Monitoring device, monitoring method, and monitoring program

Abstract

A monitoring device (100) has an acquisition unit (121), a first creation unit (122), a second creation unit (125), and an identification unit (126). The acquisition unit (121) acquires configuration information and storage information of terminals, and information relating to the terminals. The first creation unit (122) creates information on a group of the terminals and information on a path being used for communication of the terminals in a communication section of the terminals, on the basis of the configuration information and the storage information of the terminals acquired by the acquisition unit (121). The second creation unit (125) creates information on change in each of the terminals, on the basis of the information relating to the terminals acquired by the acquisition unit (121). The identification unit (126) identifies an abnormal communication section, on the basis of the information on the group of the terminals and the information on the path being used for communication of the terminals in the communication section of the terminals created by the first creation unit (122), and the information on change in each of the terminals created by the second creation unit (125).

Description

Technical Field

[0001] The present invention relates to a monitoring device, a monitoring method, and a monitoring program.

Background Art

[0002] Conventionally, there has been a communication system having a communication line that multiplexes and accommodates communication paths between terminals, such as an optical fiber. Also, for detecting a break point of an optical fiber, an optical communication measuring instrument called an OTDR (Optical Time Domain Reflectometer) is used.

Prior Art Documents

Non-Patent Documents

[0003]

Non-Patent Document 1

[0004]

Non-Patent Document 2

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, in the prior art, it is difficult to identify an abnormal communication section before an abnormality occurs, and there is a problem of high response cost. For example, in an optical communication system, after an abnormality occurs, maintenance personnel who receive an alert from the device or a report from the user must bring in an OTDR and perform an operation to identify the section where the abnormality occurred. Thus, as an example of the problem to be solved by the present invention, there is a problem that it is difficult to identify an abnormal communication section before an abnormality occurs and the response cost is high.

Means for Solving the Problems

[0006] In order to solve the above-described problems and achieve the object, a monitoring device according to the present invention includes an acquisition unit, a first creation unit, a second creation unit, and a specification unit. The acquisition unit acquires accommodation information and configuration information of a terminal, and information related to the terminal. The first creation unit creates information on a path used for communication of the terminal and information on a terminal group among the communication sections of the terminal based on the accommodation information and the configuration information of the terminal acquired by the acquisition unit. The second creation unit creates information on changes in each terminal based on the information related to the terminal acquired by the acquisition unit. The specification unit specifies an abnormal communication section based on the information on the path used for communication of the terminal and the information on the terminal group among the communication sections of the terminal created by the first creation unit, and the information on changes in each terminal created by the second creation unit.

Effects of the Invention

[0007] According to the present invention, it becomes possible to easily identify an abnormal communication section before an abnormality occurs and reduce the response cost.

Brief Description of the Drawings

[0008]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

[0009] Hereinafter, embodiments of the monitoring device, monitoring method, and monitoring program according to the present application will be described in detail with reference to the drawings. Note that the present invention is not limited by this embodiment. In the description of the drawings, the same parts are denoted by the same reference numerals, and redundant explanations are omitted.

[0010] [Configuration of Monitoring Device] First, the configuration of the monitoring device 100 will be described with reference to FIG. 1. FIG. 1 is a diagram showing an example of the configuration of the monitoring device 100 according to the embodiment. As shown in FIG. 1, the monitoring device 100 includes a communication unit 110, a control unit 120, and a storage unit 130. Note that each of these units may be held in a distributed manner by a plurality of devices. The processing of each of these units will be described below.

[0011] The communication unit 110 is realized by a NIC (Network Interface Card) or the like, and enables communication between the control unit 120 and an external device via a telecommunication line such as a LAN (Local Area Network) or the Internet. For example, the communication unit 110 enables communication between the external device and the control unit 120.

