Information processing device, relay device, control method, and program

Abstract

To provide an information processing device, an information processing method, an information processing system, and a non-transitory computer-readable medium storing a program, which properly operate a communication network that uses a relay device having a defect.SOLUTION: In an information processing system in which an information processing device and multiple relay devices are connected so as to be able to communicate with each other via a LAN (Local Area Network) cable or the like, the information processing device (10) includes an acquisition unit (11) that acquires information indicating a defect in a first relay device, and a control unit (12) that changes settings related to communication between at least one of the first relay device and a second relay device that communicates with the first relay device on the basis of the information acquired by the acquisition unit.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to an information processing device, an information processing method, a non-transitory computer-readable medium storing a program, and an information processing system. [Background technology]

[0002] When a defect such as a bug (malfunction) or an information security vulnerability (security hole) is discovered in the software (firmware) of a relay device such as a router, it is known that the defect can be corrected by updating the software of the relay device.

[0003] Patent Document 1 describes that when a router receives a specific command that causes a malfunction, the malfunction is avoided by executing another command that has been registered in advance instead of the specific command. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2012-124803 Summary of the Invention [Problem to be solved by the invention]

[0005] However, the technology described in Patent Document 1 has a problem in that it may not be possible to properly operate a communication network that uses a relay device that has defects such as bugs or vulnerabilities in information security.

[0006] In view of the above-mentioned problems, the object of the present disclosure is to provide an information processing device, an information processing method, an information processing system, and a non-transitory computer-readable medium storing a program that can properly operate a communication network that uses a defective relay device. [Means for solving the problem]

[0007] In a first aspect of the present disclosure, an information processing device includes an acquisition means for acquiring information indicating a defect in a first relay device, and a control means for changing settings related to communication between at least one of the first relay device and a second relay device that communicates with the first relay device based on the information acquired by the acquisition means.

[0008] In addition, a second aspect of the present disclosure provides an information processing method for acquiring information indicating a defect in a first relay device, and changing settings related to communication between at least one of the first relay device and a second relay device that communicates with the first relay device based on the information acquired by the acquisition means.

[0009] In addition, in a third aspect of the present disclosure, a non-transitory computer-readable medium is provided that stores a program that causes an information processing device to execute the following processes: acquiring information indicating a defect in a first relay device; and changing settings related to communication between the first relay device and at least one of a second relay device that communicates with the first relay device, based on the information acquired by the acquisition means.

[0010] In addition, a fourth aspect of the present disclosure provides an information processing system including an information processing device, a first relay device, and a second relay device, wherein the information processing device includes an acquisition means for acquiring information indicating a defect in the first relay device, and a control means for changing settings related to communication between the first relay device and / or the second relay device that communicates with the first relay device based on the information acquired by the acquisition means. [Effects of the Invention]

[0011] According to one aspect, it is possible to appropriately operate a communication network that uses a relay device having a defect. [Brief explanation of the drawings]

[0012] [Figure 1]FIG. 1 is a diagram illustrating an example of a configuration of an information processing apparatus according to an embodiment. [Figure 2] 1 is a diagram illustrating an example of the configuration of an information processing system according to an embodiment. [Figure 3] FIG. 1 is a diagram illustrating an example of a hardware configuration of an information processing apparatus according to an embodiment. [Figure 4] FIG. 4 is a sequence diagram illustrating an example of processing of the information processing system according to the embodiment. [Figure 5] FIG. 10 is a diagram illustrating an example of data recorded in a relay device DB according to the embodiment. [Figure 6] FIG. 10 is a diagram illustrating an example of data recorded in a control content DB according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0013] The principles of the present disclosure will be described with reference to some exemplary embodiments. It should be understood that these embodiments are set forth for illustrative purposes only, to aid those skilled in the art in understanding and practicing the present disclosure, without implying any limitation on the scope of the disclosure. The disclosure described herein may be implemented in various ways other than those described below.

[0014] In the following description and claims, unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure belongs.

[0015] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. (Embodiment 1) <Configuration> The configuration of an information processing device 10 according to an embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an example of the configuration of the information processing device 10 according to an embodiment. The information processing device 10 has an acquisition unit 11 and a control unit 12. These units may be realized by cooperation between one or more programs installed in the information processing device 10 and hardware such as a processor 101 and a memory 102 of the information processing device 10.

