Port detector, port abnormality detection system, method for manufacturing port detector, and port abnormality detection method

Abstract

To provide a port detector, a port abnormality detection system and a port abnormality detection method capable of detecting an abnormality of an unused port.SOLUTION: A port detector 20 included in a port abnormality detection system 1 comprises: a housing 21 having a shape corresponding to the shape of a target port 11 of a target device 10; a detection unit that enters a first state when the housing 21 is fully inserted into the target port 11; and an output unit that outputs an abnormal signal indicating that the housing has been removed from the target port 11 or stops outputting a normal signal indicating that the housing is inserted into the target port 11 when the detection unit enters an inverted state of the first state.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a port detector, a port abnormality detection system, a method for manufacturing a port detector, and a port abnormality detection method. [Background technology]

[0002] One of the countermeasures against cyber attacks on information devices is to prevent unauthorized connections to the communication ports of the information devices. The analysis result information output method described in Patent Document 1 presents the analysis results of recommended security measures and the basis for the measures, and presents, as an example of the recommended security measures, a measure to lock unused ports against connections to unauthorized devices.

[0003] Another measure is to install port blocking devices to prevent physical access to unused ports on network devices. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Publication No. 2023-57223 Summary of the Invention [Problem to be solved by the invention]

[0005] Although Patent Document 1 presents a measure to lock unused ports, it does not disclose a means for detecting unauthorized connections to unused ports. Furthermore, port blocking devices attached to unused ports can be removed using commercially available keys or general-purpose tools, making it difficult to reliably prevent unauthorized access to ports.

[0006] The present invention has been made based on this background, and aims to provide a port detector, a port abnormality detection system, a method for manufacturing a port detector, and a port abnormality detection method that are capable of detecting abnormalities in unused ports. [Means for solving the problem]

[0007] In order to achieve the above object, a port detector according to one aspect of the present invention comprises: a housing having a shape corresponding to the shape of a target port of the target device; a detection unit that is in a first state when the housing is fully inserted into the target port; and an output unit that outputs an abnormal signal indicating that the device has been removed from the target port when the detection unit is in the inverted state of the first state, or stops outputting a normal signal indicating that the device is inserted into the target port. [Effects of the Invention]

[0008] According to the present invention, it is possible to provide a port detector, a port abnormality detection system, a method for manufacturing a port detector, and a port abnormality detection method that are capable of detecting an abnormality in an unused port. [Brief explanation of the drawings]

[0009] [Figure 1] 1 is a schematic diagram showing a configuration of a port abnormality detection system according to a first embodiment of the present invention. [Figure 2] 1A and 1B are circuit diagrams of a port detector according to a first embodiment of the present invention, in which FIG. 1A shows a state when inserted into a target port, and FIG. 1B shows a state when removed from the target port. [Figure 3] 2 is a block diagram showing a hardware configuration of a detecting terminal according to the first embodiment of the present invention. FIG. [Figure 4] 2 is a block diagram showing a functional configuration of a detecting terminal according to the first embodiment of the present invention. FIG. [Figure 5] 4 is a flowchart showing the flow of a port abnormality determination process according to the first embodiment of the present invention. [Figure 6] FIG. 10 is a schematic diagram showing the configuration of a port abnormality detection system according to a second embodiment of the present invention. [Figure 7] 10A and 10B are circuit diagrams of a port detector according to a second embodiment of the present invention, in which FIG. 10A shows the state when inserted into a target port, and FIG. 10B shows the state when removed from the target port. [Figure 8] FIG. 10 is a schematic diagram showing the configuration of a port abnormality detection system according to a third embodiment of the present invention. [Figure 9] 10A and 10B are circuit diagrams of a port detector according to a third embodiment of the present invention, in which FIG. 10A shows the state when inserted into a target port, and FIG. 10B shows the state when removed from the target port. [Figure 10] 11 is a flowchart showing the flow of a port abnormality determination process according to the third embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0010] A port detector, a port abnormality detection system, a port detector manufacturing method, and a port abnormality detection method according to embodiments of the present invention will be described in detail below with reference to the drawings. In each drawing, the same or equivalent parts are designated by the same reference numerals.