[0012] The storage unit 130 is implemented by a semiconductor memory device such as a RAM (Random Access Memory) or a flash memory, or a storage device such as a hard disk or an optical disk. Information stored in the storage unit 130 includes, for example, accommodation information of the terminal, configuration information, information related to the terminal, data related to machine learning algorithms, learned models, and other information necessary for identifying abnormal communication sections. Note that the information stored in the storage unit 130 is not limited to that described above.

[0013] The control unit 120 is implemented using a CPU (Central Processing Unit), an NP (Network Processor), an FPGA (Field Programmable Gate Array), etc., and executes a processing program stored in a memory. As shown in FIG. 1, the control unit 120 includes an acquisition unit 121, a first creation unit 122, a learning unit 123, a detection unit 124, a second creation unit 125, and an identification unit 126. Hereinafter, each unit included in the control unit 120 will be described.

[0014] The acquisition unit 121 acquires accommodation information of the terminal, configuration information, and information related to the terminal. For example, the acquisition unit 121 acquires information of the terminal included in a predetermined section as accommodation information of the terminal. Also, for example, the acquisition unit 121 acquires information on a communication path as configuration information of the terminal. Also, for example, the acquisition unit 121 acquires information on the value of the received optical power of the terminal as information related to the terminal.

[0015] Based on the accommodation information of the terminal and the configuration information acquired by the acquisition unit 121, the first creation unit 122 creates information on the path used for the terminal's communication and information on the terminal group among the terminal's communication sections. For example, based on the accommodation information of the terminal and the configuration information acquired by the acquisition unit 121, the first creation unit 122 creates a table including information on the path used for the terminal's communication and information on the terminal group among the terminal's communication sections.

[0016] The learning unit 123 learns the state of the terminal based on the information about the terminal acquired by the acquisition unit 121. For example, the learning unit 123 learns the normal state of the terminal based on the information about the terminal acquired by the acquisition unit 121. Also, for example, in the case of an optical communication system, the learning unit 123 learns the normal state of the terminal by using the received power and the value correlated with the received power acquired by the acquisition unit 121. Here, the learning unit 123 may learn the normal state of the terminal by using the information input by a person acquired by the acquisition unit 121, or may learn the normal state of the terminal by machine learning.

[0017] The detection unit 124 detects a change in the state of the terminal learned by the learning unit 123. For example, the detection unit 124 detects a change in the normal state of the terminal learned by the learning unit 123. Also, for example, the detection unit 124 detects a change that is going abnormal with respect to the normal state of the terminal learned by the learning unit 123.

[0018] The second creation unit 125 creates information about changes in each terminal based on the information about the terminal acquired by the acquisition unit 121. For example, the second creation unit 125 creates a table including information about changes in each terminal based on the information about the terminal acquired by the acquisition unit 121. Also, for example, the second creation unit 125 creates information about changes in each terminal based on the change in the state of the terminal detected by the detection unit 124.

[0019] The specifying unit 126 specifies an abnormal communication section based on the information about the path used for the communication of the terminal, the information about the terminal group, and the information about changes in each terminal created by the second creation unit 125, among the communication sections of the terminal created by the first creation unit 122. For example, the specifying unit 126 specifies an abnormal communication section by comparing the information about the path used for the communication of the terminal, the information about the terminal group, and the information about changes in each terminal created by the second creation unit 125, among the communication sections of the terminal created by the first creation unit 122.

[0020] More specifically, the specific part 126 compares a table including information on the path used for the communication of the terminal and information on the terminal group among the communication sections of the terminal created by the first creation section 122, with a table including information on changes in each terminal created by the second creation section 125. When there is a row where the values match, the communication section indicated by that row is specified as an abnormal communication section. Note that the abnormal communication sections include not only the communication sections where an abnormality has occurred but also the communication sections where signs of an abnormality have occurred.

[0021] 〔Outline of processing performed by the monitoring device〕 Next, with reference to FIG. 2, an example of the processing performed by the monitoring device 100 according to the embodiment will be described. FIG. 2 is a diagram for explaining the outline of the processing performed by the monitoring device 100 according to the embodiment.

