Information processing device, user terminal, information communication system, information processing method, and computer program

Abstract

This contributes to accurately tallying up the amount of communication sent and received between the user terminal and the server. [Solution] The server comprises a user data recording unit that records user data of packets of a first packet communication session, a user terminal information recording unit that records the IP address and port number of the user terminal on the server side in association with the user data, a specific packet receiving unit that receives a first specific packet that notifies the IP address and port number of the user terminal side and user data, and a comparison unit that compares the user data notified in the first specific packet with the user data in the user data recording unit, and if the comparison is successful, the user terminal information recording unit records the IP address and port number of the user terminal on the user terminal side in association with the IP address and port number of the user terminal on the server side.

Description

[Technical Field]

[0001] The present invention relates to an information processing device, a user terminal, an information communication system, an information processing method, and a computer program. [Background technology]

[0002] Conventionally, a user terminal connects to a server on the Internet via a destination network (e.g., a cellular network) to receive various data (information). At this time, the server counts the amount of communication (number of packets and amount of user data) sent and received between the user terminal and the server based on the IP (Internet Protocol) address assigned to the user terminal (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2001-203691 Summary of the Invention [Problem to be solved by the invention]

[0004] In recent years, with the increase in the number of types of networks, it is expected that user terminals will be connected to servers via various destination networks (e.g., cellular networks, Wi-Fi (registered trademark) networks, etc.) managed and operated by different parties. However, when a user terminal is connected to a server via various destination networks, the IP address assigned to the user terminal changes dynamically, making it difficult to accurately count the amount of communication sent and received between the user terminal and the server.

[0005] The present invention has been made in consideration of the above circumstances, and its purpose is to contribute to accurately counting the amount of communication sent and received between a user terminal and a server. [Means for solving the problem]

[0006] One aspect of the present invention is an information processing device that performs packet communication with a user terminal, the information processing device comprising: a session detection unit that detects a first packet communication session established with the user terminal; a user data recording unit that records user data of packets transmitted or received by the information processing device in the detected first packet communication session; a user terminal information recording unit that records an IP address and a port number of the user terminal in packets transmitted or received by the information processing device in the first packet communication session in association with the recorded user data; and a user terminal information recording unit that records an IP address and a port number of the user terminal in packets transmitted or received by the information processing device in the first packet communication session in a second packet communication session different from the first packet communication session from the user terminal. An information processing device comprising: a specific packet receiving unit that receives a first specific packet that notifies the user terminal of the IP address and port number and user data of the packet sent or received by the user terminal; and a matching unit that matches the user data notified in the received first specific packet with the user data in the user data recording unit, wherein the user terminal information recording unit records the IP address and port number of the user terminal notified in the first specific packet for which the matching of the user data is successful, in association with the IP address and port number of the user terminal in the user terminal information recording unit associated with the user data in the user data recording unit for which the matching of the user data is successful. One aspect of the present invention is an information processing device as described above, further comprising a specific packet sending unit that sends, in the second packet communication session, a second specific packet that notifies the user terminal of the IP address and port number of the user terminal in the user terminal information recording unit that are associated with the IP address and port number of the user terminal notified in the first specific packet. One aspect of the present invention is an information processing device as described above, further comprising an aggregation unit that aggregates the communication volume for each user terminal based on the association of the IP address and port number of the user terminal in the user terminal information recording unit. One aspect of the present invention is the information processing device described above, wherein the packet communication is packet communication via NAT (Network Address Translation) or NAPT (Network Address Port Translation).

[0007] One aspect of the present invention is a user terminal that performs packet communication with an information processing device, and that includes: a session detection unit that detects a first packet communication session established with the information processing device; a user data recording unit that records user data of packets sent or received by the user terminal in the detected first packet communication session; and a specific packet sending unit that sends a first specific packet to the information processing device in a second packet communication session different from the first packet communication session, notifying the IP address and port number of the user terminal and user data of packets sent or received by the user terminal in the first packet communication session. One aspect of the present invention is a user terminal as described above, further comprising: a specific packet receiving unit that receives from the information processing device a second specific packet in the second packet communication session, the second specific packet notifying the IP address and port number of the user terminal of a packet sent or received by the information processing device in the first packet communication session; and a user terminal information recording unit that records the IP address and port number of the user terminal notified in the received second specific packet in association with the IP address and port number of the user terminal of a packet sent or received by the user terminal in the first packet communication session. One aspect of the present invention is the above-mentioned user terminal, wherein the packet communication is packet communication via NAT (Network Address Translation) or NAPT (Network Address Port Translation).

[0008] One aspect of the present invention is an information and communication system including the above-described information processing device and the above-described user terminal.

[0009] One aspect of the present invention is an information processing method executed by an information processing device that performs packet communication with a user terminal, the method including a session detection step of detecting a first packet communication session established with the user terminal, a user data recording step of recording user data of packets transmitted or received by the information processing device in the detected first packet communication session, a first user terminal information recording step of recording an IP address and port number of the user terminal in packets transmitted or received by the information processing device in the first packet communication session in association with the recorded user data, and a second user terminal information recording step of recording an IP address and port number of the user terminal in packets transmitted or received by the information processing device in the first packet communication session in a second packet communication session different from the first packet communication session from the user terminal. a specific packet receiving step of receiving a first specific packet that notifies the IP address and port number of the user terminal and user data of a packet sent or received by the terminal; a matching step of comparing the user data notified in the received first specific packet with the user data recorded in the user data recording step; and a second user terminal information recording step of recording the IP address and port number of the user terminal notified in the first specific packet for which the matching of the user data was successful, in association with the IP address and port number of the user terminal recorded in the first user terminal information recording step that is associated with the user data recorded in the user data recording step for which the matching of the user data was successful.

[0010] One aspect of the present invention is an information processing method executed by a user terminal that performs packet communication with an information processing device, the information processing method including: a session detection step of detecting a first packet communication session established with the information processing device; a user data recording step of recording user data of packets sent or received by the user terminal in the detected first packet communication session; and a specific packet transmission step of transmitting a first specific packet to the information processing device in a second packet communication session different from the first packet communication session, the first specific packet notifying the IP address and port number of the user terminal and user data of packets sent or received by the user terminal in the first packet communication session.