[0011] (Embodiment 1) The port abnormality detection system 1 according to the first embodiment is a system that monitors unauthorized access to unused ports of a target device 10, and detects port abnormalities by detecting the removal of a port detector 20 inserted into an unused port.

[0012] 1, the port abnormality detection system 1 includes a port detector 20, a detection terminal 30 to which the port detector 20 is connected via a communication cable 23, and a management server 50 connected to the detection terminal 30 via a network 40. For ease of explanation, FIG. 1 shows one each of a target device 10, a target port 11, a port detector 20, and a detection terminal 30, but any number of target devices 10, target ports 11, port detectors 20, and detection terminals 30 may be included in the port abnormality detection system 1. More specifically, the number of port detectors 20 is equal to or greater than the total number of target ports 11 of one or more target devices 10, one or more port detectors 20 are connected to one detection terminal 30, and one or more detection terminals 30 are connected to the management server 50 via the network 40.

[0013] The target device 10 is any device to be protected from cyber-attacks and has one or more communication ports. The communication port is a connection port for communication using any communication method, such as Ethernet, Universal Serial Bus (USB), High Definition Multimedia Interface (HDMI), Digital Visual Interface (DVI), or DisplayPort. The communication port may also be a management port used by a network administrator to manage device settings, or a console port using a serial transmission method unique to the device manufacturer for the same purpose. In this case, the communication port may have a shape such as RJ45 or RS-232C. The target port 11 to be protected is an unused communication port to which no communication cable is connected.

[0014] [Port Detector] First, we will explain the port detector 20 included in the port abnormality detection system 1 according to this embodiment. When the port detector 20 is removed from the target port 11 after being inserted therein, it detects the removal by outputting an abnormality signal indicating that an abnormality has occurred or by stopping a normal signal indicating that the port is normal.

[0015] The port detector 20 includes a housing 21 having a shape corresponding to the shape of the target port 11. That is, the housing 21 has the same shape as the cable connector inserted into the target port 11. For example, as shown in FIG. 1, if the target port 11 is an Ethernet port, the shape of the housing 21 is a rectangular parallelepiped with a latch at the top to prevent it from coming loose, similar to the shape of an Ethernet cable connector.

[0016] The port detector 20 further includes a detection unit that enters a first state when the housing 21 is inserted all the way into the target port 11, and an output unit that outputs an abnormal signal indicating that the housing 21 has been pulled out of the target port 11 or stops the normal signal when the detection unit enters an inverted state of the first state.

[0017] In this embodiment, the detection unit is a push switch 22. The push switch 22 is provided so that its tip protrudes from the housing 21 of the port detector 20. When the housing 21 is inserted into the target port 11, the push switch 22 is pressed against the inner wall of the target port 11, and the push switch 22 enters a conductive state (ON), which is a first state (detection step). When the housing 21 is removed from the target port 11, the push switch 22 enters an open state (OFF), which is the inverse of the first state.

[0018] The location of the push switch 22 is arbitrary, but it is preferable to place it at the tip of the housing 21 in the insertion direction, as shown in Figure 1. For example, if the push switch 22 is placed on the side of the housing 21, an attacker attempting to avoid detection could insert a tool such as a thin plate or pin into the gap and pull out the port detector 20 from the target port 11 while keeping the switch pressed down. In this way, it is preferable to place the push switch 22 in a location where it is difficult to tamper with the removal detection state from outside.

[0019] The port detector 20 has, for example, a circuit as shown in Fig. 2. As shown in Fig. 2(a), when the housing 21 is inserted deep into the target port 11 and the push switch 22 is pressed to establish electrical continuity, the output terminal S d becomes high level, and a normal signal is output from the I / O connector 24. On the other hand, when the housing 21 is pulled out from the target port 11 and the push switch 22 is opened as shown in FIG. 2(b), the normal signal from the I / O connector 24 stops, and the output terminal S d becomes low level (output step).

