NETWORK SYSTEM, CONTROL METHOD, DATABASE, CONTROLLER, AND PROGRAM
The network system authenticates and controls device connections using media signal exchange and location information to secure device-to-device connections, preventing unauthorized access in direct connection networks.
Patent Information
- Application Number
- JP2023512598
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- Filing Date
- 2021-04-08
- Publication Date
- 2025-01-22
- Estimated Expiration
- 2041-04-08
AI Technical Summary
In a device-to-device direct connection network, existing methods for connecting user devices to content servers without a computer, such as using an HDMI matrix switch, are prone to unintended connections due to the specification of MC IDs and physical port numbers, making it difficult to prevent unauthorized changes.
A network system that authenticates user devices through media signal exchange, records location information linking user names to device locations, and controls connections based on this information to prevent unauthorized access.
Enables secure, device-to-device connections without disclosing connection details, ensuring that only authorized devices can access content, thereby preventing unintended connections.
Smart Images

Figure 0007619441000001 
Figure 0007619441000002 
Figure 0007619441000003
Abstract
Description
[Technical field]
[0001] The present disclosure relates to a device IF direct connection network and a control method thereof. [Background technology]
[0002] With the spread of LTE (Long Term Evolution) and 5G (5th Generation), the use of entertainment content using video and audio is increasing. When using such entertainment content, a typical format is to connect video devices such as cameras and monitors, audio devices such as microphones and speakers, and operation devices such as mice and keyboards to a computer, and the user selects the content and constructs a network route via the computer to use the content (see Figure 1 (A)). Note that this network route construction means that the computer is assigned an IP address from the network and accesses the server's IP address obtained from the DNS.
[0003] However, the configuration shown in Fig. 1(A) requires a computer to which various devices can be connected. Therefore, users who do not have a computer but only have a smartphone cannot use the content, or even if they can, they use the content on the small screen of the smartphone. Therefore, a configuration shown in Fig. 1(B) is being considered in which video devices and audio devices are connected to a media converter (MC) connected to a public network, and these devices are directly connected to a content server.
[0004] In the case of a configuration like that shown in FIG. 1(B) (a device IF direct connection network), it is necessary to realize the construction of a path between a server containing the content that a user wants to use and the device that the user uses without using a computer. One method for achieving this is to use an HDMI (registered trademark) matrix switch as described in Non-Patent Document 1. This method involves managing which physical device is connected to each port of the HDMI matrix switch, and changing the settings of the matrix switch when the physical device to be connected is specified. This method makes it possible to connect devices that do not have unique IDs. [Prior art documents] [Non-patent literature]
[0005] [Non-Patent Document 1] HDMI 8x8 High Definition Matrix Switch aHD-MTX88, (https: / / icsil.ocnk.net / product / 897; retrieved March 19, 2021) Summary of the Invention [Problem to be solved by the invention]
[0006] However, because the MC and network in the configuration in Figure 1(B) are connected by multiple users, if connection is made possible by specifying the MC ID and physical port number, connections unintended by the user will also be possible. Specifically, a connection change can be easily made by specifying the MC ID and physical port number used by another user. In other words, the method of constructing a route by specifying the MC ID and physical port number in the configuration in Figure 1(B) has the problem that it is difficult to prevent connection changes by other users.
[0007] Therefore, in order to solve the above problem, the present invention aims to provide a network system, a control method, a database, a controller, and a program that enable route construction in a device IF direct connection network without disclosing connection information. [Means for solving the problem]
[0008] In order to achieve the above object, the network system according to the present invention comprises: (1) Identifying and recording the network location of users and their devices using authentication data exchanged via media signals from the devices; and (2) When a user makes a connection request to content using a user name, the controller uses the user name to resolve location information on the network, controls the network, and realizes the connection between the content and the device. It was decided.
[0009] Specifically, the network system according to the present invention is a device interface direct connection type network system having a port with a unique ID and connected to a device without a unique ID via a media converter identifiable within the network, an authentication infrastructure that authenticates the device through an authentication operation in which authentication data converted into a media signal by the media converter is transmitted between the user terminal of the user and the device via the user terminal, and identifies the device used by the user from the media converter identified by the authentication operation; a database that registers location information that associates the location of the device identified in the authentication process with the user name of the user; The present invention is characterized by comprising: Furthermore, the network system according to the present invention comprises: The device may further include a controller that, when the user makes a request to connect to content within the network, determines the location of the device from the database based on the user's username, and sets a route between the content and the device based on the location.
[0010] A control method according to the present invention is a control method for a device interface direct connection type network having a port with a unique ID and connected to a device without a unique ID via a media converter identifiable within the network, the control method comprising the steps of: authenticating the device through an authentication operation in which authentication data converted into a media signal by the media converter is transmitted between the user terminal of the user and the device via the user terminal, and identifying the device used by the user from the media converter identified by the authentication operation; registering location information linking the location of the device identified in the authentication process with the user name of the user in a database; It is characterized by: Furthermore, the control method according to the present invention comprises: When the user makes a request to connect to content within the network, the location of the device may be determined from the database based on the user's username, and a route between the content and the device may be set based on the location.
[0011] The database according to the present invention is a database provided in a device interface direct connection type network system having a port with a unique ID and connected to a device without a unique ID via a media converter identifiable in the network, The device is authenticated by an authentication operation in which authentication data converted into a media signal by the media converter is transmitted and received via the user terminal between the user terminal and the device, and the device used by the user is identified from the media converter identified by the authentication operation. Registering location information that links the location of the device identified in the authentication operation with the user name of the user; and notifying a location of the device based on the user's username to a controller that connects the content and the device based on the location when the user makes a connection request to the content within the network; It is characterized by:
[0012] Furthermore, the controller according to the present invention is a controller provided in a device interface direct connection type network system having a port having a unique ID and connected to a device without a unique ID via a media converter identifiable in the network, The device is authenticated by an authentication operation in which authentication data converted into a media signal by the media converter is transmitted between the user terminal of the user and the device via the user terminal, and the device used by the user is identified from the media converter identified by the authentication operation; From a database in which location information linking the location of the device identified in the authentication process with the user name of the user is registered, When the user makes a request to connect to content within the network, the location of the device is determined based on the user's username, and the content and the device are connected based on the location.
[0013] Authentication data (QR Code (registered trademark), etc.) using the media signal of the device is exchanged over the network (authentication process), the network identifies the location of the device used by the user on the network, and the location information of the user and device is recorded in a database (DB). This operation allows the network to grasp the location of the device used by the user on the network.
[0014] Furthermore, when a user makes a connection request, the controller queries the DB to identify the network location of the device used by the user, and sets up the network (connection route) based on the obtained location information. This operation makes it possible to configure a network route via the device used by the user without disclosing network information to the user.