[0011] One aspect of the present invention is a computer program for causing a computer to execute any of the above information processing methods. [Effects of the Invention]

[0012] According to the present invention, it is possible to obtain an effect of contributing to accurate counting of the amount of communication transmitted and received between a user terminal and a server. [Brief explanation of the drawings]

[0013] [Figure 1] 1 is a diagram illustrating an example of the configuration of an information communication system according to an embodiment. [Figure 2] FIG. 2 is a diagram illustrating an example of the configuration of a server (information processing device) according to an embodiment. [Figure 3] FIG. 2 illustrates an example of a server according to an embodiment. [Figure 4] FIG. 10 is a diagram illustrating an example of the configuration of a user terminal according to an embodiment. [Figure 5] FIG. 2 illustrates an example of a user terminal according to an embodiment. [Figure 6] FIG. 1 is a diagram illustrating an example of an overall procedure of an information processing method according to an embodiment. [Figure 7]FIG. 10 is a diagram illustrating an example of the configuration of a first specific packet (probe request packet) according to an embodiment. [Figure 8] FIG. 10 is a diagram illustrating an example of the configuration of a second specific packet (probe response packet) according to an embodiment. [Figure 9] FIG. 10 is a diagram illustrating an example of the configuration of a recording unit in an example of a server according to an embodiment. [Figure 10] FIG. 10 is a diagram illustrating an example of the configuration of a recording unit in an example of a server according to an embodiment. [Figure 11] FIG. 10 is a diagram illustrating an example of the configuration of a recording unit in an example of a user terminal according to an embodiment. [Figure 12] FIG. 10 is a diagram illustrating an example of a processing procedure of a server according to an embodiment. [Figure 13] FIG. 10 is a diagram illustrating an example of a processing procedure of a server according to an embodiment. [Figure 14] FIG. 10 is a diagram illustrating an example of a processing procedure of a user terminal according to an embodiment. [Figure 15] FIG. 10 is a diagram illustrating an example of a processing procedure of a user terminal according to an embodiment. [Figure 16] FIG. 10 is a diagram illustrating an example of the configuration of an information communication system according to another embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0014] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. 1 is a diagram showing an example of the configuration of an information communication system according to an embodiment. In FIG. 1, the information communication system 1 includes a plurality of user terminals 2 (2-1, . . . , 2-m) and a server 10 (information processing device).

[0015] The user terminal 2 may be, for example, a mobile terminal device such as a smartphone or a tablet computer (tablet PC), or an in-vehicle terminal installed in a vehicle such as an automobile. The user terminal 2 connects to a destination network 3, accesses a server 10 on the Internet 4 via the destination network 3, and performs packet communication with the server 10. Multiple user terminals 2 may be connected to different destination networks 3, or may be connected to the same destination network 3. Examples of the destination network 3 include a cellular network and a wireless LAN (Local Area Network) such as WiFi.

[0016] The destination network 3 is equipped with a NAPT (Network Address Port Translation) 31. Packet communication between the user terminal 2 and the server 10 is packet communication via the NAPT 31. The NAPT 31 converts the IP address and port number of the user terminal 2 between the local IP address and port number on the terminal side (the IP address and port number on the terminal side relative to the NAPT 31) and the global IP address and port number on the server side (the IP address and port number on the server side relative to the NAPT 31). The NAPT 31 enables the same global IP address to be used by multiple user terminals 2. In packet communication via the NAPT 31, each session of multiple user terminals 2 using the same global IP address is identified by a different port number.

[0017] Hereinafter, with regard to the IP address and port number of the user terminal 2, the local IP address and port number on the terminal side (the IP address and port number on the terminal side closer to NAPT31) may be referred to as the terminal address and terminal port number on the terminal side, and the global IP address and port number on the server side (the IP address and port number on the server side closer to NAPT31) may be referred to as the terminal address and terminal port number on the server side.

[0018] Therefore, the server 10 identifies each packet communication session with multiple user terminals 2 that use the same global IP address by the combination of the same global IP address and the port number of each user terminal 2. However, when one user terminal 2 simultaneously performs packet communication with the server 10 through multiple sessions using one global IP address, the same user terminal 2 establishes multiple sessions with the server 10 using the same global IP address but different port numbers. In other words, multiple sessions that use the same global IP address and different port numbers as the IP address and port number of the user terminal 2 may be sessions of different user terminals 2, or may be sessions of the same user terminal 2. Therefore, the server 10 cannot identify a user terminal 2 based solely on the combination of the global IP address and port number of the user terminal 2.

[0019] For this reason, in this embodiment, a correspondence is established between the terminal address and terminal port number on the terminal side and the terminal address and terminal port number on the server side. The terminal address on the terminal side is different for each user terminal 2. This allows the server 10 to identify the user terminal 2 corresponding to the packet communication session (server side terminal address and terminal port number). Therefore, since the server 10 can identify the user terminal 2 corresponding to the packet communication session, the server 10 can accurately tally up the communication volume, such as the number of packets sent and received in the packet communication session and the amount of user data, for each user terminal 2.

[0020] Although this embodiment targets packet communication via NAPT, the destination network 3 may be equipped with NAT (Network Address Translation) and packet communication via NAT may also be targeted. With NAT, a one-to-one translation is performed between the terminal's local IP address (the IP address closer to the terminal than the NAT) and the server's global IP address (the IP address closer to the server than the NAT) for the IP address of the user terminal 2. However, when the server 10 wants to identify the user terminal 2 (terminal-specific identifier), it is preferable to associate the terminal's local IP address with the server's global IP address. This is because it is possible to obtain an association between the terminal's local IP address and the terminal-specific identifier for the user terminal 2. The terminal-specific identifier is never changed and can uniquely identify the user terminal 2. Examples of terminal-specific identifiers include an International Mobile Subscriber Identity (IMSI), an IC Card Identifier (ICCID), a Media Access Control (MAC) address, a Mobile Station International Subscriber Directory Number (MSISDN), and an International Mobile Equipment Identifier (IMEI).

[0021] The configuration according to this embodiment will be described in detail below. In the following description, packet communication via NAPT will be taken as an example of packet communication according to this embodiment, but the same can be applied to packet communication via NAT.