[0020] 2, the circuit to which the push switch 22 is connected and the circuit to which the I / O connector 24 is connected are insulated from each other because they are connected via a photocoupler 25. Note that the circuit diagram shown in Fig. 2 is a simplified example, and any circuit can be used as long as it can stop a normal signal or output an abnormal signal when the push switch 22 is turned OFF.

[0021] The I / O connector 24 is, for example, a GPIO (General Purpose Input / Output) connector. As shown in FIG. 1, the I / O connector 24 is connected to the detection terminal 30 via a communication cable 23. The communication cable 23 is preferably covered with a sheath having a certain level of hardness or higher to prevent unauthorized access by an attacker attempting to evade detection. A fake cable may be provided inside the sheath to make it difficult to identify the communication cable 23. The communication cable 23 is preferably covered with a sheath having a high dielectric strength to prevent an attacker from eavesdropping on or tampering with the electrical signals flowing through the communication cable 23.

[0022] [Detection device] Next, we will explain the detecting terminal 30. The detecting terminal 30 is any computer that generates port information based on the output of the port detector 20 and transmits it to an external device. As shown in Figure 3, the detecting terminal 30 includes a processor 31, a primary storage device 32, a secondary storage device 33, an input / output unit 34, and a communication interface 35.

[0023] The processor 31 of the detecting terminal 30 is, for example, a CPU (Central Processing Unit), and performs various processes including the port abnormality determination process by executing programs stored in the secondary storage device 33. The primary storage device 32 is a memory that can read and write data at high speed, such as a RAM (Random Access Memory), and temporarily stores programs and various data read from the secondary storage device 33 for the processor 31 to execute the arithmetic processing.

[0024] The secondary storage device 33 is a large-capacity storage device such as a flash memory, and stores various data including a port correspondence table 331 and determination data 332 shown in FIG. 4, as well as processing programs executed by the processor 31. The port correspondence table 331 is a table that associates identification information of each port detector 20 with identification information such as the port number of the target port 11 into which each port detector 20 is inserted. The identification information of each port detector 20 may be identification information of a connection pin of the detecting terminal 30 to which the communication cable 23 of each port detector 20 is connected. The determination data 332 is data of the determination result indicating the state of the target port 11 determined based on a signal acquired from the port detector 20.

[0025] The communication interface 35 is an interface for transmitting and receiving data to and from external devices such as a higher-level management server 50 via the network 40. The communication method of the communication interface 35 is arbitrary, and may be, for example, wireless communication such as wireless LAN or wired communication such as Ethernet or USB.

[0026] The processor 31 executes a program for port abnormality determination processing stored in the secondary storage device 33, thereby functioning as a determination unit 311 and a transmission unit 312, as shown in FIG.

[0027] The determination unit 311 determines whether the port detector 20 is inserted into the target port 11 or whether the port detector 20 is removed from the target port 11, based on the signal acquired by the input / output unit 34 from the port detector 20. The determination unit 311 also references a port correspondence table 331 stored in the secondary storage device 33 to identify the target port 11 corresponding to the determination result, and stores the identification information of the target port 11 and port information indicating the state of the target port 11 as determination data 332 in the secondary storage device 33.

[0028] The transmitter 312 transmits the determination data 332 to the management server 50 via the network 40 at a predetermined timing. The transmitted determination data 332 may include, in addition to port information indicating the determination result, the time when the port detector 20 determined that the target device 10 was unplugged, the name and installation location of the target device 10, identification information of the detecting terminal 30, etc.

[0029] [Management Server] The management server 50 is any conventional server computer. The management server 50 monitors one or more target devices 10 by receiving determination data 332 from one or more detecting terminals 30, and processes alarms or shares information based on the determination data 332.

[0030] The operation of the port abnormality detection system 1 configured as above will be described with reference to the flowchart of FIG.

[0031] The target device 10 is operated with a port detector 20 inserted into one or more target ports 11, which are unused communication ports. The detecting terminal 30 first acquires the input level of the signal received by the input / output unit 34 from each port detector 20 (step S101). When the port detector 20 is inserted all the way into the target port 11 and the push switch 22 is pressed, the output signal of the I / O connector 24 becomes a high level indicating normal. If the input level exceeds the threshold value (step S102: No), the determining unit 311 of the detecting terminal 30 determines that the port detector 20 is normal, and returns to step S101.

