JP2001103086A - Ip address monitoring system, ip address monitoring method and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To easily detect and specify the device when connecting the device to a network, when an unauthorized IP address is used. SOLUTION: This system is provided with a means for holding and managing the information of the MAC addresses of the entire devices for permitting network connection and the IP address for permitting use, etc., a means for gathering the information of the IP address in use in the network and the used device or the like and a means for comparing them with each other and inspecting them.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IP address management system, an IP address monitoring method, and a recording medium constructed on a network.

[0002]

2. Description of the Related Art An address is an IP address which is identification information of a device connected to a network which is used in a network protocol TCP / IP used in the Internet, or a fixed address which is incorporated in each network interface of the device. MAC of physical address assigned to
There is an address. In the data link layer and the physical layer, the IP address is converted into a MAC address and communication is executed. The upper part of the IP address is divided into a network part and the lower part is divided into a host part, and the corresponding bit position is set to 1 by a mask in the range indicating the upper network or sub-network. Therefore, the network address or the subnetwork address can be easily known from the IP address.

[0003] Further, since the MAC address is built into the device, it cannot be changed, but the IP address is given to identify the device and can be changed. For this reason, an IP address is erroneously double-registered to cause a failure in a network. To avoid this, methods and systems for managing the IP address have been devised.

An example of this type of conventional system for managing IP addresses is described in Japanese Patent Application Laid-Open No. H10-75244. This conventional system is a system for automatically distributing network information including IP address information to a terminal device on a network requiring an IP address, and is used by an existing terminal device on the network before distributing the IP address. A duplicate address investigating means for automatically examining the assigned IP address, and a busy address storing means for storing the examination result of the duplicate address examining means, so as to avoid redundant distribution of addresses. It is.

That is, when a terminal device requiring an address is connected to a network, the distribution of duplicate addresses can be performed by automatically confirming that the address to be distributed to the terminal device is not used on the network. It avoids and distributes unused addresses.

[0006] Duplicate use of an IP address occurs when each terminal device does not set an IP address as intended by the administrator of the IP address. That is, fixed IP addresses are allocated to individual terminal devices in advance, and other IP addresses must not be used, and terminal devices that are not allocated must not use those IP addresses. In addition, DHCP (Dynamic host)
configuration protocol: a protocol defined in RFC2131 which is a public document on standardization, a protocol for centrally managing setting information such as an IP address and providing setting information of each device in order to automate setting of client devices in a large-scale network). Is dynamically assigned an IP address, the IP address that the DHCP server has reserved for dynamic
Must not be used without assignment from HP server.
That is, as a pattern in which an IP address is used repeatedly, there are a case where a fixedly assigned IP address is used and a case where an IP address reserved for DHCP is used. In these cases, if an IP address that should not be used incorrectly is actually used,
Immediately notices a duplicate use due to a communication error. However, if the IP address is scheduled to be used or the power is turned off, no communication error occurs, and duplicate use occurs. It cannot be detected. That is, a potential duplicate use.

In the case of a fixedly assigned IP address and the case of an IP address distributed by a DHCP server,
If the user intentionally or unconsciously connects to the network with an arbitrary IP address, communication can be performed by connecting to the network. If the IP address is fixedly assigned to the terminal device, it cannot be detected that the IP address has been used improperly until the terminal device to which the IP address is set is activated. Also,
In the case of using an IP address distributed by dynamic allocation by DHCP, it is difficult to detect unauthorized use because duplicate use does not occur.

[0008]

A first problem is that it cannot detect a potential duplicate use of an IP address on a network. This is only to check if duplicate IP addresses are distributed,
Because each terminal device is not identified and its IP address is not distributed, it cannot be determined whether the terminal device actually using the IP address is the terminal device that should use the IP address. to cause.

[0009] A second problem is that unauthorized use of an IP address cannot be detected. This is
This occurs because the terminal device using the P address has not confirmed whether or not the terminal device is permitted to be connected to the network. If it can be determined whether or not the terminal device is to be connected to the network, unauthorized use can be detected at the stage of connecting to the network, even if a fixed IP address is used. In addition, even if an attempt is made to obtain an IP address by automatic assignment of an IP address by DHCP, it is determined whether or not the terminal device is to be connected, and if the terminal device is used improperly, measures such as rejection of connection or restriction of communication are taken. Can be.