[0016] The acquisition unit 11 acquires various information from an internal or external storage unit and an external device of the information processing device 10. The acquisition unit 11 acquires, for example, information indicating defects such as bugs in the relay device or vulnerabilities in information security.

[0017] The control unit 12 performs various processes in the information processing device 10. The control unit 12 changes the settings related to communication of the relay device based on the information acquired by the acquisition unit 11, for example.

[0018] (Embodiment 2) Next, the configuration of the information processing system 1 according to the embodiment will be described with reference to FIG. <System configuration> Fig. 2 is a diagram showing an example of the configuration of an information processing system 1 according to an embodiment. In Fig. 2, the information processing system 1 includes an information processing device 10. The information processing system 1 also includes a relay device 20A, a relay device 20B, a relay device 20C, a relay device 20D, and a relay device 20E (hereinafter, when there is no need to distinguish between them, they will be simply referred to as "relay devices 20"). The number of information processing devices 10 and relay devices 20 is not limited to the example in Fig. 2.

[0019] The information processing device 10 and the relay device 20 are connected to each other so as to be able to communicate with each other, for example, by a LAN (Local Area Network) cable or the like. In the example of FIG. 2, the relay device 20A is connected to the network N1, the relay device 20B, and the relay device 20E. The relay device 20C is connected to the relay device 20B and the relay device 20D. The relay device 20D is connected to the relay device 20E and the network N2. The network N1 may be an external network such as the Internet, an external network, or a network of another company. In this case, the network N1 may be a local 5G core network.

[0020] The network N2 may be, for example, a network (internal network) of a carrier that operates the relay device 20. In this case, the network N2 may be a core network of a fifth-generation mobile communication system (5G). Note that one or more communication devices may be connected to each relay device 20.

[0021] The information processing device 10 manages the operation of the relay device 20. For example, when the information processing device 10 acquires information indicating that a relay device 20 has a defect, the information processing device 10 changes the settings of at least one of the relay device 20 and another relay device 20 so as to reduce the impact of the defect.

[0022] The relay device 20 relays communications between the network N1 etc. and the network N2 etc. The relay device 20 may have, for example, a function of a Layer 3 switch that includes a router function and a Layer 2 switch function.

[0023] <Hardware configuration> 3 is a diagram illustrating an example of the hardware configuration of the information processing device 10 and the relay device 20 according to the embodiment. The following description will be given using the information processing device 10 as an example. Note that the hardware configuration of the relay device 20 may be the same as the hardware configuration of the information processing device 10 in FIG.

[0024] 3, the information processing device 10 (computer 100) includes a processor 101, a memory 102, and a communication interface 103. These components may be connected via a bus or the like. The memory 102 stores at least a portion of a program 104. The communication interface 103 includes an interface required for communication with other network elements.

[0025] When the program 104 is executed by the processor 101, memory 102, and other components in cooperation with each other, the computer 100 performs at least some of the processing of the embodiments of the present disclosure. The memory 102 may be of any type suitable for a local technology network. The memory 102 may be, by way of non-limiting example, a non-transitory computer-readable storage medium. The memory 102 may also be implemented using any suitable data storage technology, such as semiconductor-based memory devices, magnetic memory devices and systems, optical memory devices and systems, fixed memory, and removable memory. While only one memory 102 is shown in the computer 100, several physically distinct memory modules may be present in the computer 100. The processor 101 may be of any type. The processor 101 may include one or more of a general-purpose computer, a special-purpose computer, a microprocessor, a digital signal processor (DSP), and, by way of non-limiting example, a processor based on a multi-core processor architecture. The computer 100 may have multiple processors, such as application-specific integrated circuit chips time-slaved to a clock that synchronizes the main processor.

[0026] Embodiments of the present disclosure may be implemented in hardware or special purpose circuits, software, logic, or any combination thereof. Some aspects may be implemented in hardware, while other aspects may be implemented in firmware or software that may be executed by a controller, microprocessor, or other computing device.

[0027] The present disclosure also provides at least one computer program product tangibly stored on a non-transitory computer-readable storage medium. The computer program product includes computer-executable instructions, such as instructions included in program modules, that execute on a target real or virtual processor or device to perform the processes or methods of the present disclosure. Program modules include routines, programs, libraries, objects, classes, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The functionality of the program modules may be combined or divided among program modules as desired in various embodiments. The machine-executable instructions of the program modules may be executed in local or distributed devices. In a distributed device, the program modules may be located in both local and remote storage media.

