Communication Device Subnetwork Filtering for User-Friendly Firewall Setup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication devices lack user-friendly mechanisms for distinguishing and managing communication with external devices from different subnetworks within a local area network, leading to inconvenience in configuring firewall settings.
Innovation Solution
A communication device equipped with a controller and memory that displays selection screens for searching and specifying first-type and second-type external devices from different subnetworks, allowing users to distinguish and manage communication permissions effectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the home gateway detects a packet with an unallowed IP address and inquires the user, then communication security is improved, but user convenience deteriorates due to lack of device identification and subnetwork distinction
Solution Approach 1:
The communication device acts as an intermediary between the home gateway and external devices. It receives search requests from the home gateway, identifies external devices using its identification unit, and provides structured information including subnetwork classification. This intermediary role enables the home gateway to make informed firewall decisions without directly confronting users with unidentifiable IP addresses.
Solution Approach 2:
The system segments external devices into different types based on subnetwork location: first-type external devices in the same subnetwork and second-type external devices in different subnetworks. This segmentation is displayed through distinct search result screens, allowing users to understand and manage communication permissions based on network topology rather than raw IP addresses.
2Reliability
If the home gateway allows only packets with pre-allowed IP addresses, then communication security is improved, but ease of operation deteriorates due to inability to distinguish device types and subnetworks
Solution Approach 1:
The system applies different presentation qualities to different device types. First-type external devices (same subnetwork) are displayed on a first search result screen with specific formatting, while second-type external devices (different subnetwork) are displayed on a second search result screen with distinct formatting. This local quality differentiation helps users quickly understand device origins and make appropriate firewall decisions.
Solution Approach 2:
The communication device serves as a mediator that translates raw IP address information into meaningful device identification information including device names and subnetwork classification. This translation layer enables the firewall configuration interface to present user-friendly device lists rather than obscure IP addresses, improving both security management and operational ease.
3Ease of operation
If the communication device specifies and displays external devices from different subnetworks, then user convenience is improved, but device complexity increases due to subnetwork management requirements
Solution Approach 1:
The communication device automatically performs subnetwork identification and device classification without requiring manual user input. The identification unit autonomously determines whether external devices belong to the same or different subnetworks based on IP address analysis, and the display unit automatically presents appropriate search result screens. This self-service approach masks the underlying complexity from users while maintaining accurate subnetwork management.
Solution Approach 2:
The system performs preliminary identification and classification of external devices before presenting them to users. The communication device pre-processes device information, determines subnetwork membership, and organizes devices into appropriate categories (first-type or second-type) before display. This preliminary action eliminates the need for users to manually analyze IP addresses or understand subnetwork configurations, improving convenience without exposing complexity.
Data Source
AI summary
A communication device, may include: a controller; and a memory, in which the controller is configured to: in a case where it is selected by a user that one or more first-type external devices are to be searched for, specify the one or more first-type external devices; display a first search result screen indicating the one or more first-type external devices on the display; in a case where it is selected by the user that the one or more second-type external devices are to be searched for, specify the one or more second-type external devices; display a second search result screen indicating the one or more second-type external devices on the display; and in a case where a specific external device is selected on a first search result screen or a second search result screen, perform a filter process related to whether to allow communication with the specific external device.