Control device, control program, and control method

Abstract

To allow for paying attention of a manager of a network to timing at which a terminal requested authentication.SOLUTION: A control device 1 comprises: receiving means 12 which receives a signal including a MAC address of an arbitrary terminal 2 from the terminal; reception means 13 which, if the MAC address included in the signal is not included in registered terminal information, outputs a reception time of the signal and the MAC address and accepts an input indicating whether or not the MAC address can be registered; and assignment means 14 which, if the MAC address included in the signal is included in the registered terminal information, executes processing of assigning an IP address to the terminal. In response to an input indicating that the MAC address can be registered, the receiving means adds the MAC address to the registered terminal information and further outputs a warning on the basis of the time.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to a control device, a control program, and a control method. [Background technology]

[0002] Various techniques have been proposed in the past to reduce the effort required to register a MAC address of a terminal. For example, Patent Document 1 describes an authentication system that includes an authentication server that performs terminal authentication using the MAC address of a user terminal and an authentication DB in which the MAC address for terminal authentication is registered, and when the authentication server receives a terminal authentication request and a MAC address from the user terminal, the authentication server compares the MAC address with the MAC addresses registered in the authentication DB, and if they match, determines that the terminal authentication has been successful, or if they do not match, determines that the terminal authentication has been unsuccessful, and has sent a terminal authentication response indicating the result of the terminal authentication to the user terminal, a collection unit that collects MAC addresses of user terminals for which terminal authentication has failed, and a registration unit that registers the collected MAC addresses in the authentication DB. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2016-143396 Summary of the Invention [Problem to be solved by the invention]

[0004] However, the authentication system described in Patent Document 1 unconditionally authenticates a user terminal if it receives a terminal authentication request and a MAC address from the authenticated user terminal again after failing to authenticate the user terminal. As a result, it will also authenticate a user terminal that sends a MAC address at an unnatural time, such as when the authentication failed in the distant past. Such a user terminal may be fraudulently used, and authenticating it could cause problems.

[0005] The present disclosure has been made in consideration of the above-mentioned problems, and one exemplary purpose thereof is to enable a network administrator to pay attention to the timing at which a terminal requests authentication. [Means for solving the problem]

[0006] A control device according to an exemplary aspect of the present disclosure includes a storage means for storing registered terminal information, which is information relating to terminals that have already been registered; a receiving means for receiving a signal from any terminal that includes the MAC address of the terminal; a receiving means for, if the MAC address included in the signal is not included in the registered terminal information, outputting the time when the signal was received and the MAC address and accepting input as to whether or not the MAC address can be registered; and an allocation means for, if the MAC address included in the signal is included in the registered terminal information, executing a process of assigning an IP address to the terminal; and, if the receiving means accepts input indicating that registration is possible, adding the MAC address to the registered terminal information and further outputting a warning based on the time.

[0007] A control program according to an exemplary aspect of the present disclosure is a control program for causing a computer to function as the control device, and causes the computer to function as the storage means, the receiving means, the accepting means, and the allocating means.

[0008] A control method according to an exemplary aspect of the present disclosure includes a receiving step of receiving a signal from any terminal including the MAC address of the terminal; a receiving step of outputting the time when the signal was received and the MAC address if the MAC address included in the signal is not included in registered terminal information, which is information about terminals that have already been registered, and receiving input as to whether the MAC address can be registered; and an allocation step of executing a process of assigning an IP address to the terminal if the MAC address included in the signal is included in the registered terminal information, wherein if input indicating registration is possible is received in the receiving step, the MAC address is added to the registered terminal information, and a warning is further output if the time does not satisfy a predetermined condition. [Effects of the Invention]

[0009] According to an exemplary aspect of the present disclosure, the network administrator can be alerted to the timing when a terminal requests authentication. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 2 is a block diagram illustrating an example of a functional configuration of a control device according to a first exemplary embodiment of the present disclosure. [Figure 2] 10 is a diagram showing an example of a method for outputting a MAC address and the like by the reception means of the control device. FIG. [Figure 3] FIG. 4 is a flowchart showing an example of the flow of a control method according to the first exemplary embodiment of the present disclosure. [Figure 4] FIG. 10 is a block diagram showing an example of a functional configuration of a control device according to a second exemplary embodiment of the present disclosure (or a control device according to a third exemplary embodiment of the present disclosure). [Figure 5] 10 is a diagram showing an example of a method for outputting a MAC address and the like by the reception means of the control device. FIG. [Figure 6] FIG. 10 is a flowchart showing an example of the flow of a control method according to a second exemplary embodiment of the present disclosure. [Figure 7]FIG. 10 is a flowchart showing an example of the flow of a control method according to a third exemplary embodiment of the present disclosure. [Figure 8] FIG. 2 is a block diagram showing the hardware configuration of a computer that functions as a control device according to the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0011] The following are examples of embodiments of the present invention. However, the present invention is not limited to the exemplary embodiments shown below, and various modifications are possible within the scope of the claims. For example, embodiments obtained by appropriately combining the technical means employed in the exemplary embodiments shown below may also be included in the scope of the present invention. Furthermore, embodiments obtained by appropriately omitting some of the technical means employed in the exemplary embodiments shown below may also be included in the scope of the present invention. Furthermore, the effects mentioned in the exemplary embodiments shown below are examples of effects expected in the exemplary embodiments, and do not define the scope of the present invention. In other words, embodiments that do not exhibit the effects mentioned in the exemplary embodiments shown below may also be included in the scope of the present invention.