[0028] The program code for executing the methods of the present disclosure may be written in any combination of one or more programming languages. The program code may be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus. When the program code is executed by the processor or controller, the functions / acts in the flowcharts and / or implementing block diagrams are performed. The program code may be executed entirely on the machine, partly on the machine, as a standalone software package, partly on the machine and partly on a remote machine, or entirely on a remote machine or server.

[0029] The program can be stored and supplied to a computer using various types of non-transitory computer-readable media. Non-transitory computer-readable media include various types of tangible recording media. Examples of non-transitory computer-readable media include magnetic recording media, magneto-optical recording media, optical disk media, and semiconductor memory. Magnetic recording media include, for example, flexible disks, magnetic tapes, and hard disk drives. Magneto-optical recording media include, for example, magneto-optical disks. Optical disk media include, for example, Blu-ray discs, CD (Compact Disc)-ROMs (Read Only Memory), CD-Rs (Recordable), and CD-RWs (Rewritable). Semiconductor memory includes, for example, mask ROMs, PROMs (Programmable ROMs), EPROMs (Erasable PROMs), flash ROMs, and RAMs (Random Access Memory). The program may also be supplied to a computer by various types of temporary computer-readable media. Examples of temporary computer-readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire or an optical fiber, or via a wireless communication path.

[0030] <Processing> An example of processing of the information processing system 1 according to the embodiment will be described with reference to Fig. 4 to Fig. 6. Fig. 4 is a sequence diagram showing an example of processing of the information processing system 1 according to the embodiment. Fig. 5 is a diagram showing an example of data recorded in a relay device DB (Data Base) 501 according to the embodiment. Fig. 6 is a diagram showing an example of data recorded in a control content DB 601 according to the embodiment.

[0031] In step S101, the acquisition unit 11 of the information processing device 10 acquires defect information of the relay device 20. The defect information is information indicating that the relay device 20 has a defect. The defect information may include, for example, the model number (type) of the defective relay device 20, the manufacturer (manufacturer) of the relay device, the function name (protocol name), the name of the software or the model number of the hardware component, the version of the software (firmware), the manufacturer of the software or the hardware component of the relay device 20, and the like.

[0032] Here, the information processing device 10 may obtain the defect information of the relay device 20 from, for example, a predetermined website of the manufacturer of the relay device 20. Alternatively, the information processing device 10 may obtain the defect information of the relay device 20 by, for example, an email sent from the manufacturer of the relay device 20. In this case, the operator of the information processing device 10 may register an email address for receiving the defect information with the manufacturer of the relay device 20 in advance. Alternatively, the information processing device 10 may obtain the defect information of the relay device 20 from, for example, a vulnerability information sharing site operated by a predetermined organization.

[0033] The information processing device 10 may acquire text data indicating the details of defects in the relay device 20 from the manufacturer of the relay device 20. The information processing device 10 may then acquire defect information by performing morphological analysis on the acquired text and extracting predetermined keywords from the text data. Alternatively, the information processing device 10 may acquire defect information from the text data by using, for example, artificial intelligence (AI) using deep learning or the like.

[0034] In addition, the information processing device 10 may determine that the software contains a defect if the generation difference between the latest version of specific software provided by the business that manufactured the relay device 20 and the version of the software currently being used on the relay device 20 is greater than or equal to a threshold value.

[0035] In addition, the information processing device 10 may acquire a log output by specific software of the relay device 20, and if the ratio of warnings, errors, etc. contained in the acquired log is above a threshold, determine that the software contains a defect.

[0036] Next, the control unit 12 of the information processing device 10 refers to the relay device DB 501 to identify the relay device 20 having a defect and the defective function (step S102). In the example of Fig. 5, the relay device DB 501 stores the model number of the relay device and information on the manufacturer of the relay device in association with the relay device ID. The relay device ID is identification information of the relay device 20. The relay device ID may be, for example, the communication address of the relay device 20 (e.g., IP address, MAC address), etc.