[0022] In the following description, packet communication may be simply referred to as communication, and a packet communication session may be simply referred to as a session.

[0023] In addition, in the following explanation, for the sake of convenience, expressions relating to the conversion of NAPT31 in the direction from the user terminal 2 to the server 10 may be used as representative expressions, and therefore, "terminal address and terminal port number before NAPT" refers to "terminal address and terminal port number on the terminal side," and "terminal address and terminal port number after NAPT" refers to "terminal address and terminal port number on the server side."

[0024] Fig. 2 is a diagram showing an example of the configuration of a server according to this embodiment. In Fig. 2, server 10 includes a communication unit 11, a session detection unit 12, a recording unit 13, a specific packet receiving unit 14, a matching unit 15, a specific packet transmitting unit 16, and a counting unit 17. Recording unit 13 records various data such as user data 131 and user terminal information 132.

[0025] Each function of the server 10 is realized by the server 10 including computer hardware such as a CPU (Central Processing Unit) and memory, and the CPU executing a computer program stored in the memory. The server 10 may be configured using a general-purpose computer device, or may be configured as a dedicated hardware device. For example, the server 10 may be configured using a server computer connected to a communication network such as the Internet. Each function of the server 10 may be realized by cloud computing. The server 10 may be realized by a single computer, or may be realized by distributing the functions of the server 10 among multiple computers.

[0026] The communication unit 11 communicates with devices external to the server 10. For example, the communication unit 11 communicates with the user terminal 2.

[0027] The session detection unit 12 detects a first packet communication session established with the user terminal 2.

[0028] The recording unit 13 (user data recording unit) records user data 131 of packets transmitted or received by the server 10 (communication unit 11) in the first packet communication session detected by the session detection unit 12. The recording unit 13 (user terminal information recording unit) records the IP address and port number (terminal address and terminal port number after NAPT) of the user terminal 2 of packets transmitted or received by the server 10 (communication unit 11) in the first packet communication session, in association with the recorded user data 131. The terminal address and terminal port number after NAPT are one piece of user terminal information 132.

[0029] The specific packet receiving unit 14 receives from the user terminal 2, in a second packet communication session different from the first packet communication session, a first specific packet that notifies the IP address and port number of the user terminal 2 (terminal address and terminal port number before NAPT) and user data of a packet sent or received by the user terminal 2 in the first packet communication session.

[0030] The collating unit 15 collates the user data notified in the first specific packet received by the specific packet receiving unit 14 with the user data 131 in the recording unit 13 .

[0031] The recording unit 13 (user terminal information recording unit) records the IP address and port number (terminal address and terminal port number before NAPT) of the user terminal 2 notified in the first specific packet for which the matching unit 15 has successfully matched the user data, in association with the IP address and port number (terminal address and terminal port number after NAPT) of the user terminal 2 in the recording unit 13 associated with the user data 131 in the recording unit 13 for which the matching has successfully matched the user data. The terminal address and terminal port number before NAPT are one piece of user terminal information 132.

[0032] The specific packet transmitting unit 16 transmits a second specific packet in the second packet communication session to notify the user terminal 2 of the IP address and port number (terminal address and terminal port number after NAPT) of the user terminal 2 in the recording unit 13 associated with the IP address and port number (terminal address and terminal port number before NAPT) of the user terminal 2 notified in the first specific packet.

[0033] The tallying unit 17 tally the communication volume for each user terminal 2 based on the association of the IP address and port number of the user terminal 2 in the recording unit 13 .

[0034] Fig. 3 is a diagram showing an example of a server according to this embodiment. In the example of the server 10 shown in Fig. 3, the OS (Operating System) of the server 10 is "Linux (registered trademark)" and uses the Linux kernel's eBPF (extended Berkeley Packet Filter).

[0035] 3, the server 10 includes a kernel 110 and an application (AP) 101 that runs on the kernel 110. The AP 101 communicates with the user terminal 2. The kernel 110 includes a TCP (Transmission Control Protocol) / UDP (User Datagram Protocol) processing unit 111, an IP processing unit 112, a TC (Traffic Control) processing unit 113, a network interface (netdev) 114, a "BPF TC hook (ingress / egress)" 121, a "BPF MAP_a (address / port conversion information)" 1301, and a "BPF MAP_b (user data / terminal address matching information)" 1302.

[0036] The session detection unit 12 detects a session that the AP 101 establishes with the user terminal 2 by using the “BPF TC hook (ingress / egress)” 121 .

[0037] The recording unit 13 records the user data 131 and the user terminal information 132 using "BPF MAP_a (address / port conversion information)" 1301 and "BPF MAP_b (user data / terminal address matching information)" 1302. "BPF MAP_a (address / port conversion information)" 1301 stores the user data 131 and the terminal address and terminal port number before NAPT in association with the terminal address and terminal port number after NAPT. "BPF MAP_b (user data / terminal address matching information)" 1302 stores the terminal address and terminal port number after NAPT in association with the user data 131.

[0038] Fig. 4 is a diagram showing an example of the configuration of a user terminal according to this embodiment. In Fig. 4, the user terminal 2 includes a communication unit 21, a session detection unit 22, a recording unit 23, a specific packet transmission unit 24, and a specific packet reception unit 25. The recording unit 23 records various data such as user data 231 and user terminal information 232.

[0039] Each function of the user terminal 2 is realized by the user terminal 2 including computer hardware such as a CPU and memory, and by the CPU executing a computer program stored in the memory.

[0040] The communication unit 21 communicates with devices external to the user terminal 2. For example, the communication unit 21 communicates with the server 10.

[0041] The session detection unit 22 detects a first packet communication session established with the server 10.

[0042] The recording unit 23 (user data recording unit) records the user data 231 of the packet transmitted or received by the user terminal 2 (communication unit 21) in the first packet communication session detected by the session detection unit 22.

[0043] The specific packet transmitting unit 24 transmits to the server 10, in a second packet communication session different from the first packet communication session, a first specific packet that notifies the IP address and port number (terminal address and terminal port number before NAPT) of the user terminal 2 (communication unit 21) of the packet transmitted or received by the user terminal 2 in the first packet communication session, as well as user data 231.