[0012] First Exemplary Embodiment A first exemplary embodiment, which is one example of an embodiment of the present invention, will be described in detail with reference to the drawings. This exemplary embodiment is the basic form of each exemplary embodiment described later. Note that the scope of application of each technical means employed in this exemplary embodiment is not limited to this exemplary embodiment. That is, each technical means employed in this exemplary embodiment can also be employed in other exemplary embodiments included in the present disclosure to the extent that no particular technical obstacles arise. Furthermore, each technical means shown in the drawings referred to in describing this exemplary embodiment can also be employed in other exemplary embodiments included in the present disclosure to the extent that no particular technical obstacles arise.

[0013] (Configuration of control device 1) Next, the configuration of the control device 1 will be described with reference to Fig. 1. Fig. 1 is a block diagram showing the configuration of the control device 1. As shown in Fig. 1, the control device 1 includes a storage means 11, a receiving means 12, an accepting means 13, and an allocating means 14.

[0014] ·Storage means 11 The storage means 11 stores registered terminal information. The "registered terminal information" is information relating to terminals 2 that have already been registered.

[0015] Receiving means 12 The receiving means 12 receives a signal from any terminal 2. The signal transmitted by the terminal 2 includes the MAC address of the terminal 2.

[0016] · Reception method 13 If the MAC address included in the signal is not included in the registered terminal information, the receiving means 13 outputs the time at which the signal was received and the MAC address. The output of the time and MAC address may be performed, for example, by displaying a screen such as that shown in FIG. 2, or by using other methods. The receiving means 13 also receives input as to whether or not the MAC address should be registered. If the receiving means 13 receives input indicating that registration is possible, the MAC address is added to the registered terminal information. The receiving means 13 also outputs a warning based on the time. "Based on the time" includes, for example, the time or a period including the time satisfying a predetermined condition.

[0017] Allocation Method 14 The allocation means 14 executes a process of allocating an IP address to the terminal 2 when the MAC address included in the signal is included in the registered terminal information.

[0018] (Effect of control device 1) The control device 1 described above employs a configuration in which the receiving means 13 outputs the time at which the signal was received and the MAC address if the MAC address included in the signal is not included in the registered terminal information. The control device 1 also employs a configuration in which the receiving means 13 adds the MAC address to the registered terminal information if it receives an input indicating registration is possible. The control device 1 also employs a configuration in which the receiving means 13 further outputs a warning based on the time. That is, if there is any problem with the time at which the signal was received, the control device 1 calls attention to the MAC address being output. Therefore, the control device 1 according to this embodiment has the advantage of being able to draw the network administrator's attention to the timing at which the terminal 2 requests authentication.

[0019] (Flow of control method S1) Next, the flow of control method S1 will be described with reference to Fig. 3. Fig. 3 is a flow diagram showing the flow of control method S1. As shown in Fig. 3, control method S1 includes a receiving step S11, an accepting step S12, and an allocating step S13.

[0020] Reception step S11 In the receiving step S11, a signal including the MAC address of any terminal 2 is received from the terminal 2. The signal may be received using the control device 1 or another device.

[0021] Reception step S12 Reception step S12 is performed when the MAC address included in the signal is not included in registered terminal information, which is information about an already registered terminal 2. In reception step S12, the time when the signal was received and the MAC address are output. In addition, in reception step S12, after outputting the time and the MAC address, input as to whether or not the MAC address can be registered is accepted. In addition, in reception step S12, if input indicating that registration is accepted is accepted, the MAC address is added to the registered terminal information. In addition, in reception step S12, a warning is also output if the time does not satisfy a predetermined condition. The output of various information and the acceptance of input may be performed using the control device 1 or another device.