[0032] On the other hand, when the port detector 20 is removed from the target port 11 and the push switch 22 is open, the output signal of the I / O connector 24 goes low, indicating an abnormality. If the input level is equal to or lower than the threshold (step S102: Yes), the detecting terminal 30 determines that an abnormality has occurred, and the transmitter 312 notifies the management server 50 from the communication interface 35 via the network 40 (step S103). At this time, the determination data 332 that the transmitter 312 transmits to the management server 50 includes identification information of the target port 11 and port information indicating the state of the target port 11, which are acquired by referring to the port correspondence table 331. The determination data 332 may further include the time when it was determined that the port detector 20 was removed, the name and installation location of the target device 10, identification information of the detecting terminal 30, etc.

[0033] In this way, the management server 50 can obtain port information indicating that the port detector 20 has been removed from the target port 11. Based on the port information, the management server 50 can notify the administrator by, for example, outputting an alarm, thereby making it possible to prevent unauthorized access to the target port 11.

[0034] As described above, the port abnormality detection system 1 according to this embodiment includes a port detector 20 having a housing 21 having a shape corresponding to the shape of the target port 11 of the target device 10, a push switch 22 that is pressed when the housing 21 is inserted all the way into the target port 11, and an output unit that stops outputting a normal signal when the push switch 22 is released. The port abnormality detection system 1 also includes a detecting terminal 30 that determines that the port detector 20 has been removed from the target port 11 when the output signal of the port detector 20 falls below a threshold, and a management server 50 that monitors the target port 11 by receiving determination data 332 transmitted from the detecting terminal 30. This makes it possible to detect abnormalities such as unauthorized access to unused ports of the target device 10.

[0035] (Embodiment 2) Similar to the first embodiment, the port abnormality detection system 2 according to the second embodiment is a system for detecting abnormalities in the target port 11 of the target device 10, and includes a port detector 60, a detecting terminal 30, and a management server 50. The configuration of the port detector 60 differs from the configuration of the port detector 20 according to the first embodiment. The hardware configurations and operations of the detecting terminal 30 and the management server 50 are the same as those of the first embodiment, and therefore will not be described.

[0036] [Port Detector] 6 and 7, a port detector 60 included in the port abnormality detection system 2 according to the present embodiment will be described. Like the port detector 20 according to the first embodiment, the port detector 60 detects removal by outputting an abnormal signal or stopping a normal signal when the port detector 60 is removed from the target port 12 while inserted therein.

[0037] The target port 12 into which the port detector 60 according to this embodiment is inserted is a port having a power supply terminal, such as a USB port or an Ethernet port having a PoE (Power Over Ethernet) function. In this embodiment, a case will be described in which the target port 12 is a USB port.

[0038] The port detector 60 includes a housing 61 having a shape corresponding to the shape of the target port 12. That is, the housing 61 has a shape similar to that of a cable connector inserted into the target port 12. For example, as shown in FIG. 6, if the target port 12 is a USB port, the shape of the housing 61 is a shape having a board with a power supply terminal mounted within a rectangular frame, similar to that of a USB cable connector.

[0039] The port detector 60 further includes a detection unit that enters a first state when the housing 61 is inserted all the way into the target port 12, and an output unit that outputs an abnormal signal indicating that the housing 61 has been removed from the target port 12 or stops the normal signal when the detection unit enters a state opposite to the first state. The I / O connector 64 that is the output unit is, for example, a GPIO connector.

[0040] In this embodiment, the detection unit includes a circuit that converts the voltage supplied from the target device 10 into an output signal, and includes, for example, a DC / DC converter 62. When the housing 61 of the port detector 60 is inserted all the way into the target port 12, the power supply terminal of the target port 12 comes into contact with the power supply terminal of the port detector 60, and the port detector 60 enters a first state in which voltage is supplied from the power supply terminal. As illustrated in FIG. 7( a), when the target port 12 is a USB port and the I / O connector 64 is a GPIO port, the standard output voltage of USB, 5 V, differs from the standard input voltage of GPIO, 3.3 V, and is therefore converted to 3.3 V by the DC / DC converter 62.