[0022] First, FIG. 2(1) shows a monitoring system including the monitoring device 100. Next, FIG. 2(2) is a table including information on the path used for the communication of the terminal and information on the terminal group among the communication sections of the terminal created by the first creation section 122. FIG. 2(3) is a table including information on changes in each terminal created by the second creation section 125.

[0023] Then, the specific part 126 compares the table including information on the path used for the communication of the terminal and information on the terminal group among the communication sections of the terminal in FIG. 2(2) with the table including information on changes in each terminal in FIG. 2(3), and specifies an abnormal communication section such as section 2 surrounded by a thick frame in FIG. 2(4). For example, the specific part 126 compares the values in the table including information on changes in each terminal in FIG. 2(3) with the values in the table including information on the path used for the communication of the terminal and information on the terminal group among the communication sections of the terminal in FIG. 2(2), and determines whether there is a row where the values match. Then, when there is a row where the values match, the specific part 126 specifies the communication section indicated by that row as an abnormal communication section.

[0024] In a table including information on changes in each terminal, if the value changes only in a specific terminal, and when comparing with a table including information on the path used for the terminal's communication and information on the terminal group among the communication intervals of the terminal, if there is no row where the values match, it is not an abnormality in the communication interval, but an abnormality in the specific terminal is suspected.

[0025] [Creation process of a table including information on the path used for the terminal's communication and information on the terminal group among the communication intervals of the terminal] Next, with reference to FIGS. 3 and 4, an example of the creation process of a table including information on the path used for the terminal's communication and information on the terminal group among the communication intervals of the terminal according to the embodiment will be described. FIGS. 3 and 4 are diagrams for explaining the creation process of a table including information on the path used for the terminal's communication and information on the terminal group among the communication intervals of the terminal according to the embodiment. FIGS. 3(1) to (3) and FIGS. 4(4) to (6) are tables describing the communication intervals and each terminal. In all of them, the rows represent the communication intervals and the columns represent each terminal.

[0026] First, FIG. 3(1) is an array created by the first creation unit 122, having elements for the total number of terminals on the transmission side and the reception side, respectively. Next, the first creation unit 122 inputs 0 to the elements of the terminals existing in each communication interval (FIG. 3(2)). Then, when there is a path for communication between terminals via an interval, the first creation unit 122 adds 1 to the corresponding location (FIG. 3(3)). For example, when there is a path between the terminal a on the transmission side and the terminal d on the reception side, the first creation unit 122 adds 1 to the element of the terminal a on the transmission side and the element of the terminal d on the reception side, respectively.

[0027] The first creation unit 122 repeats the process of FIG. 3(3) for all paths that communicate between terminals via a section (FIG. 4(4)). Then, the first creation unit 122 synthesizes the receiving-side part and the transmitting-side part (FIG. 4(5)). And the first creation unit 122 normalizes the synthesized table by dividing the elements within a row by the minimum value of the row for each section (FIG. 4(6)), and creates a table including information on the paths used for the communication of the terminal and information on the terminal group among the communication sections of the terminal.

[0028] [Table creation process including change information] Next, with reference to FIG. 5, an example of a table creation process including change information of the monitoring device according to the embodiment will be described. FIG. 5 is a diagram for explaining the table creation process including change information of the monitoring device according to the embodiment.

[0029] FIG. 5(1) is a diagram showing the normal-time values in each terminal in tabular form, acquired by the acquisition unit 121. Here, the learning unit 123 learns the normal-time state in each terminal using the information acquired by the acquisition unit 121 as input. For example, the learning unit 123 learns regularities such as the correlation between the input values acquired by the acquisition unit 121 through human input or machine learning.

[0030] Next, the detection unit 124 detects changes with respect to the normal-time state as time elapses (FIG. 5(2)). At this time, the detection unit 124 represents the amount of change from the normal-time state as Δ. Then, the second creation unit 125 normalizes the amount of change Δ by dividing the elements within a row by the minimum value of the row using the amount of change Δ detected by the detection unit 124 (FIG. 5(3)), and creates a table including change information.