[0037] Furthermore, in the relay device DB 501, communication settings, software names or hardware component model numbers, software (firmware) versions, names of manufacturers of the software or hardware components, and whether or not the software is activated are recorded in association with relay device IDs and function names. The software name is the name of the software that realizes the function associated with the function name. The software version is the version of the software that realizes the function associated with the function name. Whether or not the function is activated is information indicating whether or not the function associated with the function name is activated in the relay device 20.

[0038] The communication settings are information about settings related to communication in the function associated with the function name. The communication settings of a router may include, for example, information about a routing table. The routing table may include, for example, information about the destination network, next hop (forwarding destination), output interface (output port), etc.

[0039] The data recorded in the relay device DB 501 may be registered in advance by an operation of an operator of the information processing device 10 or the like. Furthermore, at least a part of the data recorded in the relay device DB 501 may be acquired by the information processing device 10 from the relay device 20 and recorded. Note that the relay device DB 501 may be stored in a storage device inside the information processing device 10 or in a storage device external to the information processing device 10.

[0040] The information processing device 10 extracts, from among the relay devices 20 recorded in the relay device DB 501, relay devices 20 whose model number, function name or software name, and software version match those included in the defect information acquired in step S101. Then, the information processing device 10 may identify a relay device 20 having a defective function of a relay device 20 for which the activation status of a function associated with the matching function name or software name is "activated."

[0041] Next, the control unit 12 of the information processing device 10 refers to the control content DB 601 based on the defect information and determines control content for setting one or more relay devices 20 so as to reduce the use of the defective function in the defective relay device 20 (step S103). In the example of FIG. 6, the control content DB 601 registers control content in association with function names. Note that the data recorded in the control content DB 601 may be registered in advance by an operation by an operator of the information processing device 10 or the like. Note that the control content DB 601 may be stored in a storage device internal to the information processing device 10 or in a storage device external to the information processing device 10.

[0042] The control content may include, for example, for a defective function, activating the function in another relay device 20 (for example, an adjacent relay device 20), restricting (degenerating, stopping) at least a part of the function, etc. Furthermore, the control content may include, for example, encapsulating packets using the function in another relay device 20, changing the path of communication using the function, etc.

[0043] (Example of activating a function on another relay device 20) When the firewall function of the first relay device 20 is defective, the information processing device 10 may activate the firewall function of a second relay device 20 that is different from the first relay device 20. This allows the second relay device 20 to execute the firewall function, for example, instead of the defective first relay device 20 or in addition to the defective first relay device 20.

[0044] 6, it is specified that if there is a defect in the firewall function of a certain relay device 20, the firewall function is activated in relay devices 20 adjacent to the defective relay device 20, and the firewall function is stopped in the defective relay device 20. It is also specified that if there is a defect in the Layer 2 switch function of a certain relay device 20, that function is stopped in that relay device 20. In this case, in the example of FIG. 2, for example, if there is a defect in the firewall function of relay device 20A, the firewall function is activated in relay devices 20B and 20D adjacent to relay device 20A, and the firewall function in relay device 20A is stopped.

[0045] (Example of restricting (degrading, stopping) at least part of the functionality) If the Layer 3 switch function of a certain relay device 20 is defective, the information processing device 10 may disable the Layer 3 switch function of the relay device 20 and execute the Layer 2 switch function of the relay device 20. This can reduce the impact on the network caused by disabling the defective function, for example.

[0046] 6, it is specified that if there is a defect in the router function of a certain relay device 20, the router function of that relay device 20 is stopped and a Layer 2 switch is activated (degenerating from a Layer 3 switch to a Layer 2 switch).It is also specified that a Layer 3 routing table that does not include the defective relay device 20 is set in another relay device 20 that is a router.

[0047] (Example of changing the communication path using the function) When a relay function for packets of a specific protocol in a certain relay device 20 is defective, the information processing device 10 may change the settings of other relay devices 20 so that packets of the specific protocol are transmitted via a route that does not pass through the defective relay device 20. This can reduce the use of the function of the defective relay device 20, for example.

[0048] 6, if a certain relay device 20 has a defect in the VLAN function, the function is stopped at the defective relay device 20 as a priority 1, and a routing table is set in the other relay devices 20 such that VLAN packets do not pass through the defective relay device 20. In this case, in the example of FIG. 2, for example, if the VLAN function of relay device 20B is defective, the VLAN function of relay device 20B is stopped. Also, the routing tables of relay devices 20A and 20D are changed so that VLAN packets are not forwarded to relay device 20B.