[0044] The specific packet receiving unit 25 receives from the server 10, in the second packet communication session, a second specific packet that notifies the IP address and port number (terminal address and terminal port number after NAPT) of the user terminal 2 of the packet sent or received by the server 10 in the first packet communication session.

[0045] The recording unit 23 (user terminal information recording unit) records the IP address and port number (terminal address and terminal port number after NAPT) of the user terminal 2 notified in the second specific packet received by the specific packet receiving unit 25, in association with the IP address and port number (terminal address and terminal port number before NAPT) of the user terminal 2 of the packet sent or received by the user terminal 2 in the first packet communication session. The "terminal address and terminal port number before NAPT" and the "terminal address and terminal port number after NAPT" are user terminal information 232.

[0046] Fig. 5 is a diagram showing an example of a user terminal according to this embodiment. In the example of the user terminal 2 in Fig. 5, the OS of the user terminal 2 is Linux, and eBPF of the Linux kernel is used.

[0047] 5, the user terminal 2 includes a kernel 210 and an application (AP) 201 that runs on the kernel 210. The AP 201 communicates with the server 10. The kernel 210 includes a TCP / UDP processing unit 211, an IP processing unit 212, a TC processing unit 213, a network interface (netdev) 214, a "BPF TC hook (ingress / egress)" 221, and a "BPF MAP_c (address / port conversion information)" 2301.

[0048] The session detection unit 22 detects a session that the AP 201 establishes with the server 10 by using the “BPF TC hook (ingress / egress)” 221 .

[0049] The recording unit 23 records the user terminal information 232 using the "BPF MAP_c (address / port conversion information)" 2301. The "BPF MAP_c (address / port conversion information)" 2301 stores the terminal address and terminal port number after NAPT in association with the terminal address and terminal port number before NAPT.

[0050] Next, the overall flow of the information processing method according to this embodiment will be described with reference to Fig. 6. Fig. 6 is a diagram showing an example of the overall procedure of the information processing method according to this embodiment.

[0051] (Step S1) The session detection unit 12 of the server 10 detects the first packet communication session established with the user terminal 2 based on the “terminal address and terminal port number after NAPT” of the packet that the communication unit 11 sends or receives between the user terminal 2.

[0052] The recording unit 13 (user data recording unit) records user data 131 of packets transmitted or received by the communication unit 11 in the first packet communication session detected by the session detection unit 12. The packets are TCP or UDP packets (TCP / UDP packets). For example, the recording unit 13 (user data recording unit) records TCP / UDP packets whose user data length is equal to or greater than a predetermined length M (e.g., M=16 bytes), acquires data of the predetermined length M at the beginning of the user data from the TCP / UDP packets to be recorded, and records the acquired data of the predetermined length M as user data 131. There are a predetermined number N of TCP / UDP packets to be recorded (e.g., N=3).

[0053] Furthermore, the recording unit 13 (user terminal information recording unit) records the "terminal address and terminal port number after NAPT" of the packet sent or received by the communication unit 11 in the first packet communication session in association with the recorded user data 131.

[0054] (Step S2) The session detection unit 22 of the user terminal 2 detects the first packet communication session established with the server 10 based on the “terminal address and terminal port number before NAPT” of the packet that the communication unit 21 sends or receives between the server 10.

[0055] The recording unit 23 (user data recording unit) records user data 231 of packets transmitted or received by the communication unit 21 in the first packet communication session detected by the session detection unit 22. The packets are TCP / UDP packets. For example, the recording unit 23 (user data recording unit) records TCP / UDP packets whose user data length is equal to or greater than a predetermined length M (e.g., M=16 bytes), acquires data of the predetermined length M at the beginning of the user data from the TCP / UDP packets to be recorded, and records the acquired data of the predetermined length M as user data 231. There are a predetermined number N of TCP / UDP packets to be recorded (e.g., N=3). The recording unit 23 may simply copy and record the TCP / UDP data packets detected by the session detection unit 22.

[0056] (Step S3) In a second packet communication session different from the first packet communication session, the specific packet transmitter 24 of the user terminal 2 transmits to the server 10 a first specific packet (for convenience of explanation, referred to as a probe request packet) that notifies the server 10 of the "terminal address and terminal port number before NAPT" and user data 231 of the packet transmitted or received by the communication unit 21 in the first packet communication session. The probe request packet is a UDP packet that queries the server 10 for the "terminal address and terminal port number after NAPT." For example, the probe request packet can be transmitted up to a predetermined maximum number of times (for example, up to three times).

[0057] The probe request packet may further include a terminal-specific identifier of the user terminal 2. This allows the user terminal 2 to notify the server 10 of the "terminal address and terminal port number before NAPT," the user data 231, and the terminal-specific identifier by using the probe request packet.

[0058] The specific packet receiver 14 of the server 10 receives a probe request packet from the user terminal 2 via the communication unit 11 in a second packet communication session different from the first packet communication session. The specific packet receiver 14 acquires the "terminal address and terminal port number before NAPT" and user data 231 from the received probe request packet. Furthermore, if the received probe request packet includes a "terminal-specific identifier," the specific packet receiver 14 acquires the "terminal-specific identifier."

[0059] The collation unit 15 compares the user data 231 notified in the probe request packet received by the specific packet receiving unit 14 with the user data 131 in the recording unit 13 (user data recording unit). The user data 131 to be compared is the user data 131 associated in the recording unit 13 with the "terminal address and terminal port number after NAPT" of the probe request packet.

[0060] If the collation of the user data by the collation unit 15 is successful, the process proceeds to step S4, whereas if the collation is unsuccessful, the process of FIG. 6 ends.

[0061] (Step S4) The recording unit 13 (user terminal information recording unit) of the server 10 records the "terminal address and terminal port number before NAPT" notified in the probe request packet for which the matching unit 15 has successfully matched the user data, in association with the "terminal address and terminal port number after NAPT" in the recording unit 13 (user terminal information recording unit) associated with the user data 131 for which the matching has successfully matched the user data. Furthermore, if a "terminal-specific identifier" is acquired from the probe request packet, the recording unit 13 (user terminal information recording unit) also records the "terminal-specific identifier" in association with the "terminal address and terminal port number after NAPT."