[0022] Allocation step S13 The allocation step S13 is performed when the MAC address included in the signal is included in the registered terminal information. In the allocation step S13, a process of assigning an IP address to the terminal 2 is executed. The IP address may be assigned by using the control device 1 or another device.

[0023] (Effect of control method S1) As described above, control method S1 employs a configuration in which, in reception step S12, if the MAC address included in the signal is not included in the registered terminal information, the time the signal was received and the MAC address are output. Control method S1 also employs a configuration in which, in reception step S12, if an input indicating registration is permitted is received, the MAC address is added to the registered terminal information. Control method S1 also employs a configuration in which, in reception step S12, a warning is further output based on the time. That is, control method S1 calls attention to the MAC address being output if there is any problem with the time the signal was received. Therefore, control method S1 according to this embodiment has the effect of drawing the network administrator's attention to the timing at which terminal 2 requests authentication.

[0024] Second Exemplary Embodiment A second exemplary embodiment, which is one example of an embodiment of the present invention, will be described in detail with reference to the drawings. Components having the same functions as those described in the above exemplary embodiment will be assigned the same reference numerals, and their description will be omitted as appropriate. The scope of application of each technical means employed in this exemplary embodiment is not limited to this exemplary embodiment. That is, each technical means employed in this exemplary embodiment can also be employed in other exemplary embodiments included in the present disclosure, to the extent that no particular technical obstacles arise. Furthermore, each technical means shown in each drawing referenced to explain this exemplary embodiment can also be employed in other exemplary embodiments included in the present disclosure, to the extent that no particular technical obstacles arise.

[0025] (Configuration of control device 1A) Next, the configuration of the control device 1A will be described with reference to Fig. 4. Fig. 4 is a block diagram showing the configuration of the control device 1A. As shown in Fig. 4, the control device 1A according to this embodiment includes a storage means 11A, a receiving means 12A, an accepting means 13A, an allocating means 14A, a determining means 15, and a measuring means 16. The control device 1A may further include a display means. The display means is configured, for example, by a liquid crystal display, an organic EL display, or the like.

[0026] ·Storage means 11A The storage means 11A according to this embodiment stores not only registered terminal information but also registrable terminal information. The "registrable terminal information" is information indicating the serial number of an unregistered terminal 2A. The storage means 11A according to this embodiment stores, as registered terminal information, the MAC address of an already registered terminal 2A and the serial number of that terminal 2A. The storage means 11A according to this embodiment is configured, for example, with a semiconductor memory, a hard disk drive, etc.

[0027] Receiving means 12A The receiving means 12A receives a signal from an arbitrary terminal 2A. The signal transmitted by the terminal 2A is a DHCP Discover. That is, the signal transmitted by the terminal 2A further includes the serial number of the terminal 2A in addition to the MAC address. The terminal 2A repeatedly transmits the signal at a predetermined interval. Therefore, the receiving means 12A repeatedly receives the signal from the terminal 2A. The receiving means 12A according to this embodiment is configured by a communication module.

[0028] ·Judgment means 15 The determination means 15 determines whether the MAC address included in the signal is included in the registered terminal information. The determination means 15 also determines whether the MAC address included in the signal is included in the registrable terminal information. The determination means 15 also determines whether the serial number included in the signal is included in the registrable terminal information.

[0029] Measurement Method 16 The measuring means 16 measures the time from the time when the signal was received immediately before the MAC address was added to the registered terminal information to the time when the next signal was received.

[0030] Reception method 13A The receiving means 13A according to this embodiment outputs the time and the MAC address when the determination means 15 determines that the MAC address included in the signal is not included in the registered terminal information and that the serial number included in the signal is included in the registrable terminal information. The receiving means 13A according to this embodiment generates display screen data including the time and the MAC address and transmits the data to the management device 3 equipped with a display means. The receiving means 13A according to this embodiment generates display screen data including the time, the MAC address, and a GUI (Graphical User Interface: for example, a button labeled "Register") for performing a registration operation for the MAC address, as shown in FIG. 5, for example. The "management device 3" is used by the administrator of the control device 1A to manage the control device 1A. The management device 3 is configured, for example, with a PC, tablet, smartphone, etc. The "display screen data" may be, for example, web page data or data in another format. The display means 31 of the management device 3 that receives the display screen data displays the display screen. If the control device 1A is equipped with a display means, the accepting means 13A may cause the display means of the control device 1A to display a display screen including the time and the MAC address.