[0031] [Flowchart] Next, with reference to FIG. 6, the flow of the monitoring process by the monitoring device 100 will be described. FIG. 6 is a flowchart showing an example of the flow of the monitoring process according to the present embodiment.

[0032] First, the acquisition unit 121 acquires the accommodation information of the terminal, the configuration information, and the information regarding the terminal (step S11). For example, the acquisition unit 121 acquires the information of the terminals included in a predetermined section as the accommodation information of the terminal. Also, for example, the acquisition unit 121 acquires the information of the communication path as the configuration information of the terminal.

[0033] Next, the first creation unit 122 creates the information of the path used for the communication of the terminal and the information of the terminal group in the communication section of the terminal based on the accommodation information of the terminal and the configuration information acquired by the acquisition unit 121 (step S12). For example, the first creation unit 122 creates a table including the information of the path used for the communication of the terminal and the information of the terminal group in the communication section of the terminal based on the accommodation information of the terminal and the configuration information acquired by the acquisition unit 121.

[0034] Then, the learning unit 123 learns the state of the terminal based on the information regarding the terminal acquired by the acquisition unit 121 (step S13). For example, the learning unit 123 learns the normal state of the terminal based on the information regarding the terminal acquired by the acquisition unit 121. Also, for example, in an optical communication system, the learning unit 123 learns the normal state of the terminal using the received power and the value correlated with the received power acquired by the acquisition unit 121.

[0035] Then, the detection unit 124 detects the change with respect to the state of the terminal learned by the learning unit 123 (step S14). For example, the detection unit 124 detects the change with respect to the normal state of the terminal learned by the learning unit 123. Also, for example, the detection unit 124 detects the change towards abnormality as the change with respect to the normal state of the terminal learned by the learning unit 123.

[0036] Then, the second creation unit 125 creates the information of the change in each terminal based on the information regarding the terminal acquired by the acquisition unit 121 (step S15). For example, the second creation unit 125 creates the information of the change in each terminal based on the change with respect to the normal state of the terminal detected by the detection unit 124.

[0037] Then, the specifying unit 126 compares a table including information on the path used for the communication of the terminal and information on the terminal group, which is created by the first creating unit 122, among the communication sections of the terminal, with a table including information on changes in each terminal created by the second creating unit 125, and determines whether there is a row in which the values match (step S16). Here, when there is no row in which the values match (step S16 "NO"), the detection unit 124 detects a change in the state of the terminal again (step S14).

[0038] On the other hand, when there is a row in which the values match (step S16 "YES"), the specifying unit 126 specifies an abnormal communication section based on the information on the path used for the communication of the terminal and the information on the terminal group, among the communication sections of the terminal created by the first creating unit 122, and the information on changes in each terminal created by the second creating unit 125 (step S17). For example, the specifying unit 126 compares a table including information on the path used for the communication of the terminal and information on the terminal group, which is created by the first creating unit 122, among the communication sections of the terminal, with a table including information on changes in each terminal created by the second creating unit 125, and specifies the communication section indicated by the row in which the values match as the abnormal communication section.

[0039] 〔Effect〕 As described above, the monitoring device 100 according to the embodiment includes an acquisition unit 121, a first creation unit 122, a second creation unit 125, and a specification unit 126. The acquisition unit 121 acquires accommodation information and configuration information of the terminal, and information related to the terminal. The first creation unit 122 creates information on the path used for the communication of the terminal and information on the terminal group, among the communication sections of the terminal, based on the accommodation information and configuration information of the terminal acquired by the acquisition unit 121. The second creation unit 125 creates information on changes in each terminal based on the information related to the terminal acquired by the acquisition unit 121. The specifying unit 126 specifies an abnormal communication section based on the information on the path used for the communication of the terminal and the information on the terminal group, among the communication sections of the terminal created by the first creating unit 122, and the information on changes in each terminal created by the second creating unit 125.