[0010] An object of the present invention is to solve the above-mentioned problems, and furthermore, the IP address manager makes each device operate as an I
It is an object of the present invention to provide a system or method that enables efficient monitoring of whether or not a P address is being used and promptly responds when an unauthorized use is detected.

[0011]

A first IP address monitoring system according to the present invention has a host device connected to a network and a plurality of terminal devices, wherein the first host device is connected to the terminal device. A first file for registering and storing information about the network, such as correspondence information between a MAC address and an IP address set for each network interface unit connected to the network, and an IP address operating for each network interface unit A second file for storing correspondence information between the network interface and the MAC address, and collecting information on the network of each network interface unit by searching during operation of the network, and storing the correspondence information between the IP address and the MAC address in a second file. Registered in the file and unregistered from the collected information MAC address collecting means for registering information in the first file, means for operating the information of the first file by an administrator, and correspondence between the IP address and the MAC address registered in the first file. I
IP address monitoring means for monitoring whether the P address is operated. However, the number of terminal devices may be one, but it is not always advisable to apply the IP address monitoring system of the present invention to such a very small system.

According to a second IP address monitoring system of the present invention, in addition to the configuration of the first IP address monitoring system of the present invention, an IP address registered in the first file by the IP address monitoring means is provided. And a warning notifying unit for notifying the administrator of a warning when it is detected that the IP address is not operated according to the correspondence between the IP address and the MAC address.

A third IP address monitoring system according to the present invention is characterized in that the first file of the configuration of the first or second IP address monitoring system according to the present invention includes a terminal name, MAC It has a terminal information file that registers and stores information such as addresses and IP addresses, and a network plan file that registers and stores information such as addresses, names and masks of sub-networks, and setting information regarding DHCP.

A fourth IP address monitoring system according to the present invention includes a user name of the terminal device in the first file of the configuration of the first, second, or third IP address monitoring system according to the present invention. A user file for registering and storing information such as contact information, terminal names, and the like, and a user management means for managing registration information of the user file.

A fifth IP address monitoring system according to the present invention provides a method of issuing an IP address by DHCP from a terminal device in the MAC address collecting means of the first, second, or third IP address monitoring system of the present invention. Upon receiving the request, it is determined whether or not the terminal device is set in the file 1 as a terminal device permitted to connect to the network, and if the terminal device is set as permitted, an IP address is paid to the terminal device. Has a means to put out.

[0016] A sixth IP address monitoring system according to the present invention includes a first host device, a plurality of terminal devices, and a second host device connected to a network, and the first host device further comprises: A first file for registering and storing information about the network such as correspondence information between a MAC address and an IP address set for each network interface of a portion of the terminal device connected to the network, and operating for each network interface A second file storing correspondence information between the IP address and the MAC address in the network, and collecting information on the network of each of the network interface units by searching during operation of the network, and correspondence information between the IP address and the MAC address Is registered in the second file,
MAC address collection means for registering unregistered information from the collected information in the first file;
Means for the administrator to operate the information of the file of the
IP address monitoring means for monitoring whether an IP address is operated according to the correspondence between the IP address and the MAC address registered in the file, and wherein the second host device is provided for each network interface unit of the terminal device. A third file storing correspondence information between the IP address and the MAC address of the network interface, and collecting information on the network of each network interface unit by searching a predetermined range in the network during operation;
While registering the correspondence information between the IP address and the MAC address in the third file and the second file,
Distributed MAC address collecting means for registering unregistered information from the collected information in the first file. However, the terminal device may be one,
It is not always advisable to apply the IP address monitoring system of the present invention to such a very small system.

[0017] A seventh IP address monitoring system according to the present invention includes a first host device, a plurality of terminal devices, and a second host device connected to a network. A first file for registering and storing information about the network such as correspondence information between a MAC address and an IP address set for each network interface of a portion of the terminal device connected to the network, and operating for each network interface A second file storing correspondence information between the IP address and the MAC address in the network, and collecting information on the network of each of the network interface units by searching during operation of the network, and correspondence information between the IP address and the MAC address Is registered in the second file,
MAC address collection means for registering unregistered information from the collected information in the first file;
Means for the administrator to operate the information of the file of the
IP address monitoring means for monitoring whether the IP address is operated according to the correspondence between the IP address and the MAC address registered in the file, and wherein the second host device has a second There is means for an administrator to operate the information of one file. However, the terminal device is 1
However, it is not always advisable to apply the IP address monitoring system of the present invention to such a very small system.