[0015] Therefore, the present invention can provide a network system, a control method, a database, and a controller that are capable of establishing a route in a device IF direct connection network without disclosing connection information.
[0016] As for timing, it is preferable that when the device is connected to the media converter, the authentication infrastructure performs the authentication process and the database registers the location information of the device. It is also preferred that when the device is removed from the media converter, the database deletes the location information for that device.
[0017] The present invention also relates to a program for causing a computer to function as the controller. The data collection device of the present invention can also be realized by a computer and a program, and the program can be recorded on a recording medium or provided via a network.
[0018] The above-mentioned inventions can be combined as much as possible. Effect of the Invention
[0019] The present invention can provide a network system, a control method, a database, a controller, and a program that are capable of establishing a route in a device IF direct connection network without disclosing connection information. [Brief description of the drawings]
[0020] [Figure 1] FIG. 1 is a diagram illustrating a problem to be solved by the present invention. [Diagram 2] FIG. 1 is a diagram illustrating a network system according to the present invention. [Diagram 3] FIG. 2 is a diagram illustrating a media converter provided in the network system according to the present invention. [Figure 4] FIG. 2 is a diagram illustrating a media converter provided in the network system according to the present invention. [Diagram 5] FIG. 2 is a diagram illustrating a media converter provided in the network system according to the present invention. [Figure 6] FIG. 2 is a diagram illustrating a media converter provided in the network system according to the present invention. [Figure 7] FIG. 2 is a diagram illustrating a media converter provided in the network system according to the present invention. [Figure 8] FIG. 2 is a diagram illustrating a media converter provided in the network system according to the present invention. [Figure 9] 2 is a diagram illustrating an authentication data input / output unit included in the network system according to the present invention. FIG. [Figure 10] FIG. 2 is a diagram illustrating an authentication infrastructure provided in the network system according to the present invention. [Figure 11] 2 is a diagram for explaining a network position information DB provided in the network system according to the present invention. FIG. [Figure 12] 2 is a diagram for explaining a network configuration information DB provided in the network system according to the present invention. FIG. [Figure 13] 2 is a diagram for explaining a network configuration information DB provided in the network system according to the present invention. FIG. [Figure 14] FIG. 2 is a diagram for explaining (A) a content domain name DB and (B) a user domain name DB provided in the network system according to the present invention. [Figure 15] 4 is a diagram for explaining an authentication data generation rule table provided in the network system according to the present invention. FIG. [Figure 16] 10 is a diagram for explaining an authentication data input / output unit management table provided in the network system according to the present invention; FIG. [Figure 17] FIG. 13 is a diagram for explaining a network location information DB dynamic configuration flow of the control method according to the present invention. [Figure 18] FIG. 11 is a diagram illustrating a user login flow of the control method according to the present invention. [Figure 19] FIG. 2 is a diagram for explaining a user DB provided in the network system according to the present invention. [Figure 20] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 21] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 22] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 23] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 24] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 25] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 26] 10 is a diagram for explaining an authentication data input / output unit management table provided in the network system according to the present invention; FIG. [Figure 27] FIG. 2 is a diagram illustrating an authentication data temporary storage memory provided in the network system according to the present invention. [Figure 28] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 29] 11 is a diagram for explaining an authentication data transmitting / receiving unit operation state table provided in the network system according to the present invention. FIG. [Diagram 30] FIG. 13 is a diagram illustrating a screen of a user's smartphone. [Diagram 31] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 32] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 33] 2 is a diagram for explaining a network position information DB provided in the network system according to the present invention. FIG. [Diagram 34] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 35] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 36] 2 is a diagram for explaining a user-belonging domain name DB provided in the network system according to the present invention. FIG. [Figure 37] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 38] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 39] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 40] 11 is a diagram for explaining an authentication data transmitting / receiving unit operation state table provided in the network system according to the present invention. FIG. [Diagram 41] FIG. 13 is a diagram illustrating a screen of a user's smartphone. [Diagram 42] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 43] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 44] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 45] FIG. 2 is a diagram illustrating an authentication data temporary storage memory provided in the network system according to the present invention. [Figure 46] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 47] 2 is a diagram for explaining a network position information DB provided in the network system according to the present invention. FIG. [Figure 48] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 49] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 50] 2 is a diagram for explaining a user-belonging domain name DB provided in the network system according to the present invention. FIG. [Figure 51] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 52] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Diagram 53] 11 is a diagram for explaining an authentication data transmitting / receiving unit operation state table provided in the network system according to the present invention. FIG. [Figure 54] FIG. 13 is a diagram illustrating a screen of a user's smartphone. [Figure 55] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 56] FIG. 2 is a diagram illustrating an authentication data temporary storage memory provided in the network system according to the present invention. [Figure 57] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 58] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 59] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 60] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 61] 2 is a diagram for explaining a network position information DB provided in the network system according to the present invention. FIG. [Figure 62] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 63] 2 is a diagram for explaining a user-belonging domain name DB provided in the network system according to the present invention. FIG. [Figure 64] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 65] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 66] FIG. 2 is a diagram illustrating a network route setting flow of the control method according to the present invention. [Figure 67] FIG. 13 is a diagram illustrating a screen of a user's smartphone. [Figure 68]FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 69] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 70] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 71] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 72] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 73] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 74] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 75] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 76] FIG. 13 is a diagram illustrating a screen of a user's smartphone. [Figure 77] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 78] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 79] 2 is a diagram for explaining a network position information DB provided in the network system according to the present invention. FIG. [Figure 80] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 81] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 82] 2 is a diagram for explaining a user-belonging domain name DB provided in the network system according to the present invention. FIG. [Figure 83] FIG. 4 is a diagram illustrating a control signal in the control method according to the present invention. [Figure 84] FIG. 1 is a diagram for explaining the gist of the present invention. [Figure 85] FIG. 1 is a diagram illustrating a network system according to the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
[0021] The embodiments of the present invention will be described with reference to the accompanying drawings. The embodiments described below are examples of the present invention, and the present invention is not limited to the following embodiments. Note that components with the same reference numerals in this specification and drawings indicate the same components.
[0022] In this specification, an optical network is described as an example, but it may be a dedicated network configured with IP, or a network using VLAN, OTN, or MPLS. In that case, the MC (media controller) is an IP encoder or an OTN mapper. Also, the network location information is not an MC name but an IP address, a VLAN ID, or a physical port number. In this embodiment, the authentication data exchanged during the authentication process is described as a QR code and input from a game controller, but the authentication data is not limited to these and may be, for example, sound. Note that media signals and media information refer to signals that are not IP packets, such as video, audio, and USB signals.