[0031] The receiving unit 13A outputs a warning if the time measured by the measuring unit 16 is longer than a predetermined allowable time. That is, the receiving unit 13A outputs a warning if the time at which the signal was received from the terminal 2A is earlier than the allowable time from the current time. The "allowable time" is determined based on the standard connection time. The administrator can set the allowable time to any length. For example, if the terminal 2A is a mobile phone base station and the standard time required to establish a connection between the control device 1A and the base station is one hour, the allowable time is set to approximately one hour. If the measured time is longer than the predetermined allowable time, it can be determined that the terminal 2A requesting authentication is likely to be an unrelated terminal (or a terminal attempting to connect maliciously). The receiving unit 13A according to this embodiment generates display screen data showing the time and MAC address of the warning target in a warning format, and transmits the data to the management device 3 equipped with the display unit 31. The "warning format" includes, for example, marking the time and MAC address of the warning target near the time and MAC address. The "warning mode" also includes a case where the color of the characters indicating at least one of the time and MAC address of the warning target, or the color of the surrounding characters, is different from that of the MAC address at other times. The "warning mode" also includes a case where the font of the characters indicating at least one of the time and MAC address of the warning target is different from that of the MAC address at other times. Note that the receiving means 13A may output the warning by a method other than a display, such as emitting a warning sound.

[0032] After outputting the time and the MAC address, the receiving means 13A receives an input indicating whether or not the MAC address can be registered. The receiving means 13A according to this embodiment receives a registration possible signal by receiving it from the management device 3. The "registration possible signal" is a signal transmitted by the management device 3 when the operation means 32 (such as a displayed GUI) provided in the management device 3 is operated. Upon receiving the registration possible signal, the receiving means 13A has received an input indicating that registration is possible. Note that the receiving means 13A may be configured to receive a registration impossible signal from the management device 3 to receive an input indicating that registration is impossible. The "registration impossible signal" is a signal transmitted by the management device 3 when a predetermined operation indicating that registration is impossible is performed on the management device 3, or when a predetermined time has passed without the GUI being operated after the time and MAC address were displayed.

[0033] Similarly to the receiving means 13 according to the first exemplary embodiment, when the receiving means 13A receives an input indicating that registration is permitted, the receiving means 13A adds the MAC address to the registered terminal information. On the other hand, when the receiving means 13A receives an input indicating that registration is not permitted, the receiving means 13A does not add the MAC address to the registered terminal information.

[0034] Allocation means 14A When the MAC address included in the signal is included in the registered terminal information and a signal is received again from terminal 2A having that MAC address, the allocation means 14A according to this embodiment executes a process of allocating an IP address to terminal 2A. As a process of allocating an IP address to terminal 2A, the allocation means 14A according to this embodiment first transmits a DHCP Offer to terminal 2A. Having received the DHCP Offer, terminal 2A transmits a DHCP Request to the control device 1A. Having received the DHCP Request, the allocation means 14A of the control device 1A transmits a DHCP Acknowledgement to terminal 2A. In this way, an IP address is allocated to terminal 2A.

[0035] (Effects of control device 1A) The control device 1A described above achieves the same effect as the control device 1 according to the first exemplary embodiment. Specifically, the control device 1A can draw the network administrator's attention to the timing at which the terminal 2A requests authentication. Furthermore, the control device 1A described above employs a configuration in which the accepting unit 13A outputs a warning when the measured time is longer than a predetermined allowable time. Therefore, the control device 1A can also draw the network administrator's attention to whether the terminal 2A requesting authentication is truly a terminal 2A that should be connected. Furthermore, the control device 1A described above employs a configuration in which the accepting unit 13A outputs the time and the MAC address when the MAC address included in the signal is not included in the registered terminal information and the serial number included in the signal is included in the registrable terminal information. Specifically, the control device 1A does not assign an IP address to a terminal 2A whose serial number is not registered in advance, even if there is no problem with the time at which the signal was transmitted. Therefore, the control device 1A can narrow down the targets (the time and number of MAC addresses to be output) that the network administrator should pay attention to, thereby providing the effect of facilitating the administrator's work.

[0036] (Flow of control method S1A) Next, the flow of control method S1A will be described with reference to Fig. 6. Fig. 6 is a flow diagram showing the flow of control method S1A. As shown in Fig. 6, control method S1A includes a receiving step S11A, an accepting step S12A, an allocating step S13A, a determining step S14, and a measuring step S15.

[0037] Reception step S11A In the receiving step S11A, a signal is received from an arbitrary terminal 2A. The signal may be received by the control device 1A or another device. The signal transmitted by the terminal 2A is a DHCP Discover. That is, the signal transmitted by the terminal 2A includes the MAC address as well as the serial number of the terminal 2A. The terminal 2A repeatedly transmits the signal at a predetermined interval. Therefore, the receiving step S11A is repeatedly performed.