[0041] When the detection unit of the port detector 60 is in the first state, the output terminal S of the I / O connector 64, which is the output unit, d becomes high level, and a normal signal is output from the I / O connector 64. On the other hand, as shown in FIG. 7(b), in an inverted state in which the port detector 60 is pulled out from the target port 12, the connection between the power supply terminal of the target port 12 and the power supply terminal of the port detector 60 is cut off, and the supply of voltage from the power supply terminal is stopped, the normal signal output from the I / O connector 64 stops, and the output terminal S d becomes low level.

[0042] The I / O connector 64 is connected to the detection terminal 30 via the communication cable 23 as shown in Fig. 6. Note that the circuit diagram shown in Fig. 7 is a simplified example, and any circuit configuration may be used as long as it can stop a normal signal or output an abnormal signal when the connection between the power supply terminal of the target port 12 and the power supply terminal of the port detector 60 is cut off.

[0043] The configuration and functions of the detecting terminal 30 that receives the output signal of the port detector 60 and the management server 50 that receives the determination result of the detecting terminal 30 are the same as those of the first embodiment.

[0044] As described above, the port detector 60 according to this embodiment includes a housing 61 having a shape corresponding to the shape of the target port 12 of the target device 10, a detection unit including a circuit that converts the voltage supplied from the target device 10 into an output signal when the housing 61 is fully inserted into the target port 12, and an output unit that stops the normal signal by stopping the power supply from the target device 10 when the housing 61 is removed from the target port 12. This makes it possible to detect abnormalities such as unauthorized access to an unused port having a power supply terminal of the target device 10.

[0045] (Embodiment 3) The port abnormality detection system 3 according to the third embodiment is a system that detects an abnormality in a target port 12 of a target device 10, similar to the first and second embodiments, and includes a port detector 70, a detecting terminal 30, and a management server 50, as shown in Fig. 8. The configuration of the port detector 70 and the operation between the port detector 70 and the detecting terminal 30 differ from those of the first and second embodiments. The operation between the detecting terminal 30 and the management server 50 is the same as that of the first embodiment, and therefore a description thereof will be omitted.

[0046] [Port Detector] The port detector 70 included in the port abnormality detection system 3 according to this embodiment will be described with reference to Figures 8-10. Like the port detector 60 according to the second embodiment, the port detector 70 detects removal by outputting an abnormal signal or stopping a normal signal when the port detector 70 is removed from the target port 12 while inserted therein.

[0047] The target port 12 into which the port detector 70 is inserted is a port having a power supply terminal, such as a USB port or an Ethernet port having a PoE (Power Over Ethernet) function. In this embodiment, a case will be described in which the target port 12 is a USB port.

[0048] The port detector 70 includes a housing 71 having a shape corresponding to the shape of the target port 12. That is, the housing 71 has a shape similar to that of a cable connector inserted into the target port 12. For example, as shown in FIG. 8, if the target port 12 is a USB port, the shape of the housing 71 is a shape similar to that of a USB cable connector, with a board on which a power supply terminal is mounted within a rectangular frame.

[0049] The port detector 70 further includes a detection unit that enters a first state when the housing 71 is inserted all the way into the target port 12, and an output unit that outputs an abnormal signal indicating that the housing 71 has been pulled out of the target port 11 or stops the normal signal when the detection unit enters an inverted state of the first state.

[0050] 9, in this embodiment, the wireless communication module 72, which is driven by the voltage supplied from the target device 10, corresponds to the detection unit and the output unit. More specifically, the detection unit is a power supply unit of the wireless communication module 72 that enters a first state in which voltage is supplied from the target device 10 when the housing 71 is fully inserted into the target port 12, and the output unit is a wireless communication unit of the wireless communication module 72 that stops wireless communication of a normal signal indicating that the module is inserted into the target port 12 when the module is in an inverted state in which power supply is stopped.

[0051] The communication method of the wireless communication module 72 may be any method, such as WiFi (registered trademark), Bluetooth (registered trademark), Zigbee (registered trademark), LPWA, local 5G, infrared communication, etc. In this embodiment, a case will be described in which the wireless communication module 72 is a WiFi module.