[0023] [Embodiment 1] (Overall network system image) 2 is a diagram for explaining a network system according to the present embodiment. The network system is a device interface direct connection type network system having a port with a unique ID and connected to a device 15 without a unique ID via a media converter 10 that can be identified within a network 50, an authentication infrastructure 20 that authenticates the device 15 by an authentication operation in which authentication data converted into a media signal by the media converter 10 is transmitted between the user terminal 11 of the user A and the device 10 via the user terminal 11, and identifies the device 15 used by the user A from the media converter 10 identified by the authentication operation; A database 30 that registers location information that links the location of the device 15 identified in the authentication process with the user name of the user A; a controller 40 that, when a user A makes a connection request to a content in a network 50, obtains the location of a device 15 from a database 30 based on the user name of the user A, and connects the content to the device 15 based on the location; The present invention is characterized by comprising:
[0024] The user authentication site 51 is a website that has a function of mediating the exchange of authentication data between the authentication infrastructure and the smartphones of users. The user service selection site 52 is a website where the user selects and specifies the service he or she wishes to use. The authentication MC 10 is provided by a network operator and is considered to be trustworthy. The optical switches (#X, #Y, #Z) are optical switches that can change the connection relationship of the optical ports (for example, connecting 1 and 5, connecting 2 and 6, etc.) according to settings from the network controller 40. The game system 12 is a typical game machine having an HDMI video output terminal and a USB input / output terminal. The video conference system 13 is a video conference system that inputs an image from a camera on the user A's side, synthesizes images of other users, and outputs the synthesized image to a monitor on the user A's side.
[0025] 3 is a diagram for explaining the HDMI-MC-TX 10b. The HDMI-MC-TX 10b includes an HDMI input IF 10b1 to which video and audio signals are input from a video conference system 13 or an authentication data input / output unit 14, 10b2 to communicate with the controller 40, an HDMI connection control unit 10b3 to establish a connection between the camera and the HDMI by performing a preset EDID (Extended Display Identification Data) negotiation and pass only the video and audio signals input from the camera to an optical modulator 10b4, the optical modulator 10b4 to modulate the video and audio signals input from the system into optical signals, and an optical output IF 10b5 to output the optical signals toward an optical switch.
[0026] 4 is a diagram for explaining the HDMI-MC-RX 10a. The HDMI-MC-RX 10a includes an optical input IF 10a5 to which an optical signal from an optical switch is input, 10a2 for communicating with the controller 40, an optical demodulator 10a4 for demodulating the optical signal into video and audio signals, an HDMI connection control unit 10a3 for negotiating with a preset EDID to establish HDMI connections with the game system 12, the video conference system 13, and the authentication data input / output unit 14, and passing only the video and audio signals input from the optical demodulator 10a4 to the HDMI output IF 10a1, and an HDMI output IF 10a1 for outputting the video and audio signals to the systems.
[0027] FIG. 5 is a diagram for explaining the HDMI-certified MC-RX 10d of the certified MC 10. The HDMI-certified MC-RX 10d includes an HDMI input IF 10d1 to which video and audio signals are input from a camera, which is a device 15 of a user A, 10d2 for communicating with the controller 40, an HDMI connection control unit 10d3 for establishing a connection between the camera and the HDMI by performing a preset EDID (Extended Display Identification Data) negotiation and passing only the video and audio signals input from the camera to the optical modulator 10d4, an optical modulator 10d4 for modulating the video and audio signals input from the camera into an optical signal, and an optical output IF 10d5 for outputting the optical signal toward an optical switch. The HDMI-certified MC-RX 10d further includes a cable insertion / removal detection unit 10d6 for detecting when a cable (HDMI plug) is inserted or removed and notifying the controller 40. The cable insertion / removal detection unit 10d6 detects, for example, the cable electrically, or by the cable turning on / off a switch in the HDMI input IF 10d1.
[0028] 6 is a diagram for explaining the HDMI-certified MC-RX10c of the certified MC10. The HDMI-certified MC-RX10c includes an optical input IF10c5 to which an optical signal from an optical switch is input, 10c2 to communicate with the controller 40, an optical demodulator 10c4 to demodulate the optical signal into video and audio signals, an HDMI connection control unit 10c3 to establish a connection between the monitor and HDMI by negotiating with a preset EDID and to pass only the video and audio signals input from the optical demodulator 10c4 to the HDMI output IF10c1, and an HDMI output IF10c1 to output the video and audio signals to the monitor. The HDMI-certified MC-RX10c further includes a cable insertion / removal detection unit 10c6 to detect when a cable (HDMI plug) is inserted or removed and notify the controller 40. The cable insertion / removal detection unit 10c6 detects, for example, the cable electrically, or by turning on / off a switch in the HDMI output IF10c1.
[0029] 7 is a diagram for explaining the USB-MC-TRX 10e. The USB-MC-TRX 10e includes a USB port 10e1 to which an information signal from the game system 12 or the authentication data input / output unit 14 is input, 10e2 to communicate with the controller 40, an optical modulator / demodulator 10e3 to modulate the information signal input from the USB port 10e1 into an optical signal and pass it to the optical output IF 10e4, and to demodulate the optical signal input from the optical input IF 10e5 into an information signal and pass it to the USB port 10e1, an optical output IF 10e4 to output an optical signal toward an optical switch, and an optical input IF 10e5 to which an optical signal from the switch is input.
[0030] 8 is a diagram for explaining the USB-certified MC-TRX 10f of the certified MC 10. The USB-certified MC-TRX 10f includes a USB port 10f1 to which an information signal from a game controller is input, a 10f2 for communicating with the controller 40, an optical modulator-demodulator 10f3 for modulating the information signal input from the USB port 10f1 into an optical signal and passing it to the optical output IF 10f4, and demodulating the optical signal input from the optical input IF 10f5 into an information signal and passing it to the USB port 10f1, an optical output IF 10f4 for outputting an optical signal toward an optical switch, and an optical input IF 10f5 for inputting an optical signal from the switch. The USB-certified MC-TRX 10f further includes a cable insertion / removal detector 10f6 for detecting when a cable (USB plug) is inserted or removed and notifying the controller 40. The cable insertion / removal detector 10f6 detects, for example, the cable electrically or by turning on / off a switch in the USB port 10f1.
[0031] 9 is a diagram illustrating the authentication data input / output unit 14. The authentication data input / output unit 14 includes an HDMI input IF 141 to which video and audio signals from the HDMI-MC-RX 10a are input, an HDMI output IF 142 that outputs video and audio signals from an HDMI authentication data transmission unit 145 to the HDMI-MC-TX 10b, a USB port 143 that transfers information signals between the USB-MC-TRX 10e and a USB authentication data reception unit 146, an authentication infrastructure communication unit 147 that communicates with the authentication infrastructure 20, and an authentication data transmission / reception unit operation status table 148. The HDMI authentication data receiving unit 144 extracts and recognizes authentication data from the HDMI video and audio signals input from the HDMI input IF 141 , and transmits the obtained authentication data to the authentication infrastructure 20 via the authentication infrastructure communication unit 147 . The HDMI authentication data transmission unit 145 converts the authentication data transmitted from the authentication infrastructure 20 into HDMI video and audio signals and outputs them from the HDMI output IF 142 . The USB authentication data receiving unit 146 extracts and recognizes the authentication data from the information signal input from the USB port 143 , and transmits the obtained authentication data to the authentication infrastructure 20 via the authentication infrastructure communication unit 147 .