[0062] The specific packet transmitter 16 of the server 10 transmits, in the second packet communication session, a second specific packet that notifies the user terminal 2 of the "terminal address and terminal port number after NAPT" stored in the recording unit 13 (user terminal information recording unit) that is associated with the "terminal address and terminal port number before NAPT" notified in the probe request packet. The second specific packet is a probe response packet that is a response to the probe request packet.

[0063] The specific packet receiver 25 of the user terminal 2 receives the probe response packet in the second packet communication session from the server 10. The specific packet receiver 25 acquires the "terminal address and terminal port number after NAPT" from the received probe response packet.

[0064] The recording unit 23 (user terminal information recording unit) of the user terminal 2 records the "terminal address and terminal port number after NAPT" notified in the probe response packet received by the specific packet receiving unit 25 in association with the "terminal address and terminal port number before NAPT" of the packet sent or received by the communication unit 21 in the first packet communication session.

[0065] Fig. 7 is a diagram showing an example of the configuration of a first specific packet (probe request packet) according to this embodiment. As shown in Fig. 7, the probe request packet is composed of fields such as an IP header, a UDP header, a magic number for identifying the probe packet, a probe request / response type, a terminal-specific identifier, a distinction between TCP / UDP data packet transmission / reception on the terminal side, the TCP / UDP data length transmitted / received on the terminal side, and a copy of the TCP / UDP packet transmitted / received on the terminal side (including the IP and TCP / UDP headers).

[0066] The terminal-specific identifier is optional and may or may not be included in the probe request packet. When the terminal-specific identifier is included in the probe request packet, the counting unit 17 of the server 10 can use the terminal-specific identifier to count the communication volume for each terminal-specific identifier.

[0067] Regarding copying of TCP / UDP packets sent / received on the terminal side (including IP and TCP / UDP headers), target packets are TCP / UDP packets whose user data length is equal to or greater than a predetermined length M (for example, M = 16 bytes). Furthermore, the user data may be limited to only the data of the predetermined length M at the beginning of the user data. In particular, if the size of the entire probe request packet exceeds the MTU (Maximum Transmission Unit) size, the rear part of the user data is truncated to fit within the MTU size.

[0068] The IP header and TCP / UDP header of the TCP / UDP packet sent / received on the terminal side include the "terminal address and terminal port number before NAPT." This allows the server 10 to obtain the "terminal address and terminal port number before NAPT" of the user terminal 2 from the probe request packet.

[0069] Fig. 8 is a diagram showing an example of the configuration of a second specific packet (probe response packet) according to this embodiment. As shown in Fig. 8, the probe response packet is composed of fields such as an IP header, a UDP header, a magic number for identifying the probe packet, a probe request / response type, a terminal-specific identifier, a distinction between TCP / UDP data packet transmission / reception on the terminal side, the length of TCP / UDP data transmitted / received on the terminal side, and "terminal address and terminal port number before NAPT" and "terminal address and terminal port number after NAPT".

[0070] The destination address and destination port number of the probe response packet are copied as they are from the source address and source port number of the probe request packet received by the server 10.

[0071] The terminal-specific identifier is optional and may or may not be included in the probe response packet.

[0072] 9 and 10 are diagrams showing an example of the configuration of a recording unit in an example of a server according to this embodiment. Fig. 9 shows an example of the configuration of "BPF MAP_a (address / port conversion information)" 1301 shown in Fig. 3. Fig. 10 shows an example of the configuration of "BPF MAP_b (user data / terminal address matching information)" 1302 shown in Fig. 3.

[0073] 9, "BPF MAP_a (address / port conversion information)" 1301 stores user data 131 and "terminal address and terminal port number before NAPT" in association with "terminal address and terminal port number after NAPT." As a specific example, "BPF MAP_a (address / port conversion information)" 1301 has a server address, a server port number, a protocol, and "terminal address and terminal port number after NAPT" in the Key field. Also, it has a user data length (up to N(3) items), the first M(16) bytes of user data (up to N(3) items), and "terminal address and terminal port number after NAPT" in the Value field.

[0074] 10, "BPF MAP_b (user data / terminal address matching information)" 1302 stores "terminal address and terminal port number after NAPT" in association with user data 131. As a specific example, "BPF MAP_b (user data / terminal address matching information)" 1302 has a server address, a server port number, a protocol, a user data length, and the first M (16) bytes of the user data in the Key field. It also has "terminal address and terminal port number after NAPT" in the Value field.

[0075] 9 and 10, this embodiment uses HASH, which can efficiently store any data format, among various MAPs that are data structures of the kernel 110. In this configuration, the value field can be searched from the key field, but the key field cannot be searched from the value field. For this reason, as shown in FIGS. 9 and 10, "BPF MAP_a (address / port conversion information)" 1301 and "BPF MAP_b (user data / terminal address matching information)" 1302 are provided.

[0076] In step S1 of Figure 6 described above, in "BPF MAP_a (address / port conversion information)" 1301 and "BPF MAP_b (user data / terminal address matching information)" 1302, for entries corresponding to the first packet communication session detected by the session detection unit 12, the session information (server address and port number, TCP / UDP distinction (protocol), "terminal address and terminal port number after NAPT") of the packet sent or received by the communication unit 11 in the first packet communication session, as well as the user data length and user data are recorded in the relevant fields.

[0077] In step S3 of FIG. 6 described above, "BPF MAP_b (user data / terminal address matching information)" 1302 searches for a corresponding entry based on the session information (server address and port number, TCP / UDP distinction (protocol)) of the probe request packet, as well as the user data length and user data (Key field). When searching for this entry, user data is matched. As a result of this search, the "terminal address and terminal port number after NAPT" (Value field) of the discovered entry is used to search for an entry in "BPF MAP_a (address / port conversion information)" 1301.