[0038] Decision step S14 After receiving a signal from terminal 2A, judgment step S14 is performed. In judgment step S14, it is determined whether the MAC address included in the signal is included in the registered terminal information. In judgment step S14, it is also determined whether the serial number included in the signal is included in the registrable terminal information. At least one of the various judgments may be performed by the control device 1A or another device.

[0039] Measurement step S15 After terminal 2A receives the signal, it also performs measurement step S15. In measurement step S15, it measures the time from the time when the last signal was received immediately before the MAC address was added to the registered terminal information to the time when the next signal was received. The time measurement may be performed by the control device 1A or another device.

[0040] Reception step S12A The receiving step S12A according to this embodiment is performed when it is determined in the determining step S14 that the MAC address included in the signal is not included in the registered terminal information and the serial number included in the signal is included in the registrable terminal information. In the receiving step S12A, the time and the MAC address are output (A121). The output of the time and the MAC address may be performed by the control device 1A or another device.

[0041] Furthermore, in the receiving step S12A, if the time measured in the measuring step S15 is longer than a predetermined allowable time (S122: YES), a warning is output (S123). The warning may be output by the control device 1A or another device.

[0042] After outputting the time and the MAC address, in a receiving step S12A, an input as to whether or not the MAC address can be registered is received (S124). The input as to whether or not the MAC address can be registered may be received by the control device 1A or another device.

[0043] Furthermore, in the reception step S12A, similar to the reception step S12 in the first exemplary embodiment, if an input indicating that registration is possible is received, the MAC address is added to the registered terminal information (S125). On the other hand, in the reception step S12A, if an input indicating that registration is not possible is received, the MAC address is not added to the registered terminal information. The MAC address may be added to the registered terminal information by the control device 1A or another device.

[0044] Allocation step S13A In the allocation step S13A according to this embodiment, as a process of allocating an IP address to the terminal 2A, first, a DHCP Offer is transmitted to the terminal 2A (S131). The DHCP Offer may be transmitted by the control device 1A or another device. The terminal 2A that has received the DHCP Offer transmits a DHCP Request to the device that transmitted the DHCP Offer. In the allocation step S13A, next, the device that transmitted the DHCP Offer receives the DHCP Request (S132). Next, the device that received the DHCP Request transmits a DHCP Acknowledgement to the terminal 2A (S133). In this way, an IP address is allocated to the terminal 2A.

[0045] (Effect of control method S1A) The control method S1A described above can achieve the same effect as the control method S1 according to the first exemplary embodiment. Specifically, the control method S1A can draw the attention of the network administrator to the timing at which the terminal 2A requests authentication. Furthermore, the control method S1A described above employs a configuration in which a warning is output in the reception step S12A when the measured time is longer than a predetermined allowable time. Therefore, the control method S1A can also draw the attention of the network administrator to whether the terminal 2A requesting authentication is truly a terminal 2A that should be connected. Furthermore, the control method S1A described above employs a configuration in which the time and the MAC address are output in the reception step S12A when the MAC address included in the signal is not included in the registered terminal information and the serial number included in the signal is included in the registrable terminal information. Specifically, the control method S1A does not assign an IP address to a terminal 2A whose serial number is not registered in advance, even if there is no problem with the time at which the signal was transmitted. Therefore, according to the control method S1A, it is possible to narrow down the targets (the time and number of MAC addresses to be output) that the network administrator should pay attention to, thereby achieving the effect of facilitating the administrator's work.

[0046] Third Exemplary Embodiment A third exemplary embodiment, which is an example of an embodiment of the present invention, will be described in detail with reference to the drawings. Components having the same functions as those described in the above exemplary embodiment will be assigned the same reference numerals, and their description will be omitted as appropriate. The scope of application of each technical means employed in this exemplary embodiment is not limited to this exemplary embodiment. That is, each technical means employed in this exemplary embodiment can also be employed in other exemplary embodiments included in the present disclosure, to the extent that no particular technical obstacles arise. Furthermore, each technical means shown in each drawing referenced to explain this exemplary embodiment can also be employed in other exemplary embodiments included in the present disclosure, to the extent that no particular technical obstacles arise.

[0047] (Configuration of control device 1B) Next, the configuration of the control device 1B will be described with reference to Fig. 4. Fig. 4 is a block diagram showing the configuration of the control device 1B. As shown in Fig. 4, the control device 1B according to this embodiment includes a storage means 11B, a receiving means 12A, and a determination means 15A in addition to the accepting means 13A, the allocating means 14A, and the measuring means 16 similar to those of the control device 1A according to the second exemplary embodiment.