[0032] 10 is a diagram for explaining the authentication infrastructure 20. The authentication infrastructure 20 includes a control network communication unit 201 connected to the network 50, an authentication data matching function 202, an authentication data temporary storage memory 203, an authentication data generation function 204, an authentication data input / output unit transmission / reception unit 205 connected to the authentication data input / output unit 14, an authentication data generation rule table 206, an authentication data input / output unit management function 207, and an authentication data input / output unit management table 208. The operation of each functional unit will be described later.
[0033] (System operation details) The control method of the network system shown in FIG. authenticating the device by an authentication operation in which authentication data converted into a media signal by the media converter is transmitted between the user terminal of the user and the device via the user terminal, and identifying the device used by the user from the media converter identified by the authentication operation (step S01); Registering location information that links the location of the device identified in the authentication process with the user name of the user in a database (step S02); and When the user makes a request to connect to content within the network, the location of the device is obtained from the database based on the user name of the user, and the content and the device are connected based on the location (step S03). It is characterized by:
[0034] Here, when the device is connected to the media converter, the authentication infrastructure performs the authentication process (step S01), and the database registers the location information about the device (step S02). Then, when the device is removed from the media converter, the database deletes the location information for that device (step S04).
[0035] This control method consists of the following four flows. (1) Preliminary work flow This flow is prepared prior to operation. (2) Network location information DB dynamic configuration flow This flow is performed when a user registers network location information of a device that the user uses (steps S01, S02). (3) Network route setting flow This flow occurs when a service wants to set up a network route. (4) Network location information DB deletion flow This flow is performed when the device is removed (step S04).
[0036] Each flow is explained in detail below.
[0037] (1) Preliminary work flow The pre-workflow constructs the following five pieces of information that do not change, such as information on content and authentication data input / output sections: (1-1)Static construction of network location information DB FIG. 11 is a diagram for explaining a specific example of the network position information DB 30. As shown in FIG. (1-2) Building a network configuration information database FIG. 12 is a diagram for explaining a specific example of the network internal configuration information in the network configuration information DB 31. As shown in FIG. FIG. 13 is a diagram for explaining a specific example of the access point configuration information in the network configuration information DB 31. As shown in FIG. (1-3) Content domain name construction FIG. 14A is a diagram for explaining a specific example of the content domain name DB 32. As shown in FIG. Here, a user's domain name DB 34 (FIG. 14(B)) may be constructed. (1-4) Building an authentication data generation rule table FIG. 15 is a diagram for explaining a specific example of the authentication data generation rule table 206. As shown in FIG. (1-5) Creating an authentication data input / output unit management table FIG. 16 is a diagram for explaining a specific example of the authentication data input / output unit management table 208. As shown in FIG.
[0038] (2) Network location information DB dynamic configuration flow 17 is a diagram for explaining this flow. This flow is made up of a user login flow S11, an authentication network path configuration flow S12, a location registration flow (S13a to S13c), and an authentication network path deletion flow S14.
[0039] 18 is a diagram illustrating a user login flow S11. User A uses his / her smartphone 11 to access a user authentication site (FIG. 18(A)). Next, User A inputs his / her own ID and password into the user authentication site (FIG. 18(B)). The user authentication site refers to the user DB34, and if the ID and password match, authorizes User A's login and displays an authentication screen for User A (FIG. 18(C)). FIG. 19 is an example of information held by the user DB34.
[0040] Next, the authentication network path configuration flow S12 will be described. Step S12-1 User A inserts a cable of a device 15 (eg, a monitor) to be used into an authenticated MC 10 (eg, an HDMI-authenticated MC-RX10c). Step S12-2 The authentication MC 10 transmits to the network controller 40 a cable insertion notification (see FIG. 20, for example) that the cable has been inserted, together with its own position information on the network. Step S12-3 When the network controller 40 receives the cable insertion notification, it transmits to the authentication infrastructure 20 an authentication data input / output unit usage permission request (see FIG. 21, for example) to which the IF type written in the cable insertion notification is added. Step S12-4 The authentication data input / output unit management function 207 of the authentication infrastructure 20 refers to the authentication data input / output unit management table 208 (for the contents, see, for example, FIG. 16), selects the domain name of an available authentication data input / output unit, and transmits it as authentication data input / output unit usage permission (for example, see FIG. 22). Then, the authentication data input / output unit management function 207 changes the resource usage status of the selected authentication data input / output unit in the authentication data input / output unit management table 208 to "in use" (for example, change from FIG. 16 to FIG. 26). Step S12-5 The network controller 40 transmits a network location information acquisition request (see, for example, FIG. 23) to the network location information DB 30, with the authentication data input / output unit name stated in the received authentication data input / output unit usage permission (see, for example, FIG. 22) as the domain name. Step S12-6 The network location information DB 30 transmits the network location information obtained using the domain name as a network location information response (see, for example, FIG. 24). Step S12-7 When the network controller 40 receives the network location information response (see, for example, FIG. 24), it designs a route connecting the network location information described in the cable insertion notification (see, for example, FIG. 20) and the network location information received in the network location information response (see, for example, FIG. 24) by referring to the network configuration information DB31, and configures the optical switch. For example, the network controller 40 performs the following settings. "Connect port 1 and port 3 on optical switch #X" "Connect port 1 and port 9 on optical switch #X" Step S12-7 The network controller 40 transmits to the authentication infrastructure 20 a notification that the authentication network path has been configured, the configured authentication network information, and the IF type to be authenticated as an authentication network path configuration completion notification (see, for example, FIG. 25).