[0052] When the housing 71 of the port detector 70 is inserted all the way into the target port 12, the power supply terminal of the target port 12 comes into contact with the power supply terminal of the port detector 70, and the port detector 70 enters a first state in which a voltage is supplied from the power supply terminal. As shown in Fig. 9(a), when the target port 12 is a USB port, 5V, which is the standard output voltage of USB, is supplied to the wireless communication module 72. The circuit diagram shown in Fig. 9 is a simplified example.

[0053] When the port detector 70 is in the first state, a normal signal is transmitted from the wireless communication module 72. On the other hand, as shown in Fig. 9(b), when the port detector 60 is pulled out from the target port 12 and the power supply terminal of the target port 12 is disconnected from the power supply terminal of the port detector 60, the wireless communication module 72 stops transmitting the normal signal.

[0054] [Detection device] Next, the detecting terminal 30 will be described. The detecting terminal 30 is any computer that generates port information based on the output of the port detector 70 and transmits it to an external device. The hardware configuration of the detecting terminal 30 is the same as in the first embodiment, but differs from the first embodiment in that the input / output unit 34 in FIGS. 3 and 4 has a wireless communication function.

[0055] The secondary storage device 33 stores various programs as well as a port correspondence table 331 and determination data 332. In the port correspondence table 331, the identification information of each port detector 70 associated with the identification information of the target port 12 is, for example, a physical address such as a MAC address of the wireless communication module 72 or identification information that is preset in the control program of the wireless communication module 72. The determination data 332 is data of the determination result that indicates the state of the target port 12 determined based on the signal received from the port detector 70.

[0056] The processor 31 executes a program for port abnormality determination processing stored in the secondary storage device 33, thereby functioning as a determination unit 311 and a transmission unit 312, as shown in FIG.

[0057] Based on the signal received by the input / output unit 34 from the port detector 70, the determination unit 311 determines whether the port detector 70 is inserted into the target port 11 or whether the port detector 70 is removed from the target port 11. The determination unit 311 also references a port correspondence table 331 stored in the secondary storage device 33 to identify the target port 11 corresponding to the determination result, and stores the identification information of the target port 11 and port information indicating the state of the target port 11 as determination data 332 in the secondary storage device 33.

[0058] The transmitter 312 transmits the determination data 332 to the management server 50 via the network 40 at a predetermined timing. The transmitted determination data 332 may include, in addition to port information indicating the determination result, the time when the port detector 70 determined that the target device 10 was unplugged, the name and installation location of the target device 10, identification information of the detecting terminal 30, etc.

[0059] For wireless communication between the port detector 70 and the detecting terminal 30, it is preferable to use a communication method with high security strength using encryption or the like to avoid eavesdropping or tampering, which could hinder the detection of unauthorized access to the target port 12. An example of encrypted communication processing between the port detector 70 and the detecting terminal 30 will be described with reference to the flowchart shown in FIG.

[0060] The port detector 70 and the detecting terminal 30 have a common key for encryption. The common key may be set for each port detector 70. First, when the port detector 70 is inserted into the target port 12 and power is turned on, the wireless communication module 72 of the port detector 70 sets a variable T to 1 for initialization (step S201).

[0061] Next, the wireless communication module 72 encrypts information including the variable T with a common key to generate encrypted data (step S202), and wirelessly transmits the encrypted data together with identification information of the wireless communication module 72 (step S203). Here, the identification information of the wireless communication module 72 is, for example, a physical address such as a MAC address. Thereafter, 1 is added to T (step S204), and the process returns to step S202 to repeat the process.

[0062] The processor 31 of the detecting terminal 30 receives a wireless signal from the wireless communication module 72 of the port detector 70 (step S301: Yes) and, if the signal contains identification information of the wireless communication module 72, receives encrypted data (step S302). Next, the processor 31 decrypts the received encrypted data using the common key it holds (step S303).