[0048] ·Storage means 11B The storage means 11B according to this embodiment stores registered terminal information as well as receivable terminal information. The "receivable terminal information" is information indicating the vendor ID of the terminal 2B that is permitted to receive signals. The storage means 11B according to this embodiment is configured, for example, with a semiconductor memory, a hard disk drive, or the like.

[0049] Receiving means 12B The receiving means 12B according to this embodiment receives a signal when the vendor ID of the terminal 2B that transmitted the signal is a predetermined vendor ID. The signal transmitted by the terminal 2B is a DHCP Discover. That is, the signal transmitted by the terminal 2B further includes the vendor ID of the terminal 2B in addition to the MAC address. The receiving means 12B according to this embodiment is configured by a communication module.

[0050] ·Judgment means 15A The signal received by the receiving means 12B according to this embodiment does not include a serial number, and therefore the determining means 15A according to this embodiment does not have the function of determining whether the serial number included in the signal is included in the registrable terminal information.

[0051] (Effect of control device 1B) The control device 1B described above can achieve the same effect as the control device 1 according to the first exemplary embodiment. That is, the control device 1B can achieve the effect of directing the network administrator's attention to the timing at which the terminal 2B requests authentication. Furthermore, the control device 1B described above employs a configuration in which the receiving means 12B receives a signal when the vendor ID of the terminal 2B that transmitted the signal is a predetermined vendor ID. That is, the control device 1B does not receive a signal from an unregistered terminal 2B. Therefore, like the control device 1A according to the second exemplary embodiment, the control device 1B can achieve the effect of narrowing down the targets (the time of output and the number of MAC addresses) that the network administrator should pay attention to, thereby facilitating the administrator's work.

[0052] (Control method S1B flow) Next, the flow of control method S1B will be described with reference to Fig. 7. Fig. 7 is a flow diagram showing the flow of control method S1B. As shown in Fig. 7, control method S1B includes a receiving step S11B and a determining step S14B in addition to a receiving step S12A, an assigning step S13A, and a measuring step S15, which are similar to control method S1A according to the second exemplary embodiment.

[0053] Reception step S11B In the receiving step S11B according to this embodiment, if the vendor ID of the terminal 2B that has transmitted the signal is a predetermined vendor ID, the signal is received. The signal may be received by the control device 1B or another device.

[0054] Decision step S14B In the determination step S14A according to the present embodiment, it is determined whether or not the MAC address included in the signal is included in the registered terminal information (it is not determined whether or not the serial number included in the signal is included in the registrable terminal information). The determination may be made by the control device 1B or another device.

[0055] (Effect of control method S1B) The control method S1B described above can achieve the same effect as the control method S1 according to the first exemplary embodiment. That is, the control method S1B can achieve the effect of directing the network administrator's attention to the timing at which the terminal 2B requests authentication. Furthermore, the control method S1B described above employs a configuration in which a signal is received in the receiving step S11B when the vendor ID of the terminal 2B that transmitted the signal is a predetermined vendor ID. That is, the control method S1B does not receive signals from unregistered terminals 2B. Therefore, like the control method S1A according to the second exemplary embodiment, the control method S1B can achieve the effect of narrowing down the targets to which the network administrator should pay attention (the time of output and the number of MAC addresses), thereby facilitating the administrator's work.

[0056] [Software implementation example] Some or all of the functions of the control devices 1, 1A, 1B (hereinafter also referred to as "each of the above devices") may be realized by hardware such as an integrated circuit (IC chip), or by software.

[0057] In the latter case, each of the above devices is realized by, for example, a computer that executes instructions of a program, which is software that realizes each function. An example of such a computer (hereinafter referred to as computer C) is shown in Figure 8. Figure 8 is a block diagram showing the hardware configuration of computer C that functions as each of the above devices.

[0058] The computer C includes at least one processor C1 and at least one memory C2. The memory C2 stores a control program P for causing the computer C to operate as each of the above-mentioned means. In the computer C, the processor C1 reads and executes the control program P from the memory C2, thereby realizing the functions of each of the above-mentioned means.

[0059] The processor C1 may be, for example, a central processing unit (CPU), a graphic processing unit (GPU), a digital signal processor (DSP), a micro processing unit (MPU), a floating point number processing unit (FPU), a physics processing unit (PPU), a tensor processing unit (TPU), a quantum processor, a microcontroller, or a combination thereof. The memory C2 may be, for example, a flash memory, a hard disk drive (HDD), a solid state drive (SSD), or a combination thereof.

[0060] The computer C may further include a RAM (Random Access Memory) for expanding the control program P during execution and for temporarily storing various data. The computer C may also include a communication interface for transmitting and receiving data to and from other devices. The computer C may also include an input / output interface for connecting input / output devices such as a keyboard, mouse, display, and printer.