[0078] In step S4 of FIG. 6 described above, "BPF MAP_a (address / port conversion information)" 1301 searches for a corresponding entry based on the session information (server address and port number, TCP / UDP distinction (protocol)) of the probe request packet and the "terminal address and terminal port number after NAPT" (Key field) searched for in step S3. The "terminal address and terminal port number before NAPT" notified in the probe request packet is stored in the Value field of the entry searched for by this "BPF MAP_a (address / port conversion information)" 1301. This makes it possible to search for the "terminal address and terminal port number before NAPT" (Value field) from the "terminal address and terminal port number after NAPT" (Key field) using "BPF MAP_a (address / port conversion information)" 1301.

[0079] Fig. 11 is a diagram showing an example of the configuration of the recording unit in an example of a user terminal according to this embodiment. Fig. 11 shows an example of the configuration of "BPF MAP_c (address / port conversion information)" 2301 shown in Fig. 5.

[0080] 11, "BPF MAP_c (address / port conversion information)" 2301 stores "terminal address and terminal port number after NAPT" in association with "terminal address and terminal port number before NAPT." As a specific example, "BPF MAP_c (address / port conversion information)" 2301 has a server address, a server port number, a protocol, and "terminal address and terminal port number before NAPT" in the Key field. Also, it has the number of probe requests and "terminal address and terminal port number after NAPT" in the Value field.

[0081] In step S4 of Figure 6 described above, in "BPF MAP_c (address / port conversion information)" 2301, the "terminal address and terminal port number after NAPT" (Value field) notified in the probe response packet is recorded in association with the "terminal address and terminal port number before NAPT" (Key field) of the packet sent or received by the communication unit 21 in the first packet communication session.

[0082] Next, a specific example of an information processing method according to this embodiment will be described with reference to Figs. 12 to 15. Figs. 12 and 13 are diagrams showing an example of a processing procedure of a server according to this embodiment. Figs. 12 and 13 correspond to an example of the server 10 shown in Fig. 3. Figs. 14 and 15 are diagrams showing an example of a processing procedure of a user terminal according to this embodiment. Figs. 14 and 15 correspond to an example of the user terminal 2 shown in Fig. 5.

[0083] The processing procedure of the server 10 according to this embodiment will be described with reference to FIGS.

[0084] First, the process of the server 10 when a TCP / UDP data packet is detected will be described with reference to FIG. 12 starts when the session detection unit 12 of the server 10 detects a TCP / UDP data packet that the communication unit 11 transmits or receives to or from the user terminal 2 using the "BPF TC hook (ingress / egress)" 121. However, the detection target is a TCP / UDP data packet whose user data length is equal to or longer than a predetermined length M.

[0085] (Step S11) The session detection unit 12 searches for "BPF MAP_a (address / port conversion information)" 1301 from the session information (server address and port number, TCP / UDP distinction (protocol), "terminal address and terminal port number after NAPT") (Key field) of the detected TCP / UDP data packet.

[0086] (Step S12) If the search result of step S11 does not find an entry that matches the session information (server address and port number, TCP / UDP distinction (protocol), "terminal address and terminal port number after NAPT"), it is a new session (a new first packet communication session), and if a matching entry is found, it is not a new session. If it is a new session (step S12, YES), proceed to step S13, and if it is not new session information (step S12, NO), proceed to step S15.

[0087] (Step S13) The recording unit 13 adds an entry for the new session to both the "BPF MAP_a (address / port conversion information)" 1301 and the "BPF MAP_b (user data / terminal address matching information)" 1302. The recording unit 13 records the session information of the detected TCP / UDP data packet (server address and port number, TCP / UDP distinction (protocol), and "terminal address and terminal port number after NAPT") in the relevant fields for the added entry for the new session in the "BPF MAP_a (address / port conversion information)" 1301 and the "BPF MAP_b (user data / terminal address matching information)" 1302.

[0088] (Step S14) The recording unit 13 records the user data length of the detected TCP / UDP data packet and the first M (16) bytes of the user data in the corresponding fields for the added entry of the new session in "BPF MAP_a (address / port conversion information)" 1301 and "BPF MAP_b (user data / terminal address matching information)" 1302. The recording unit 13 updates the number of recorded user data by "+1". After this, the processing of FIG. 12 ends.

[0089] (Step S15) The session detection unit 12 checks whether the "terminal address and terminal port number before NAPT" are recorded in the Value field of the entry found by the search in step S11 in "BPF MAP_a (address / port conversion information)" 1301. If the "terminal address and terminal port number before NAPT" are already recorded (step S15, YES), the process in Fig. 12 ends. On the other hand, if they are not yet recorded (step S15, NO), the process proceeds to step S16.

[0090] (Step S16) The session detection unit 12 determines whether the number of recorded user data items related to the entry has reached a predetermined number N (3 items). If the number of recorded user data items has reached the predetermined number N (3 items) (step S16, YES), the process of FIG. 12 ends. On the other hand, if the number has not yet reached the predetermined number N (3 items) (step S16, NO), the process proceeds to step S14.

[0091] Next, the processing of the server 10 when receiving a probe request packet will be described with reference to FIG. 13 starts when the specific packet receiving unit 14 of the server 10 receives a probe request packet from the user terminal 2. The session of the probe request packet is a session (second packet communication session) different from the session (first packet communication session) detected in FIG.

[0092] (Step S21) The matching unit 15 searches for a corresponding entry from the session information (server address and port number, TCP / UDP distinction (protocol)) of the probe request packet, as well as the user data length and user data (Key field) using "BPF MAP_b (user data / terminal address matching information)" 1302. When searching for this entry, user data is matched. As a result of this search, the "terminal address and terminal port number after NAPT" (Value field) of the discovered entry is used to search for an entry in "BPF MAP_a (address / port conversion information)" 1301.

[0093] (Step S22) If the result of the search in step S21 is that the user data has been successfully collated and a corresponding entry has been found, the process proceeds to step S23. On the other hand, if a corresponding entry has not been found, the process in FIG. 13 ends.

[0094] (Step S23) The recording unit 13 searches for a corresponding entry using the "BPF MAP_a (address / port conversion information)" 1301 from the session information of the probe request packet (server address and port number, TCP / UDP distinction (protocol)) and the "terminal address and terminal port number after NAPT" (Key field) obtained by the search in step S21. Next, the recording unit 13 records the "terminal address and terminal port number before NAPT" notified in the probe request packet in the Value field of the search result entry of "BPF MAP_a (address / port conversion information)" 1301. This makes it possible to search for the "terminal address and terminal port number before NAPT" (Value field) from the "terminal address and terminal port number after NAPT" (Key field) using "BPF MAP_a (address / port conversion information)" 1301.