[0049] Furthermore, if a relay device 20 has a defect in the SyncE (Synchronous Ethernet) function, the clock distribution path is changed so that the relay device 20 is downstream of the relay device 20.

[0050] (Example of encapsulating a packet using a function in another relay device 20) When a relay device 20 has a defect in its relay function for packets of a specific protocol, the information processing device 10 may change the settings of other relay devices 20 so that the packets of the specific protocol are encapsulated and transmitted to the relay device 20. This can reduce the use of the functions of the defective relay device 20, for example.

[0051] In the example of Fig. 6, if a certain relay device 20 has a defect in the VLAN function and it is not possible to disable the function in that relay device 20, it is specified that VLAN packets be encapsulated between adjacent relay devices 20 as a priority of 2. Note that when encapsulating VLAN packets between adjacent relay devices 20, for example, in the example of Fig. 2, if there is a defect in the VLAN function in relay device 20B, VLAN packets are encapsulated between relay devices 20A and 20C adjacent to relay device 20B. Note that encapsulation means, for example, embedding the entire packet in a payload of a communication protocol different from that of the packet and communicating it.

[0052] Next, the control unit 12 of the information processing device 10 determines whether the determined control content is executable (step S104). Here, the information processing device 10 may determine that it is impossible to stop the router function when, for example, a firewall function or a gateway (protocol converter) function is activated in the relay device 20 having a defect.

[0053] Furthermore, for example, if stopping a certain function in a defective relay device 20 would cause the network functions to be disrupted, the information processing device 10 may determine that it is impossible to stop the function. In this case, for example, if stopping a function for forwarding packets of a predetermined protocol (e.g., a VLAN function) would cause a path that does not pass through the relay device 20 to no longer exist, the information processing device 10 may determine that the network functions will not be disrupted.

[0054] Furthermore, for example, if the adjacent relay device 20 does not have a specific function (for example, a firewall function, a VLAN function, or the like), the information processing device 10 may determine that it is impossible to activate the function in the adjacent relay device 20.

[0055] If it is determined that the determined control content is not executable, the information processing device 10 may transmit a notification indicating that the determined control content is not executable to the terminal of the administrator of the information processing system 1. Note that the information processing device 10 may include, for example, the defect information acquired in step S101 and information indicating the control content determined in step S103 in the notification.

[0056] If it is determined that the determined control content is executable, the following process is executed. The information processing device 10 may send a notification indicating that the determined control content is executable to the terminal of the administrator of the information processing system 1. The information processing device 10 may include, for example, the defect information acquired in step S101 and information indicating the control content determined in step S103 in the notification. Then, if an approval operation is not performed by the administrator of the information processing system 1, the information processing device 10 may not execute the following process. On the other hand, if an approval operation is performed, the information processing device 10 may execute the following process.

[0057] Next, the control unit 12 of the information processing device 10 transmits a command to change the settings according to the determined control content to the defective relay device 20 and at least one of the other relay devices 20 (step S105). Here, the command may include, for example, data of communication settings such as a routing table after the change.

[0058] Next, the relay device 20 that has received the command changes the communication settings in accordance with the received command (step S106). As a result, for example, if a defect such as a bug or a vulnerability in information security is found in the software of the relay device 20, the impact of the defect can be reduced even until the software is updated. Therefore, the communication network can be operated appropriately.

[0059] When defective software is updated in a relay device 20, the information processing device 10 may restore the communication settings of one or more relay devices 20 whose settings were changed in step S105. This allows, for example, the previous settings to be restored when the defect is fixed. In this case, the information processing device 10 may record the original communication settings of each relay device 20 as a history when changing the settings in step S105. Then, when a predetermined operation is performed by an administrator of the relay device 20, the relay device 20 may download and install software with the fixed defect from the website of the manufacturer of the relay device 20. Then, when a predetermined operation is performed by an operator or a predetermined notification is received from the relay device 20, the information processing device 10 may restore the communication settings of each relay device 20 based on the recorded history.

[0060] <Modification> The information processing device 10 may be realized by cloud computing configured by one or more computers, for example. The information processing device 10 and the relay device 20 may be configured as an integrated server (device). Such information processing devices 10 are also included in the examples of the "information processing device" of the present disclosure.