[0061] The control program P can also be recorded on a non-transitory, tangible recording medium M that can be read by the computer C. Such a recording medium M can be, for example, a tape, a disk, a card, a semiconductor memory, or a programmable logic circuit. The computer C can acquire the control program P via such a recording medium M. The control program P can also be transmitted via a transmission medium. Such a transmission medium can be, for example, a communication network or broadcast waves. The computer C can also acquire the control program P via such a transmission medium.

[0062] [Appendix 1] This disclosure includes the techniques described in the following appendices. However, the present invention is not limited to the techniques described in the following appendices, and various modifications are possible within the scope of the claims.

[0063] (Appendix 1) a storage means for storing registered terminal information, which is information about terminals that have already been registered; A receiving means for receiving a signal including a MAC address of an arbitrary terminal from the arbitrary terminal; a receiving means for outputting the time when the MAC address included in the signal is not included in the registered terminal information and the MAC address, and receiving an input of whether or not the MAC address can be registered; an allocation means for executing a process of assigning an IP address to the terminal when the MAC address included in the signal is included in the registered terminal information; Equipped with The receiving means When an input indicating that registration is possible is received, the MAC address is added to the registered terminal information; further outputting a warning based on the time; Control device.

[0064] (Appendix 2) a measuring unit for measuring the time from the time when the signal was received immediately before the MAC address was added to the registered terminal information to the time when the next signal was received, the receiving means outputs the warning when the time is longer than a predetermined allowable time. 10. The control device of claim 1.

[0065] (Appendix 3) The storage means further stores registrable terminal information indicating the serial numbers of unregistered terminals, the signal further includes a serial number of the terminal that transmitted the signal; The receiving means If the MAC address included in the signal is not included in the registered terminal information and the serial number included in the signal is included in the registrable terminal information, output the time and the MAC address, and accept an input as to whether or not the MAC address can be registered. 3. The control device according to claim 1 or 2.

[0066] (Appendix 4) the receiving means, when the MAC address included in the signal is not included in the registered terminal information and the vendor ID indicated by the MAC address is a predetermined vendor ID, outputs the time and the MAC address and receives an input of whether or not the MAC address can be registered. 4. The control device according to any one of Supplementary Notes 1 to 3.

[0067] (Appendix 5) The receiving means generating display screen data including the time and the MAC address; transmitting the data to another device equipped with a display means; 5. The control device according to any one of Supplementary notes 1 to 4.

[0068] (Appendix 6) A control program for causing a computer to function as the control device according to any one of Supplementary Notes 1 to 5, a control program for causing a computer to function as the storage means, the receiving means, the accepting means, and the allocating means;

[0069] (Appendix 7) a receiving step of receiving a signal including a MAC address of a terminal from the terminal; a receiving step of outputting the time when the MAC address included in the signal is not included in registered terminal information, which is information about an already registered terminal, and the MAC address, and receiving an input as to whether or not the MAC address can be registered; an allocation step of executing a process of assigning an IP address to the terminal when the MAC address included in the signal is included in the registered terminal information; Including, In the receiving step, When an input indicating that registration is possible is received, the MAC address is added to the registered terminal information; If the time does not satisfy a predetermined condition, a warning is further output. Control method.

[0070] (Appendix 8) further comprising a measuring step of measuring the time from the time when the signal was received immediately before the MAC address was added to the registered terminal information to the time when the next signal was received; In the receiving step, the warning is output when the time is longer than a predetermined allowable time. 8. The control method according to claim 7.

[0071] (Appendix 9) the signal further includes a serial number of the terminal that transmitted the signal; In the receiving step, If the MAC address included in the signal is not included in the registered terminal information and the serial number included in the signal is included in registrable terminal information indicating the serial number of an unregistered terminal, output the time and the MAC address and accept input as to whether or not the MAC address can be registered. 9. The control method according to claim 7 or 8.

[0072] (Appendix 10) In the receiving step, if the MAC address included in the signal is not included in the registered terminal information and the vendor ID indicated by the MAC address is a predetermined vendor ID, the time and the MAC address are output, and an input of whether or not the MAC address can be registered is received. A control method according to any one of Supplementary Notes 7 to 9.

[0073] (Appendix 11) In the receiving step, generating display screen data including the time and the MAC address; transmitting the data to another device equipped with a display means; A control method according to any one of Supplementary Notes 7 to 10.

[0074] [Appendix 2] This disclosure includes the techniques described in the following appendices. However, the present invention is not limited to the techniques described in the following appendices, and various modifications are possible within the scope of the claims.

