarding the area to which the target node belongs; A program for causing a computer to execute.

Images