[0041] Next, the location registration flow S13 will be described. First, the authentication data transmission flow S13a1 of the location registration flow S13a of the HDMI output IF will be described. Step S13a1-1 The authentication data generation function 204 of the authentication infrastructure 20 receives a notification of completion of the configuration of the authentication network path (see, for example, FIG. 25), and if the authentication IF type of the notification is HDMI output, generates authentication data based on the description of the authentication data generation rule table 206. In the case of HDMI output, a QR code for authentication is generated and transmitted from the authentication data input / output unit 205. Step S13a1-2 The authentication data generation function 204 stores the generated authentication data, the authentication IF type stated in the authentication network path configuration completion notification (see, for example, Figure 25), and the network location information during authentication in the authentication data temporary storage memory 203 (see, for example, Figure 27). Step S13a1-3 The authentication data generation function 204 notifies the authentication data input / output unit 14 described in the authentication network path configuration completion notification (see, for example, Figure 25) of an authentication data transmission instruction (see, for example, Figure 28) including the generated authentication data and the network location information being authenticated. Steps S13a1-4 The HDMI authentication data transmission unit 145 of the authentication data input / output unit 14 generates an HDMI signal carrying the authentication data described in the notification, and transmits it from the HDMI output IF 142. Step S13a1-5 The authentication data input / output unit 14 updates the authentication data transmitting / receiving unit operation state table 148 based on the authentication data transmission instruction (see, for example, FIG. 29). Steps S13a1-6 The authentication data is displayed on the monitor used by User A via the authentication network path.
[0042] Next, the authentication data checking flow S13a2 of the position registration flow S13a of the HDMI output IF will be described. Step S13a2-1 When User A sees the authentication data being displayed on the monitor he / she is using, he / she selects to read the authentication data on the authentication site for users after logging in (see, for example, Figures 18(C) and 30(A)). Step S13a2-2 The user authentication site accesses the camera of the smartphone 11 and starts acquiring camera footage (see, for example, FIG. 30(B)). Step S13a2-3 User A points the camera of the smartphone 11 at the monitor and captures an image of the displayed authentication data (see, for example, FIG. 30(C)). Step S13a2-4 The authentication site for the user transmits the image captured by the camera and the user name to the authentication infrastructure 20 as an authentication data read result notification (see, for example, FIG. 31). Step S13a2-5 The authentication data matching function 202 of the authentication infrastructure 20 searches the authentication data temporary storage memory 203 (see, for example, Figure 27) to check whether there is registered data that matches the authentication data described in the authentication data reading result notification (see, for example, Figure 31). Step S13a2-6 If there is matching registration data, the authentication data matching function 202 of the authentication infrastructure 20 generates a network location information registration request (e.g., see FIG. 32) from the user name described in the authentication data reading result notification (e.g., see FIG. 31), the domain name constructed using the authentication IF type, and the network location information being authenticated, and sends it to the network location information DB 30. Step S13a2-7 When the network location information DB30 receives a network location information registration request (see, for example, FIG. 32), it registers the contents (see, for example, FIG. 33), and when the registration is complete, it notifies the authentication data matching function 202 that the network location information registration is complete (see, for example, FIG. 34). Step S13a2-8 The authentication data checking function 202 transmits a user belonging domain name DB registration request (see FIG. 35, for example) consisting of the domain name, the user name, and the authentication IF type to the user belonging domain name DB 33. Step S13a2-9 When the user domain name DB 33 receives a user domain name DB registration request (see, for example, Figure 35), it registers the contents (see, for example, Figure 36), and when the registration is complete, it notifies the authentication data matching function 202 that the user domain name DB registration is complete (see, for example, Figure 37). Step S13a2-10 When the authentication data matching function 202 receives the network location information registration completion (see, for example, FIG. 34) and the user's domain name DB registration completion (see, for example, FIG. 37), it erases the data from the authentication data temporary storage memory 203. Step S13a2-11 The authentication data verification function 202 transmits an authentication data read OK (see FIG. 38, for example) to the user authentication site 51. Step S13a2-12 When the user authentication site 51 receives the notification of completion of network location information registration (see, for example, FIG. 34), it displays a message indicating that the authentication is OK on the smartphone 11 of the user A. Step S13a2-13 The authentication data matching function 202 transmits an instruction to end the authentication data transmission to the authentication data input / output unit 14 . Steps S13a2-14 The authentication data input / output unit 14 ends the authentication data transmission, and updates the authentication data transmission / reception unit operation state table 148. Step S13a2-15 The authentication data matching function 202 instructs the authentication data input / output unit management function 207 to open the authentication data input / output unit 14 , and the authentication data input / output unit management function 207 updates the authentication data input / output unit management table 208 .
[0043] Next, the HDMI input IF position registration flow S13b will be described. First, the authentication data reading flow S13b1 will be described. Step S13b1-1 The authentication data generation function 204 of the authentication infrastructure 20 receives an authentication network path configuration completion notification (see, for example, Figure 25), and if the authentication IF type of the notification is HDMI input, sends an authentication data read instruction (see, for example, Figure 39) to the authentication data input / output unit 14 described in the notification. Step S13b1-2 When the authentication data input / output unit 14 receives an authentication data read instruction (see, for example, FIG. 39) and the HDMI input IF is specified, the authentication data input / output unit 14 starts the operation of the HDMI authentication data receiving unit 144 of the authentication data input / output unit 14. Step S13b1-3 The authentication data input / output unit 14 updates the authentication data transmitting / receiving unit operation state table 148 (see, for example, FIG. 40) based on an authentication data read instruction (see, for example, FIG. 39).