[0040] Accordingly, the monitoring device 100 according to the embodiment can identify an abnormal communication section due to an optical fiber break or the like in an optical communication system by using information on the path used for the communication of the terminal, information on the terminal group, and information on changes in each terminal, without using a device such as an OTDR. Further, thereby, the monitoring device 100 according to the embodiment can identify an abnormal communication section at the stage of abnormal signs before the occurrence of an abnormality and reduce the cost of coping with the occurrence of an abnormality by analyzing minute changes occurring in each terminal and their trends, without the need to acquire information such as device logs and alerts.

[0041] That is, the monitoring device 100 according to the embodiment can identify an abnormal communication section by software-based calculation processing without using a dedicated diagnostic device in a communication system having a communication line that multiplexes and accommodates a communication path between terminals, such as an optical fiber.

[0042] Further, the monitoring device 100 according to the embodiment further includes a learning unit 123 that learns the normal state of a terminal based on the information on the terminal acquired by the acquisition unit 121, and a detection unit 124 that detects a change with respect to the normal state of the terminal learned by the learning unit 123. In the monitoring device 100, a second creation unit 125 creates information on changes in each terminal based on the change in the state of the terminal detected by the detection unit 124. With this configuration, the monitoring device 100 can identify an abnormal communication section at the stage of abnormal signs before the occurrence of an abnormality by learning the state of each terminal and detecting a change from the learned state of the terminal.

[0043] Further, in the monitoring device 100 according to the embodiment, the learning unit 123 learns the normal state of a terminal based on the information on the terminal acquired by the acquisition unit 121, and the detection unit 124 detects a change with respect to the normal state of the terminal learned by the learning unit 123. With this configuration, the monitoring device 100 can identify an abnormal communication section at the stage of abnormal signs before the occurrence of an abnormality by learning the normal state of each terminal and detecting a change from the learned normal state of the terminal.

[0044] Further, in the monitoring device 100 according to the embodiment, the detection unit 124 detects a change that is going towards an abnormality as a change from the learned normal state of the terminal. With this configuration, the monitoring device 100 can detect an abnormal sign at an earlier stage before the occurrence of an abnormality and specify an abnormal communication section by detecting a change that is going towards an abnormality from the learned normal state of the terminal.

[0045] 〔Program〕 It is also possible to create a program that describes the processing executed by the monitoring device 100 described in the above embodiment in a language executable by a computer. In this case, by the computer executing the program, the same effects as those of the above embodiment can be obtained. Further, such a program may be recorded on a computer-readable recording medium, and the same processing as that of the above embodiment may be realized by causing the computer to read and execute the program recorded on this recording medium.

[0046] FIG. 7 is a diagram showing an example of a computer that executes a monitoring program. As shown in FIG. 7, the computer 1000 includes, for example, a memory 1010, a CPU 1020, a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. These components are connected by a bus 1080.

[0047] Memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM 1012. The ROM 1011 stores a boot program such as a BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to the hard disk drive 1090. The disk drive interface 1040 is connected to the disk drive 1100. A removable storage medium such as a magnetic disk or an optical disk is inserted into the disk drive 1100. For example, a mouse 1110 and a keyboard 1120 are connected to the serial port interface 1050. For example, a display 1130 is connected to the video adapter 1060.

[0048] Here, as shown in FIG. 7, the hard disk drive 1090 stores, for example, an OS 1091, an application program 1092, program modules 1093, and program data 1094. Each table described in the above embodiment is stored, for example, in the hard disk drive 1090 or the memory 1010.

[0049] Also, the monitoring program is stored in the hard disk drive 1090 as a program module in which, for example, instructions executed by the computer 1000 are described. Specifically, the program module 1093 in which each process executed by the computer 1000 described in the above embodiment is described is stored in the hard disk drive 1090.