[0095] (Step S24) The recording unit 13 deletes the corresponding entry from "BPF MAP_b (user data / terminal address matching information)" 1302. The entry to be deleted is searched from the user data length and the first M (16) bytes (Value field) of the user data stored up to a maximum of N (3 items) in the entry that recorded the "terminal address and terminal port number before NAPT" (Value field) in "BPF MAP_a (address / port conversion information)" 1301 in step S23.

[0096] (Step S25) The specific packet transmitter 16 transmits to the user terminal 2 a probe response packet notifying the "terminal address and terminal port number after NAPT" (Key field) associated with the "terminal address and terminal port number before NAPT" (Value field) notified in the probe request packet in the "BPF MAP_a (address / port conversion information)" 1301.

[0097] The processing procedure of the user terminal 2 according to this embodiment will be described with reference to FIGS.

[0098] First, the processing of the user terminal 2 when a TCP / UDP data packet is detected will be described with reference to FIG. 14 starts when the session detection unit 22 of the user terminal 2 detects a TCP / UDP data packet that the communication unit 21 transmits or receives to or from the server 10 using the "BPF TC hook (ingress / egress)" 221. However, the detection target is a TCP / UDP data packet whose user data length is equal to or greater than a predetermined length M.

[0099] (Step S31) The session detection unit 22 searches for "BPF MAP_c (address / port conversion information)" 2301 from the session information (server address and port number, TCP / UDP distinction (protocol), "terminal address and terminal port number before NAPT") (Key field) of the detected TCP / UDP data packet.

[0100] The recording unit 23 acquires data of a predetermined length M at the beginning of the user data from the TCP / UDP data packet detected by the session detection unit 22 , and records the acquired data of the predetermined length M as user data 231 . The recording unit 23 may simply copy and record the TCP / UDP data packets detected by the session detection unit 22.

[0101] (Step S32) If the search result of step S31 does not find an entry that matches the session information (server address and port number, TCP / UDP distinction (protocol), "terminal address and terminal port number before NAPT"), it is a new session (a new first packet communication session), and if a matching entry is found, it is not a new session. If it is a new session (step S32, YES), proceed to step S33, and if it is not a new session (step S32, NO), proceed to step S35.

[0102] (Step S33) The recording unit 23 adds an entry for the new session to "BPF MAP_c (address / port conversion information)" 2301. The recording unit 23 records the session information of the detected TCP / UDP data packet (server address and port number, TCP / UDP distinction (protocol), and "terminal address and terminal port number before NAPT") in the relevant fields for the entry for the new session added to "BPF MAP_c (address / port conversion information)" 2301.

[0103] (Step S34) The specific packet transmitter 24 transmits a probe request packet to the server 10 in a second packet communication session different from the first packet communication session. The specific packet transmitter 24 updates the number of probe requests (Value field) of the "BPF MAP_c (address / port conversion information)" 2301 by "+1". After that, the processing in FIG. 14 ends.

[0104] (Step S35) The session detection unit 22 checks whether the "terminal address and terminal port number after NAPT" are recorded in the Value field of the entry found by the search in step S31 in "BPF MAP_c (address / port conversion information)" 2301. If the "terminal address and terminal port number after NAPT" are already recorded (step S35, YES), the process in Fig. 14 ends. On the other hand, if they are not yet recorded (step S35, NO), the process proceeds to step S36.

[0105] (Step S36) The session detection unit 22 determines whether the number of probe requests (Value field) of the entry has reached a predetermined number N (3 times). If the number of probe requests has reached the predetermined number N (3 times) (YES in step S36), the process in Fig. 14 ends. On the other hand, if the number has not yet reached the predetermined number N (3 times) (NO in step S36), the process proceeds to step S34.

[0106] Next, the processing of the user terminal 2 when receiving a probe response packet will be described with reference to FIG. 15 starts when the specific packet receiving unit 25 of the user terminal 2 receives a probe response packet from the server 10. The session of the probe response packet is a session (second packet communication session) different from the session (first packet communication session) detected in FIG.

[0107] (Step S41) The recording unit 23 searches for a corresponding entry using the "BPF MAP_c (address / port conversion information)" 2301 from the session information of the probe response packet (server address and port number, TCP / UDP distinction (protocol)) and the "terminal address and terminal port number before NAPT" (Key field).

[0108] (Step S42) If a corresponding entry is found as a result of the search in step S41, the process proceeds to step S43. On the other hand, if a corresponding entry is not found, the process in FIG. 15 ends.

[0109] (Step S43) The recording unit 23 checks whether the "terminal address and terminal port number after NAPT" have been recorded in the Value field of the entry found by the search in step S41. If the result shows that the "terminal address and terminal port number after NAPT" have been recorded, the process in Fig. 15 ends. On the other hand, if the "terminal address and terminal port number" have not been recorded yet, the process proceeds to step S44.

[0110] (Step S44) The recording unit 23 records the "terminal address and terminal port number after NAPT" in the Value field of the entry found by the search in step S41.

[0111] Fig. 16 is a diagram showing an example of the configuration of an information communication system according to another embodiment. In Fig. 16, parts corresponding to those in Fig. 1 are given the same reference numerals, and their description will be omitted.

[0112] The information communication system 1a shown in Fig. 16 is provided with a load balancer 5 in addition to the information communication system 1 shown in Fig. 1. The load balancer 5 distributes packets between the user terminal 2 and multiple servers 10 (10-1, ..., 10-n) on an IP address basis. The distribution of packets by the load balancer 5 can distribute the load on the servers 10.

[0113] 16, it is possible to associate the terminal address and terminal port number (terminal address and terminal port number before NAPT) with the server terminal address and terminal port number (terminal address and terminal port number after NAPT), as in the above-described information communication system 1. This allows each of the multiple servers 10 to identify the user terminal 2 corresponding to the packet communication session, and therefore each of the multiple servers 10 can accurately tally up the communication volume, such as the number of packets sent and received in the packet communication session and the volume of user data, for each user terminal 2.