[0044] Next, the authentication data checking flow S13b2 of the HDMI input IF position registration flow S13b will be described. Step S13b2-1 After inserting the cable, User A presses the authentication data display (HDMI input IF) button on the user authentication site (see, for example, FIG. 18(C) and FIG. 40(A)). Step S13b2-2 The user authentication site transmits an authentication data generation request to the authentication data generation function 204 of the authentication infrastructure 20 (see, for example, FIG. 42). Step S13b2-3 The authentication data generation function 204 generates authentication data based on the authentication IF type described in the authentication data generation request (see, for example, FIG. 42) and the authentication data generation rule table 206. For HDMI input, a QR code for authentication is generated, transmitted to an authentication site for the user, and received from the authentication data input / output unit 14. Step S13b2-4 The authentication data generation function 204 saves the generated authentication data and the user name stated in the authentication data generation request (see, for example, FIG. 42) in the authentication data temporary storage memory 203 (see, for example, FIG. 45). Step S13b2-5 The authentication data generation function 204 transmits a completion of authentication data generation (see FIG. 43, for example) to the user authentication site together with the generated authentication data. Step S13b2-6 The user authentication site displays the authentication data described in the received message indicating that generation of authentication data has been completed (see, for example, FIG. 43). Step S13b2-7 When the authentication data is displayed, user A brings the smartphone closer to the camera (see, for example, FIG. 41(B)). Then, the video including the authentication data is transmitted from the camera to the HDMI authentication data receiving unit 144 of the authentication data input / output unit 14 via the authentication network path. Step S13b2-8 The HDMI authentication data receiving unit 144 of the authentication data input / output unit 14 reads out the authentication data from the video including the authentication data. Step S13b2-9 The HDMI authentication data receiving unit 144 transmits an authentication data reception notification (eg, see FIG. 44) to the authentication infrastructure 20 based on the read authentication data and the description in the authentication data transmitting / receiving unit operation state table 148. Step S13b2-10 The authentication data matching function 202 of the authentication infrastructure 20 searches the authentication data temporary storage memory 203 (see, for example, Figure 45) to check whether there is registered data that matches the authentication data described in the authentication data reception notification (see, for example, Figure 44). Step S13b2-11 If there is matching registration data, the authentication data matching function 202 of the authentication infrastructure 20 generates a network location information registration request (see, for example, FIG. 46) from the authenticated network location information described in the authentication data reception notification (see, for example, FIG. 44), the user name described in the authentication data temporary storage memory 203 (see, for example, FIG. 45), and a domain name constructed using the authentication IF type, and transmits the network location information registration request to the network location information DB 30. Step S13b2-12 When the network location information DB30 receives a network location information registration request (see, for example, FIG. 46), it registers the information (see, for example, FIG. 47), and when the registration is complete, it notifies the authentication data matching function 202 of the completion of the network location information registration (see, for example, FIG. 48). Step S13b2-13 The authentication data checking function 202 transmits a user belonging domain name DB registration request (see FIG. 49, for example) consisting of the domain name, the user name, and the authentication IF type to the user belonging domain name DB 33. Steps S13b2-14 When the user domain name DB 33 receives a user domain name DB registration request (see, for example, Figure 49), it registers the information (see, for example, Figure 50), and when the registration is complete, it notifies the authentication data matching function 202 of the completion of the user domain name DB registration (see, for example, Figure 51). Step S13b2-15 When the authentication data matching function 202 receives the network location information registration completion (see, for example, FIG. 48) and the user's domain name DB registration completion (see, for example, FIG. 51), it erases the data from the authentication data temporary storage memory 203. Step S13b2-16 The authentication data verification function 202 transmits an OK to read the authentication data to the user authentication site. Step S13b2-17 When the user authentication site receives the message that the authentication data has been read OK, it displays a message that the authentication has been OK on User A's smartphone (for example, FIG. 41(C)). Step S13b2-18 The authentication data matching function 202 transmits an instruction to the authentication data input / output unit 14 to end reading of the authentication data. Step S13b2-19 The authentication data input / output unit 14 ends the authentication data reading, and updates the authentication data transmission / reception unit operation state table 148. Step S13b2-20 The authentication data matching function 202 instructs the authentication data input / output unit management function 207 to open the authentication data input / output unit 14 , and the authentication data input / output unit management function 207 updates the authentication data input / output unit management table 208 .
[0045] Next, the USB IF location registration flow S13c will be described. First, the authentication data reading flow S13c1 will be described. Step S13c1-1 The authentication data generation function 204 of the authentication infrastructure 20 receives an authentication network path configuration completion notification (e.g., see FIG. 25), and if the authentication IF type of the notification is USB IF, transmits an authentication data read instruction (e.g., see FIG. 52) to the authentication data input / output unit 14 described in the notification. Step S13c1-2 The authentication data input / output unit 14 starts the operation of the USB authentication data receiving unit 146 when it receives an authentication data read instruction (eg, see FIG. 52) and the USB IF is specified. Step S13c1-3 The authentication data input / output unit 14 updates the authentication data transmitting / receiving unit operation state table 148 (see, for example, FIG. 53) based on the authentication data read instruction (see, for example, FIG. 52).
[0046] Next, the authentication data checking flow S13c2 of the USB IF location registration flow S13c will be described. Step S13c2-1 After inserting the cable, User A presses the authentication data display (USB input IF) button on the user authentication site (see, for example, FIG. 54(A)). Step S13c2-2 The user authentication site transmits an authentication data generation request (see, for example, FIG. 55) to the authentication data generation function 204 of the authentication infrastructure 20. Step S13c2-3 The authentication data generation function 204 generates authentication data based on the authentication IF type described in the authentication data generation request (see, for example, FIG. 55) and the authentication data generation rule table 206 (see, for example, FIG. 15). In the case of USB input, the authentication data generation function 204 generates an input key string for authentication, transmits it to the authentication site for the user, and receives it from the authentication data input / output unit 14. Step S13c2-4 The authentication data generation function 204 saves the generated authentication data and the user name stated in the authentication data generation request (see, for example, FIG. 55) in the authentication data temporary storage memory 203 (see, for example, FIG. 56). Step S13c2-5 The authentication data generation function 204 transmits a completion of authentication data generation (see FIG. 57, for example) to the user authentication site together with the generated authentication data. Step S13c2-6 The user authentication site displays (eg, see FIG. 54(B)) the authentication data described in the received "authentication data generation completion" (eg, see FIG. 57). Step S13c2-7 User A inputs the displayed authentication data into the game controller, and then an image including the authentication data is transmitted from the camera to the USB authentication data receiving unit 146 of the authentication data input / output unit 14 via the authentication network path. Step S13c2-8 The USB authentication data receiving unit 146 of the authentication data input / output unit 14 reads out the authentication data from the input USB signal. Step S13c2-9 The USB authentication data receiving unit 146 transmits an authentication data reception notification (see, for example, FIG. 58) to the authentication infrastructure 20 based on the read authentication data and the description in the authentication data transmitting / receiving unit operation state table 148 (see, for example, FIG. 53). Step S13c2-10 The authentication data matching function 202 of the authentication infrastructure 20 searches the authentication data temporary storage memory 203 (see, for example, Figure 56) to check whether there is registered data that matches the authentication data described in the authentication data reception notification (see, for example, Figure 58). Step S13c2-11 If there is matching registration data, the authentication data matching function 202 of the authentication infrastructure 20 generates a network location information registration request (see, for example, FIG. 59) from the authenticated network location information described in the authentication data reception notification (see, for example, FIG. 58) and a domain name constructed using the user name and authentication IF type described in the authentication data temporary storage memory 203 (see, for example, FIG. 56), and transmits it to the network location information DB 30. Step S13c2-12 When the network location information DB30 receives a network location information registration request (see, for example, FIG. 59), it registers the information (see, for example, FIG. 61), and when the registration is complete, it notifies the authentication data matching function 202 of the completion of the network location information registration (see, for example, FIG. 60). Step S13c2-13 The authentication data checking function 202 transmits a user belonging domain name DB registration request (see, for example, FIG. 62) consisting of the domain name, the user name, and the authentication interface type to the user belonging domain name DB 33. Step S13c2-14 When the user domain name DB 33 receives a user domain name DB registration request (see, for example, Figure 62), it registers the information (see, for example, Figure 63), and when the registration is complete, it notifies the authentication data matching function 202 of the completion of the user domain name DB registration (see, for example, Figure 64). Step S13c2-15 When the authentication data matching function 202 receives the network location information registration completion (see, for example, FIG. 60) and the user's domain name DB registration completion (see, for example, FIG. 64), it erases the data from the authentication data temporary storage memory 203. Step S13c2-16 The authentication data verification function 202 transmits an OK to read the authentication data to the user authentication site. Step S13c2-17 When the user authentication site receives the notification of completion of network location information registration, it displays "authentication OK" on the smartphone 11 of the user A (see, for example, FIG. 54(C)). Step S13c2-18 The authentication data matching function 202 transmits an instruction to the authentication data input / output unit 14 to end reading of the authentication data. Step S13c2-19 The authentication data input / output unit 14 ends the authentication data reading, and updates the authentication data transmission / reception unit operation state table 148 (see, for example, FIG. 53). Step S13c2-20 The authentication data matching function 202 instructs the authentication data input / output unit management function 207 to open the authentication data input / output unit 14, and the authentication data input / output unit management function 207 updates the authentication data input / output unit management table 208 (see, for example, FIG. 26).