[0050] Also, data used for information processing by the monitoring program is stored, for example, in the hard disk drive 1090 as program data. Then, the CPU 1020 reads out the program module 1093 and the program data 1094 stored in the hard disk drive 1090 to the RAM 1012 as needed, and executes each of the above-described procedures.

[0051] Note that the program module 1093 and program data 1094 related to the monitoring program are not limited to being stored in the hard disk drive 1090. For example, they may be stored in a removable storage medium and read by the CPU 1020 via a disk drive 1100 or the like. Alternatively, the program module 1093 and program data 1094 related to the control program may be stored in another computer connected via a network such as a LAN (Local Area Network) or WAN (Wide Area Network), and read by the CPU 1020 via the network interface 1070.

[0052] 〔Others〕 Although various embodiments have been described in detail in this specification with reference to the drawings, these multiple embodiments are examples and are not intended to limit the present invention to these multiple embodiments. The features described in this specification can be realized in various ways including various modifications and improvements based on the knowledge of those skilled in the art.

[0053] Also, the above-mentioned "parts (module, -er suffix, -or suffix)" can be read as unit, means, circuit, etc. For example, the communication part (communication module), control part (control module), and storage part (storage module) can be read as communication unit, control unit, and storage unit, respectively.

Explanation of Reference Numerals

[0054] 100 Monitoring device 110 Communication part 120 Control part 121 Acquisition part 122 First creation part 123 Learning part 124 Detection part 125 Second creation part 126 Identification part 130 Storage part

Claims

1. An acquisition unit that acquires accommodation information of a terminal, configuration information, and information related to the terminal; A first creation unit that creates information on a path used for communication of the terminal and information on a terminal group among the communication sections of the terminal based on the accommodation information and configuration information of the terminal acquired by the acquisition unit; A second creation unit that creates information on changes in each terminal based on the information related to the terminal acquired by the acquisition unit; A specifying unit that specifies an abnormal communication section based on the information on the path used for communication of the terminal and the information on the terminal group among the communication sections of the terminal created by the first creation unit and the information on changes in each terminal created by the second creation unit; A monitoring device, characterized by comprising the above.

2. A learning unit that learns the state of the terminal based on the information related to the terminal acquired by the acquisition unit; A detection unit that detects a change in the state of the terminal learned by the learning unit; Further comprising: The monitoring device according to claim 1, wherein the second creation unit creates information on changes in each terminal based on the change in the state of the terminal detected by the detection unit.

3. The learning unit learns the normal state of the terminal based on the information related to the terminal acquired by the acquisition unit, The monitoring device according to claim 2, wherein the detection unit detects a change in the normal state of the terminal learned by the learning unit.

4. The monitoring device according to claim 3, wherein the detection unit detects a change towards abnormality as a change in the normal state of the learned terminal.

5. A monitoring method executed by a monitoring device, comprising: An acquisition step of acquiring accommodation information of a terminal, configuration information, and information related to the terminal; A first creation step of creating information on a path used for communication of a terminal and information on a terminal group among communication sections of the terminal based on the accommodation information and configuration information of the terminal acquired in the acquisition step; A second creation step of creating information on changes in each terminal based on the information on the terminal acquired in the acquisition step; A specifying step of specifying an abnormal communication section based on the information on the path used for communication of the terminal and the information on the terminal group among the communication sections of the terminal created in the first creation step and the information on changes in each terminal created in the second creation step; A monitoring method characterized by including the above.

6. An acquisition step of acquiring accommodation information of a terminal, configuration information, and information on the terminal; A first creation step of creating information on a path used for communication of the terminal and information on a terminal group among communication sections of the terminal based on the accommodation information and configuration information of the terminal acquired in the acquisition step; A second creation step of creating information on changes in each terminal based on the information on the terminal acquired in the acquisition step; A specifying step of specifying an abnormal communication section based on the information on the path used for communication of the terminal and the information on the terminal group among the communication sections of the terminal created in the first creation step and the information on changes in each terminal created in the second creation step; A monitoring program characterized by causing a computer to execute the above.

Images