[0063] If the data is decrypted using the common key (step S304: Yes), processor 31 compares the value of T included in the decrypted data with the value of T at the time of the previous reception (step S305). If T is greater than the previous value (step S305: Yes), processor 31 determines that port detector 70 is fully inserted into target port 12 and is in a normal state, and returns to step S301.

[0064] On the other hand, if the detection terminal 30 is unable to receive a wireless signal from the wireless communication module 72 of the port detector 70 in step S301 (step S301: No), it is predicted that the wireless signal could not be transmitted because the port detector 70 was pulled out of the target port 12 and power supply was stopped, and so it reports this to the management server 50 (step S306).

[0065] Furthermore, if the encrypted data cannot be decrypted using the common key in step S304 (step S304: No), unauthorized access such as spoofing to the port detector 70 is predicted, and a notification is sent to the management server 50 (step S306).

[0066] Furthermore, if the value of T is equal to or less than the previous value in step S305 (step S305: No), unauthorized access such as removing and inserting the port detector 70 and inserting an intermediate device in a short period of time is predicted, and a report is sent to the management server 50 (step S306).

[0067] In this way, the detecting terminal 30 can quickly report to the management server 50 when an abnormality occurs due to deviation from the normal state in which the port detector 70 is fully inserted into the target port 12. Here, the determination data 332 that the detecting terminal 30 sends to the management server 50 when reporting includes identification information of the target port 11 and port information indicating the state of the target port 11. The determination data 332 may further include the time when the port detector 20 determined that the port detector 20 was removed or that unauthorized access had occurred, the event that occurred, the name and installation location of the target device 10, the identification information of the detecting terminal 30, etc.

[0068] As described above, in the port abnormality detection system 3 according to this embodiment, the port detector 70 includes a housing 71 having a shape corresponding to the shape of the target port 12 of the target device 10, and a wireless communication module 72 that receives a voltage from the target device 10 and transmits a wireless signal when the housing 71 is fully inserted into the target port 12. When the port detector 70 is removed from the target port 12, the power supply from the target device 10 stops, causing the port detector 70 to stop transmitting the wireless signal. This enables the detecting terminal 30 to detect abnormalities such as unauthorized access to an unused port having a power supply terminal of the target device 10.

[0069] The present invention is not limited to the above-described embodiment, and the following modifications are possible.

[0070] (Variation) In the above-described embodiments 1-3, the detecting terminal 30 is provided with the port correspondence table 331, which is a table that associates the identification information of each port detector 20, 60, 70 with the identification information of the target ports 11, 12 into which each port detector 20, 60, 70 is inserted, but the management server 50 may also have the port correspondence table 331. That is, the detecting terminal 30 may transmit the identification information of each port detector 20, 60, 70, port information indicating the port status, and the identification information of the detecting terminal 30 to the management server 50, and the management server 50 may refer to the port correspondence table 331 to identify the target port 11, 12 in which an abnormality has occurred.

[0071] Furthermore, in the above-described first embodiment, the case where the push switch 22 is used as the detector has been described. However, the detector may have any configuration as long as it can detect that the port detector 20 has been inserted all the way into the target port 11 or that it has been removed from the target port 11. For example, other switches such as semiconductor switches may be used. Alternatively, a contact sensor or pressure sensor may be used to detect contact of the port detector 20 with the target port 11. Alternatively, an acceleration sensor or tilt sensor may be used to detect movement when the port detector 20 is removed. Alternatively, a light sensor may be used to detect external light when the port detector 20 is exposed from an inserted state. The detector is installed in a position that can prevent unauthorized removal depending on the type of detector.

[0072] Furthermore, if the target port 11 is an Ethernet port and the port detector 20 has an Ethernet communication interface as a detection unit, removal may be detected based on the link established between the port detector 20 and the target device 10. More specifically, the port detector 20 may monitor the link established with the target device 10 when the port detector 20 is inserted into the target port 11, and detect removal when the link is disconnected.

[0073] Furthermore, the port detectors 20, 60, 70 are provided with the housings 21, 61, 71 having shapes corresponding to the shapes of the target ports 11, 12, but the port detectors 20, 60, 70, and particularly the housings 21, 61, 71, may be manufactured using a 3D (three-dimensional) printer.