[0075] (Appendix 1) at least one processor, A receiving process for receiving a signal including a MAC address of an arbitrary terminal from the arbitrary terminal; a reception process for outputting the time when the MAC address included in the signal is not included in registered terminal information, which is information about an already registered terminal, and the MAC address, and receiving an input regarding whether or not the MAC address can be registered; an assignment process for assigning an IP address to the terminal when the MAC address included in the signal is included in the registered terminal information; Run In the reception process, the at least one processor When an input indicating that registration is possible is received, the MAC address is added to the registered terminal information; further outputting a warning based on the time; Control device.

[0076] (Appendix 2) the at least one processor further performs a measurement process of measuring the time from the time when the signal was received immediately before the MAC address was added to the registered terminal information to the time when the next signal was received; In the reception process, the at least one processor outputs the warning when the time is longer than a predetermined allowable time. 10. The control device of claim 1.

[0077] (Appendix 3) the signal further includes a serial number of the terminal that transmitted the signal; In the reception process, the at least one processor If the MAC address included in the signal is not included in the registered terminal information and the serial number included in the signal is included in the registrable terminal information indicating the serial number of an unregistered terminal, output the time and the MAC address and accept an input as to whether or not the MAC address can be registered. 3. The control device according to claim 1 or 2.

[0078] (Appendix 4) In the reception process, if the MAC address included in the signal is not included in the registered terminal information and the vendor ID indicated by the MAC address is a predetermined vendor ID, the at least one processor outputs the time and the MAC address and receives an input of whether or not the MAC address can be registered. 4. The control device according to any one of Supplementary Notes 1 to 3.

[0079] (Appendix 5) In the reception process, the at least one processor generating display screen data including the time and the MAC address; transmitting the data to another device equipped with a display means; 5. The control device according to any one of Supplementary notes 1 to 4. [Explanation of symbols]

[0080] 1, 1A, 1B control device 11, 11A, 11B Storage means 12, 12A, 12B Receiving means 13, 13A Reception method 14, 14A Allocation means 15, 15A Judgment means 16 Measurement methods C1 processor C2 Memory 2, 2A, 2B terminals 3 Management device 31 Display means 32 Operating means S1, S1A, S1B control method S11, S11A, S11B receive steps S12, S12A Reception Steps S13, S13A Allocation Steps S14, S14A decision step S15 Measurement step

Claims

1. a storage means for storing registered terminal information, which is information about terminals that have already been registered; receiving means for receiving a signal including a MAC address of an arbitrary terminal from the arbitrary terminal; a receiving means for outputting the time when the signal was received and the MAC address if the MAC address included in the signal is not included in the registered terminal information, and receiving an input of whether or not the MAC address can be registered; an allocation means for executing a process of assigning an IP address to the terminal when the MAC address included in the signal is included in the registered terminal information; Equipped with The receiving means When the input indicating that registration is possible is received, the MAC address is added to the registered terminal information; further outputting a warning based on the time; Control device.

2. further comprising a measuring means for measuring the time from the time when the signal was received immediately before the MAC address was added to the registered terminal information to the time when the next signal was received; the receiving means outputs the warning when the time is longer than a predetermined allowable time. The control device according to claim 1 .

3. The storage means further stores registrable terminal information indicating the serial numbers of unregistered terminals, the signal further includes a serial number of the terminal that transmitted the signal; The receiving means If the MAC address included in the signal is not included in the registered terminal information and the serial number included in the signal is included in the registrable terminal information, output the time and the MAC address, and accept an input of whether or not the MAC address can be registered. The control device according to claim 1 .

4. the receiving means receives the signal when the vendor ID of the terminal that has transmitted the signal is a predetermined vendor ID. The control device according to claim 1 .

5. The receiving means generating display screen data including the time and the MAC address; transmitting the data to another device equipped with a display means; The control device according to claim 1 .

6. A control program for causing a computer to function as the control device according to any one of claims 1 to 5, a control program for causing a computer to function as the storage means, the receiving means, the accepting means, and the allocating means;

7. a receiving step of receiving a signal including a MAC address of an arbitrary terminal from the arbitrary terminal; a receiving step of outputting the time when the MAC address included in the signal is not included in registered terminal information, which is information about an already registered terminal, and the MAC address, and receiving an input of whether or not the MAC address can be registered; an assignment step of executing a process of assigning an IP address to the terminal when the MAC address included in the signal is included in the registered terminal information; Including, In the receiving step, When the input indicating that registration is possible is received, the MAC address is added to the registered terminal information; If the time does not satisfy a predetermined condition, a warning is further output. Control method.

Images