[0047] Finally, the authentication network path deletion flow S14 will be described. Step S14-1 Upon completion of the location registration flow S13, the authentication infrastructure 20 transmits an authentication network path deletion request (see, for example, FIG. 65) to the network controller 40. Step S14-2 The network controller 40 deletes the setting established as the authentication network path based on the received authentication network path deletion request (see, for example, FIG. 65).
[0048] (3) Network route setting flow 66 is a diagram explaining this flow, which is made up of a content selection flow S31, a domain name search flow S32, and a network path configuration flow S33.
[0049] FIG. 67 is a diagram for explaining the content selection flow S31. This diagram is an example of selecting a game system. User A accesses user-oriented service selection site 52 (FIG. 67(A)) using his / her own smartphone 11 in order to use the content. Next, user A inputs his / her own ID and password to user-oriented service selection site 52 (FIG. 67(B)). User-oriented service selection site 52 refers to user DB 34 (see, for example, FIG. 19), and if the ID and password match, authorizes the user's login and displays a service selection screen for the user (FIG. 67(C)). User A selects the content he / she wants to use on user-oriented service selection site 52 (FIG. 67(C)).
[0050] Next, the domain name search flow S32 will be described. Step S32-1 The user-oriented service selection site 52 transmits a usage domain name acquisition request (see, for example, FIG. 68) based on the content name selected by the user A to the content domain name DB 32 (see, for example, FIG. 14(A)). Step S32-2 When the content domain name DB32 receives a domain name request (e.g., see Figure 68), it sends the domain name and IF type of the resource linked to the content name to the user service selection site 52 as a domain name response (e.g., see Figure 69). Step S32-3 The user-oriented service selection site 52 transmits a user belonging domain name acquisition request (see, for example, FIG. 70) based on the user name to the user belonging domain name DB 33 (see, for example, FIGS. 36, 50, and 63). Step S32-4 When the user domain name DB33 receives a user domain name acquisition request (see, for example, Figure 70), it sends the domain name and IF type of the resource linked to the user name to the user service selection site 52 as a user domain name response (see, for example, Figure 71).
[0051] Next, the network path configuration flow S33 will be described. Step S33-1 The user service selection site 52 designs a set of domain names to be connected in the network based on the domain names obtained in the domain name search flow S32. "Contents.Game System.HDMI Output and User.A.HDMI Output" and "Contents.Game System.USB and User.A.USB" There are two types: Step S33-2 The user-oriented service selection site 52 transmits a network path configuration request (see, for example, FIG. 72) to the network controller 40 for the set of domain names. Step S33-3 When the network controller 40 receives a network path configuration request (e.g., see FIG. 72), it sends a network location information acquisition request (e.g., see FIG. 73) for each of the listed domain names to the network location information DB 30 (e.g., see FIG. 11, FIG. 33, FIG. 47, FIG. 61). Step S33-4 The network location information DB 30 transmits the network location information obtained using the domain name as a network location information response (see, for example, FIG. 74). Step S33-5 The network controller 40 uses the network location information obtained in step S33-4 to design a route connecting the domain names while referring to the network configuration information DB 31 (see, for example, FIGS. 12 and 13), and sets the optical switch. Step S33-6 The network controller 40 transmits a network path configuration response (see, for example, FIG. 75) to the user-oriented service selection site 52. By carrying out this operation, the monitor and game controller that User A intends to use are connected to the game system 12. Step S33-7 When the user selection site receives a network route configuration response (e.g., see FIG. 75) for all domain name pairs designed in step S33-1, it notifies user A via his smartphone that the content connection has been completed (e.g., see FIG. 76(B)).
[0052] (4) Network location information deletion flow Finally, the network location information deletion flow will be described. Step S41-1 User A unplugs the cable of the device he or she is using (in this case, a monitor) from the authentication MC. Step S41-2 The authentication MC 10 transmits to the network controller 40 a cable unplugging notification (see FIG. 77, for example) that the cable has been unplugged, together with its own location information on the network. Step S41-3 When the network controller 40 receives a cable unplugging notification (see, for example, FIG. 77), it sends a network location information deletion request (see, for example, FIG. 78) to the network location information DB 30 using the network location information of the authenticated MC where the cable unplugging occurred. Step S41-4 The network location information DB 30 deletes (eg, see FIG. 79) the data associated with the network location information described in the network location information deletion request (eg, see FIG. 78). Step S41-5 The network location information DB 30 adds the domain name to the network controller 40 and transmits a notification indicating that the network location information has been deleted (see, for example, FIG. 80). Step S41-6 The network controller 40 transmits a user belonging domain name DB deletion request (see, for example, FIG. 81) to the user belonging domain name DB 33 using the domain name described in the network location information deletion completion (see, for example, FIG. 80). Step S41-7 When the user belonging domain name DB 33 receives a user belonging domain name DB deletion request (see, for example, FIG. 81), it deletes data linked to the domain name (see, for example, FIG. 82). Step S41-8 The user's domain name DB 33 transmits a user's domain name DB deletion response (see FIG. 83, for example).
[0053] [Embodiment 2] The controller 40 can also be realized by a computer and a program, and the program can be recorded on a recording medium or provided via a network. 85 shows a block diagram of a system 100. The system 100 includes a computer 105 connected to a network 135.
[0054] Network 135 is a data communications network. Network 135 may be a private or public network and may include any or all of the following: (a) a personal area network, e.g., covering a room; (b) a local area network, e.g., covering a building; (c) a campus area network, e.g., covering a campus; (d) a metropolitan area network, e.g., covering a city; (e) a wide area network, e.g., covering an area that crosses city, regional, or national boundaries; or (f) the Internet. Communications are conducted by electronic and optical signals over network 135.
[0055] Computer 105 includes a processor 110 and a memory 115 connected to processor 110. Although computer 105 is depicted herein as a stand-alone device, it is not limited to such, but rather may be connected to other devices not shown in a distributed processing system.