A first IP address monitoring method according to the present invention comprises:
A procedure for registering information about the network, such as correspondence information between a MAC address and an IP address, set for each network interface unit of a portion of the terminal device connected to the network in a first file, and operating the network during operation To collect information on the network of each of the network interface units, register the correspondence information of the collected IP addresses and MAC addresses in a second file, and register the information in the first file. A step of comparing the correspondence between the IP address and the MAC address and the correspondence between the IP address and the MAC address registered in the second file to monitor the usage status of the IP address.

A second IP address monitoring method according to the present invention comprises:
In addition to the procedure of the first IP address monitoring method of the present invention,
A procedure for automatically notifying the administrator of a warning when the results of the comparison do not match.

[0020] A third IP address monitoring method according to the present invention comprises:
A procedure for registering network information such as correspondence information between a MAC address and an IP address in a first file for each network interface unit of a portion connected to a network of a terminal device in advance, A step of determining whether or not the terminal device is registered in the first file as a terminal device permitted to connect to a network when receiving an address payout request; and Paying out an IP address to the terminal device.

A fourth IP address monitoring method according to the present invention comprises:
Registering in advance a network-related information such as correspondence information between a MAC address and an IP address in a first file in a first host device for each network interface unit of a portion of the terminal device connected to the network; The search range of the network is divided in advance by a first host device and a second host device, and the second host device searches and collects the divided network during operation. IP for each interface
A step of registering correspondence information between the address and the MAC address in a second file in the first host device and a third file on the second host device; Registering the correspondence information between the IP address and the MAC address of each of the network interfaces collected by searching during the operation in the second file in a second file in the first host device; And comparing the correspondence between the IP address and the MAC address registered in the second file and the correspondence between the IP address and the MAC address registered in the second file.

The first recording medium of the present invention stores information on a network such as correspondence information between a MAC address and an IP address set in advance for each network interface of a portion connected to a network of a terminal device in a first file. A procedure for searching for the network during operation and collecting information on the network of each network interface unit, and associating the collected IP address and MAC address with the second information.
Using the IP address by comparing the correspondence between the IP address and the MAC address registered in the first file and the correspondence between the IP address and the MAC address registered in the second file. At least one of a procedure for monitoring a situation and a procedure for automatically notifying an administrator of a warning when the result of the comparison does not match is recorded.

According to the second recording medium of the present invention, network-related information such as correspondence information between a MAC address and an IP address is registered in a first file for each network interface of a portion of the terminal device connected to the network. Determining whether or not the terminal device is registered in the first file as a terminal device permitted to connect to a network when receiving a request for paying out an IP address by DHCP from the terminal device. And a procedure for paying out an IP address to the terminal device when the determination result is permitted is recorded.

According to the third recording medium of the present invention, information on a network such as correspondence information between a MAC address and an IP address is stored in advance in a first host device for each network interface of a portion connected to a network of a terminal device. And the procedure of registering the search range of the network in advance with a first host device and a second host device, and setting the second host device in the divided range. The correspondence information between the IP address and the MAC address of each of the network interface units, which is searched and collected during operation of the inside, is stored in a second file in the first host device and in a third file on the second host device. And the procedure of registering the first host device,
The IP address and MA for each network interface unit, which were searched and collected during operation in the divided area.
A step of registering the correspondence information of the C address in the second file in the first host device, the correspondence of the IP address and the MAC address registered in the first file, and the registration of the correspondence information in the second file. And a procedure for comparing the correspondence between the IP address and the MAC address.

[0025]

Next, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 shows a first embodiment of the invention.
It is a block diagram showing an embodiment. Host device 10
Is connected to the sub-network X1 through the network interface unit 122, and is connected to the modem 21 and the buzzer device 22 through the general-purpose interface unit 121. The mail server 23 is located in the subnetwork X1.
And the terminal device 24 and the router 25 are connected. Usually, a plurality of terminal devices are connected, but only one is shown here. The terminal device 24 is connected to the subnetwork X1 by the network interface unit 241 and the router 25 is connected to the subnetwork X1 by the network interface unit 251. The router 25 is connected to another network or sub-network by the network interface unit 252. Each network interface unit is a MAC which is a physical address such as a unique Ethernet (registered trademark).
Addresses are built into the hardware and IP addresses are assigned to access the network using the TCP / IP protocol commonly used on the Internet.