[0061] The present invention is not limited to the above-described embodiment, and can be modified as appropriate within the scope of the invention.

[0062] A part or all of the above-described embodiments can be described as, but not limited to, the following supplementary notes. (Appendix 1) an acquisition means for acquiring information indicating a defect in the first relay device; a control unit that changes settings related to communication between at least one of the first relay device and a second relay device that communicates with the first relay device based on the information acquired by the acquisition unit; An information processing device having the above. (Appendix 2) The control means determining a setting for communication between at least one of the first relay device and the second relay device such that use of a faulty function in the first relay device is reduced; 10. The information processing device according to claim 1. (Appendix 3) The control means When the software having a defect in the first relay device is updated, the setting related to communication between at least one of the first relay device and the second relay device is restored to its original state. 3. The information processing device according to claim 1 or 2. (Appendix 4) The control means Identifying a defective function in the first relay device from a sentence indicating the content of the defect in the first relay device. 4. The information processing device according to claim 1. (Appendix 5) The control means If the firewall function of the first relay device is defective, activate the firewall function of the second relay device. 5. The information processing device according to any one of claims 1 to 4. (Appendix 6) The control means If the router function of the first relay device is defective, the router function of the first relay device is stopped and the Layer 2 switch function of the first relay device is executed. 6. An information processing device according to any one of appendices 1 to 5. (Appendix 7) The control means When a defect exists in the relay function of the first relay device for packets of a specific protocol, the second relay device is changed in setting so as to encapsulate the packets of the specific protocol and transmit them to the first relay device. 7. An information processing device according to any one of claims 1 to 6. (Appendix 8) The control means When there is a defect in the relay function of the first relay device for packets of a specific protocol, changing the setting of the second relay device so that the packets of the specific protocol are transmitted via a route that does not go through the first relay device. 8. An information processing device according to any one of appendices 1 to 7. (Appendix 9) acquiring information indicating a defect in the first relay device; changing settings related to communication between at least one of the first relay device and a second relay device that communicates with the first relay device based on the acquired information; Information processing methods. (Appendix 10) In the information processing device, A process of acquiring information indicating a defect in the first relay device; a process of changing settings related to communication between at least one of the first relay device and a second relay device that communicates with the first relay device based on the acquired information; A non-transitory computer-readable medium storing a program for executing the program. (Appendix 11) An information processing system including an information processing device, a first relay device, and a second relay device, The information processing device includes: an acquisition means for acquiring information indicating a defect in the first relay device; a control unit that changes settings related to communication between at least one of the first relay device and the second relay device that communicates with the first relay device based on the information acquired by the acquisition unit; and An information processing system having: (Appendix 12) The control means determining a setting for communication between at least one of the first relay device and the second relay device such that use of a faulty function in the first relay device is reduced; 12. The information processing system of claim 11. [Explanation of symbols]

[0063] 1. Information Processing Systems 10. Information processing equipment 11 Acquisition Department 12 Control Unit 20 Relay device

Claims

1. a control means for activating a firewall function of a second relay device adjacent to the first relay device when the firewall function of the first relay device has a defect in terms of information security; An information processing device having the above.

2. The method has a means for acquiring information indicating the information security defect by inputting text data indicating the content of the defect obtained from the business that manufactured the first relay device into AI (Artificial Intelligence). The information processing device according to claim 1 .

3. A relay device, a control means for activating a firewall function of another relay device that communicates with the relay device adjacent to the relay device when the firewall function of the other relay device has a defect in terms of information security; A relay device having the same.

4. The method has a means for acquiring information indicating the information security defect by inputting text data indicating the content of the defect obtained from the manufacturer of the other relay device into AI (Artificial Intelligence). The relay device according to claim 3 .

5. The information processing device If there is a defect in information security in the firewall function of the first relay device, activating the firewall function of a second relay device adjacent to the first relay device. Control method.

6. The relay device If there is a defect in information security in the firewall function of another relay device adjacent to the relay device, the firewall function of the relay device that communicates with the other relay device is activated. Control method.

7. If there is a defect in information security in the firewall function of the first relay device, activating the firewall function of a second relay device adjacent to the first relay device. A program that causes a computer to perform a process.

8. The relay device computer If there is a defect in information security in the firewall function of another relay device adjacent to the relay device, the firewall function of the relay device that communicates with the other relay device is activated. A program that executes a process.

Images