[0056] Processor 110 is an electronic device made up of logic circuits that responds to and executes instructions.
[0057] The memory 115 is a tangible computer-readable storage medium in which a computer program is encoded. In this regard, the memory 115 stores data and instructions, i.e., program code, that can be read and executed by the processor 110 to control the operation of the processor 110. The memory 115 can be implemented as a random access memory (RAM), a hard drive, a read-only memory (ROM), or a combination thereof. One component of the memory 115 is a program module 120.
[0058] The program modules 120 include instructions for controlling the processor 110 to perform the processes described herein. Although operations are described herein as being performed by the computer 105 or a method or process or sub-process thereof, those operations are actually performed by the processor 110.
[0059] The term "module" is used herein to refer to a functional operation that may be embodied either as a stand-alone component or as an integrated configuration of multiple subcomponents. Thus, program module 120 may be implemented as a single module or as multiple modules operating in coordination with one another. Furthermore, although program module 120 is described herein as being installed in memory 115 and thus implemented in software, it may be implemented in any of hardware (e.g., electronic circuitry), firmware, software, or a combination thereof.
[0060] Although the program module 120 is shown as already loaded into the memory 115, it may be configured to be located on the storage device 140 for later loading into the memory 115. The storage device 140 is a tangible computer-readable storage medium that stores the program module 120. Examples of the storage device 140 include compact disks, magnetic tapes, read-only memories, optical storage media, memory units consisting of a hard drive or multiple parallel hard drives, and Universal Serial Bus (USB) flash drives. Alternatively, the storage device 140 may be a random access memory or other type of electronic storage device located in a remote storage system not shown and connected to the computer 105 via the network 135.
[0061] System 100 further includes data source 150A and data source 150B, collectively referred to herein as data sources 150, that are communicatively connected to network 135. In practice, data sources 150 may include any number of data sources, i.e., one or more data sources. Data sources 150 may include unstructured data and may include social media.
[0062] The system 100 further includes a user device 130 operated by the user 101 and connected to the computer 105 via a network 135. The user device 130 includes an input device, such as a keyboard or a voice recognition subsystem, to enable the user 101 to communicate information and command selections to the processor 110. The user device 130 further includes an output device, such as a display device or a printer or a voice synthesizer. A cursor control, such as a mouse, trackball, or touch-sensitive screen, enables the user 101 to manipulate a cursor on a display device to communicate further information and command selections to the processor 110.
[0063] The processor 110 outputs the results 122 of the execution of the program modules 120 to a user device 130. Alternatively, the processor 110 can provide the output to a storage device 125, such as a database or memory, or via a network 135 to a remote device, not shown.
[0064] For example, the program for performing the (2) network location information DB dynamic configuration flow, (3) network route setting flow, and (4) network location information DB deletion flow described in the first embodiment may be the program module 120. The system 100 can be operated as the controller 40.
[0065] The term "comprising" or "comprising" is to be interpreted as specifying the presence of the stated features, integers, steps or components, but not excluding the presence of one or more other features, integers, steps or components or groups thereof. The terms "a" and "an" are indefinite articles and therefore do not exclude embodiments having a plurality thereof.
[0066] [Other embodiments] In addition, the present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the spirit of the present invention. In short, the present invention is not limited to the above-described embodiment, and the components can be modified and embodied without departing from the spirit of the present invention at the implementation stage.
[0067] In addition, various inventions can be formed by appropriately combining the multiple components disclosed in the above embodiments. For example, some components may be deleted from all the components shown in the embodiments. Furthermore, components across different embodiments may be appropriately combined.
[0068] [Objective of the invention] As shown in FIG. 84, the present invention (1) Identifying the location of the device used by the user on the network by exchanging authentication data (QR code, sound, etc.) using the media signal of the device via the network, and linking the location of the device with the user name and recording it in the location information DB; and (2) When a user makes a connection request using a user name, the controller queries the location information DB to identify the location of the device used by the user on the network, and sets up the network based on the obtained location information; It is characterized by: [Explanation of symbols]
[0069] 10: Media converter 11: Smartphone 12: Game System 13: Video conferencing system 14: Authentication data input / output section 15: Device 20: Authentication infrastructure 30: Network location information DB 31: Network configuration information DB 32: Content domain name DB 33: User domain name DB 34: User DB 40: Controller 50: Network 51: User authentication site 52: Service selection site for users 100: System 101:User 105: Computer 110: Processor 115: Memory 120: Program module 122:Result 125: Storage device 130: User device 135: Network 140: Storage device 150: Data source
Claims
1. A device interface direct connection type network system having a port with a unique ID and connected to a device without a unique ID via a media converter identifiable in the network, an authentication infrastructure that authenticates the device through an authentication operation in which authentication data converted into a media signal by the media converter is transmitted between the user terminal of the user and the device via the user terminal, and identifies the device used by the user from the media converter identified by the authentication operation; a database that registers location information that associates the location of the device identified in the authentication process with the user name of the user; A network system comprising:
2. The network system according to claim 1, further comprising a controller that, when the user makes a request to connect to content within the network, determines the location of the device from the database based on the user's username, and sets a route between the content and the device based on the location.
3. The network system according to claim 1 or 2, characterized in that, when the device is connected to the media converter, the authentication infrastructure performs the authentication process and the database registers the location information for the device, and, when the device is removed from the media converter, the database deletes the location information for the device.
4. A method for controlling a network directly connected to a device interface, in which a device without a unique ID is connected via a media converter having a port with a unique ID and identifiable within the network, comprising the steps of: authenticating the device through an authentication operation in which authentication data converted into a media signal by the media converter is transmitted between the user terminal of the user and the device via the user terminal, and identifying the device used by the user from the media converter identified by the authentication operation; registering location information linking the location of the device identified in the authentication process with the user name of the user in a database; A control method comprising:
5. The control method according to claim 4, further comprising: when the user makes a request to connect to content within the network, determining the location of the device from the database based on the user's username, and setting a route between the content and the device based on the location.
6. A controller provided in a device interface direct connection type network system having a port with a unique ID and connected to a device without a unique ID via a media converter identifiable in a network, The device is authenticated by an authentication operation in which authentication data converted into a media signal by the media converter is transmitted between the user terminal of the user and the device via the user terminal, and the device used by the user is identified from the media converter identified by the authentication operation; From a database in which location information linking the location of the device identified in the authentication process with the user name of the user is registered, A controller characterized by determining the location of the device based on the user's username when the user makes a request to connect to content within the network, and connecting the content and the device based on the location.
7. A program for causing a computer to function as the controller according to claim 6.
Citation Information
Patent Citations
Information distributing equipment utilizing position information and information charging method utilizing position information
JP2002118524A
Unauthorized use detection method and device
JP2006217194A