[0114] Furthermore, the above-described embodiment makes it possible, for example, to "accurately tally the amount of communication sent and received between a wireless terminal and a server," which will contribute to Goal 9 of the United Nations-led Sustainable Development Goals (SDGs), which is to "build resilient infrastructure, promote sustainable industrialization, and foster innovation."

[0115] Although an embodiment of the present invention has been described in detail above with reference to the drawings, the specific configuration is not limited to this embodiment, and design changes and the like are also included within the scope that does not deviate from the gist of the present invention.

[0116] For example, a computer program for implementing the functions of each of the above-described devices may be recorded on a computer-readable recording medium, and the program recorded on the recording medium may be read and executed by a computer system. Note that the term "computer system" may include hardware such as an OS and peripheral devices. In addition, "computer-readable recording medium" refers to writable non-volatile memory such as a flexible disk, optical magnetic disk, ROM, or flash memory, portable media such as a DVD (Digital Versatile Disc), or a storage device such as a hard disk built into a computer system.

[0117] Furthermore, the term "computer-readable recording medium" also includes those that retain a program for a certain period of time, such as volatile memory (e.g., DRAM (Dynamic Random Access Memory)) within a computer system that serves as a server or client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by transmission waves in the transmission medium. Here, the "transmission medium" that transmits the program refers to a medium that has the function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. The program may also be a program for implementing some of the functions described above, or may be a so-called differential file (differential program) that can implement the functions described above in combination with a program already stored in the computer system. [Explanation of symbols]

[0118] 1, 1a...information and communication system, 2...user terminal, 3...connection network, 4...Internet, 5...load balancer, 10...server (information processing device), 11, 21...communication unit, 12, 22...session detection unit, 13, 23...recording unit, 14, 25...specific packet receiving unit, 15...collation unit, 16, 24...specific packet transmitting unit, 17...counting unit, 31...NAPT

Claims

1. In an information processing device that performs packet communication with a user terminal, a session detection unit that detects a first packet communication session established with the user terminal; a user data recording unit that records user data of packets transmitted or received by the information processing device in the detected first packet communication session; a user terminal information recording unit that records an IP address and a port number of the user terminal of a packet transmitted or received by the information processing device in the first packet communication session in association with the recorded user data; a specific packet receiving unit that receives, from the user terminal, a first specific packet in a second packet communication session different from the first packet communication session, the first specific packet notifying the IP address and port number of the user terminal and user data of a packet transmitted or received by the user terminal in the first packet communication session; a collating unit that collates user data notified in the received first specific packet with user data in the user data recording unit, the user terminal information recording unit records the IP address and port number of the user terminal notified in the first specific packet for which the user data has been successfully matched, in association with the IP address and port number of the user terminal in the user terminal information recording unit associated with the user data in the user data recording unit for which the user data has been successfully matched; Information processing device.

2. a specific packet transmitting unit that transmits, via the second packet communication session, a second specific packet that notifies the user terminal of the IP address and port number of the user terminal of the user terminal information recording unit that are associated with the IP address and port number of the user terminal notified in the first specific packet; The information processing device according to claim 1 , further comprising:

3. a counting unit that counts the communication volume for each user terminal based on the association between the IP address and port number of the user terminal in the user terminal information recording unit; The information processing device according to claim 1 , further comprising:

4. The packet communication is packet communication via NAT (Network Address Translation) or NAPT (Network Address Port Translation). The information processing device according to claim 1 .

5. In a user terminal that performs packet communication with an information processing device, a session detection unit that detects a first packet communication session established with the information processing device; a user data recording unit that records user data of packets transmitted or received by the user terminal in the detected first packet communication session; a specific packet transmitting unit that transmits, in a second packet communication session different from the first packet communication session, a first specific packet that notifies the information processing device of an IP address and a port number of the user terminal and user data of a packet that was transmitted or received by the user terminal in the first packet communication session; A user terminal comprising:

6. a specific packet receiving unit that receives, from the information processing device, a second specific packet that notifies the IP address and port number of the user terminal of a packet that the information processing device transmits or receives in the first packet communication session, during the second packet communication session; a user terminal information recording unit that records the IP address and port number of the user terminal notified in the received second specific packet in association with the IP address and port number of the user terminal of a packet transmitted or received by the user terminal in the first packet communication session; The user terminal of claim 5 further comprising:

7. The packet communication is packet communication via NAT (Network Address Translation) or NAPT (Network Address Port Translation).

7. A user terminal according to claim 5 or 6.

8. The information processing device according to claim 1 ; A user terminal according to claim 5; An information and communication system comprising:

9. An information processing method executed by an information processing device that performs packet communication with a user terminal, comprising: a session detection step of detecting a first packet communication session established with the user terminal; a user data recording step of recording user data of a packet transmitted or received by the information processing device in the detected first packet communication session; a first user terminal information recording step of recording an IP address and a port number of the user terminal of a packet transmitted or received by the information processing device in the first packet communication session in association with the recorded user data; a specific packet receiving step of receiving, from the user terminal, a first specific packet in a second packet communication session different from the first packet communication session, the first specific packet notifying the IP address and port number of the user terminal and user data of a packet transmitted or received by the user terminal in the first packet communication session; a comparison step of comparing the user data notified in the received first specific packet with the user data recorded in the user data recording step; a second user terminal information recording step of recording the IP address and port number of the user terminal notified in the first specific packet for which the user data has been successfully matched, in association with the IP address and port number of the user terminal recorded in the first user terminal information recording step associated with the user data recorded in the user data recording step for which the user data has been successfully matched; An information processing method including:

10. An information processing method executed by a user terminal that performs packet communication with an information processing device, comprising: a session detection step of detecting a first packet communication session established with the information processing device; a user data recording step of recording user data of packets transmitted or received by the user terminal in the detected first packet communication session; a specific packet transmitting step of transmitting, in a second packet communication session different from the first packet communication session, a first specific packet notifying the information processing device of an IP address and port number of the user terminal and user data of a packet transmitted or received by the user terminal in the first packet communication session; An information processing method including:

11. A computer program for causing a computer to execute the information processing method according to claim 9 or 10.

Images