[0074] Furthermore, in the above-described embodiments 1-3, the detecting terminal 30 transmits the determination data 332 determined based on the output signal of the port detector 20, 60, 70 when the target port 11, 12 is unplugged to the management server 50, which is an external device. However, the port abnormality detection systems 1, 2, 3 do not necessarily have to include the management server 50. For example, the detecting terminal 30 may output an alarm, or the detecting terminal 30 may transmit an abnormality signal to an external device, which then outputs an alarm. In this case, the external device is any monitoring device or alarm device.

[0075] In addition, in the above-described embodiments 1 to 3, the detecting terminal 30 operates based on the program stored in the secondary storage device 33, but the present invention is not limited to this. For example, the functional configuration realized by the program may be realized by hardware.

[0076] Furthermore, a computer capable of realizing each function may be configured by storing and distributing a program for executing the processing operations of the detecting terminal 30 according to the above-described embodiments 1 to 3 on a computer-readable recording medium such as a CD-ROM (Compact Disc Read-Only Memory), a DVD (Digital Versatile Disc), an MO (Magneto Optical Disc), or a memory card, and installing the program on a computer. When each function is realized by sharing the work between an OS (Operating System) and an application, or by cooperation between the OS and an application, only the parts other than the OS may be stored on the recording medium.

[0077] The above embodiments are merely examples, and the present invention is not limited to these. Various embodiments are possible within the scope of the invention as defined in the claims. The components described in the embodiments and variations can be freely combined. Furthermore, inventions equivalent to the inventions defined in the claims are also included in the present invention. In addition, even if the components of the inventions defined in the claims have the same names as the components described in the above embodiments, they are not limited to the components described in the above embodiments themselves, and can be modified and applied as appropriate. [Explanation of symbols]

[0078] 1, 2, 3 port abnormality detection system 10. Eligible Devices 11,12 Target port 20, 60, 70 port detector 21,61,71 Case 22 Push switch 24,64 I / O connectors 30 Detection terminal 62 DC / DC converter 72 Wireless communication module

Claims

1. a housing having a shape corresponding to the shape of a target port of the target device; a detection unit that is in a first state when the housing is fully inserted into the target port; and an output unit that outputs an abnormal signal indicating that the device has been removed from the target port or stops outputting a normal signal indicating that the device is inserted into the target port when the detection unit is in the inverted state of the first state. Port detector.

2. the detection unit is a push switch, the push switch is in the conductive state, which is the first state, when the housing is inserted deep into the target port, and in the open state, which is the inverted state, when the housing is pulled out; The port detector of claim 1 .

3. The push switch is provided at a tip of the housing in the insertion direction. The port detector of claim 2 .

4. the target port has a power supply terminal; When the housing is fully inserted into the target port, the detection unit enters the first state in which voltage is supplied from the power supply terminal of the target device, and when the housing is removed from the target port, the detection unit enters the inverted state in which voltage supply from the power supply terminal is stopped. The port detector of claim 1 .

5. When the housing is fully inserted into the target port, the output unit outputs the normal signal, which indicates that the housing is inserted into the target port, by wireless communication using a voltage supplied from the target device as a power source.

5. The port detector of claim 4.

6. the output unit performs the encrypted wireless communication using a common key shared with the detection terminal as an output destination.

6. The port detector of claim 5.

7. A port detector according to any one of claims 1 to 6; a detecting terminal that transmits, to an external device, port information that indicates the state of the target port and identification information of the target port, the port information being generated based on the abnormal signal or the normal signal output from the output unit of the port detector; an external device that monitors the target port based on the port information received from the detecting terminal, Port anomaly detection system.

8. A method for manufacturing a port detector according to any one of claims 1 to 6, comprising the steps of: The housing is manufactured by a 3D printer. How to make a port detector.

9. a detecting step of detecting a first state when a housing having a shape corresponding to the shape of a target port of a target device is inserted deep into the target port; and an output step of outputting an abnormal signal indicating that the device has been removed from the target port or stopping a normal signal indicating that the device has been inserted into the target port when the inversion of the first state is detected in the detection step. Port anomaly detection method.

Images