The modem 21, the buzzer device 22, and the mail server 23 are provided as means for notifying an IP address manager of a warning. The buzzer device 22 is used when a buzzer sounds to notify the user. I in
The mail server 23 is used when notifying the IP address manager by e-mail. It is not necessary to provide all of these notification means, and only necessary ones need to be provided. Further, the function of the mail server 23 can be realized by mounting the mail server function on the host device 10, but it is better to prepare it separately from the viewpoint of reliability.

The host device 10 includes the general-purpose interface unit 121 and the network interface unit 12 described above.
2 other than a CP that executes a program and processes data
U123 and memory 124 for storing programs and data
Having. The host device 10 includes a MAC address collection program 101, a terminal management program 102, and a network management program 1 as programs that are stored in the memory 124 and executed and processed by the CPU 123.
03, a user management program 104, a usage status monitoring program 105, and a warning notification program 106. The files accessed by these programs include a MAC address file 111, a terminal information file 112, a network Planning file 113
And a user file 114.

The recording medium 20 is a medium for recording the procedure recorded on the recording medium of claim 12 or 13. The host device 10 selects and installs only necessary ones of the MAC address collection program 101, the terminal management program 102, the network management program 103, the user management program 104, the usage monitoring program 105, or the warning notification program 106. , On the host device 10. In FIG. 1, all the above programs are installed.

Although the recording medium is not shown in FIG. 11 showing the second embodiment of the present invention, in the system of FIG.
The procedure except for the procedure on the second host device is installed and executed.

Next, the general operation of each program will be described, and the contents of each file will be described with reference to FIGS. 2, 3, 4, and 5. MAC address collection program 10
1 is for a device (for example, a router or the like) that implements SNMP by using SNMP (a protocol used in a system for executing management of devices such as routers constituting the network via the network) for the network. , And periodically collects information such as the MAC address of each device connected to the network in the system and the IP address of the device, and collects the collected results into a MAC address file 111, a terminal information file 112, a network plan, and the like. The information is stored in the file 113 or the information is updated.

As shown in FIG. 2, the MAC address file 111 registers the above-mentioned collection result as a pair of a MAC address and an IP address by the MAC address collection program 101.

The terminal management program 102 is a program for managing information relating to a terminal device using a MAC address.
There are procedures for registering, updating, and deleting 12 pieces of information.

As shown in FIG. 3, the terminal information file 112 stores the MAC address, IP address,
The information such as the presence or absence of the implementation of the SNMP protocol and the terminal name are registered, and the MAC address collection program 10
When a new MAC address or the like is detected according to 1, information excluding the terminal name is registered.

The network management program 103 uses I
The P address manager has a procedure for registering a network address, a subnetwork address, and a subnet mask to permit use and create a list of IP addresses.
Further, the MAC address collection program 101 detects the unauthorized network / subnetwork /
There is a procedure for authenticating whether the subnet mask or the IP address is permitted or not permitted.

The network plan file 113 is shown in FIG.
, A record 1131 about the network,
It has a record 1132 relating to the sub-network, a record 1133 relating to the IP address, and information 1134 relating to the DHCP group. First, the IP address manager registers using the network management program 103. Then, the MAC address collection program 101
When the unregistered information is detected and registered by the IP address manager, the IP address manager performs a registration operation as to whether or not to permit the registration contents. Permission is given to new networks and sub-networks by registering their names. For the IP address, if a fixed IP address is used for the terminal device, the terminal name to be used is permitted, and if the IP address provided from the DHCP server is used, the registration is performed by registering the DHCP group name. give. In the DHCP group record 1134,
A list of terminal names permitted to use and available IP addresses is registered for each DHCP group name.

The user management program 104 has a procedure for assisting the IP address manager in registering terminal user information in the user file 114 as information relating to a person who uses each terminal device. When new terminal information or the like is registered in the terminal information file 112 by the MAC address collection program 101, the information is also registered in the user file 114, and the relationship between the user and the terminal device is always maintained and managed. So that

As shown in FIG. 5, information such as a user name, a terminal name, a contact, an affiliation, and a MAC address is registered in the user file 114 by an IP address manager.

When updating the network plan file 113 or the MAC address file 111, the usage status monitoring program 105 compares both files to determine whether the IP address is used as set in the network plan file 113. If an abnormality is found, a request is made to notify the warning notification program 106 of a warning. As a procedure for checking, the terminal name corresponding to the MAC address to be checked is acquired with reference to the terminal information file 112, and the IP address assigned to the terminal name is changed to the IP address.
It is obtained from the address record 1133 and compared with the corresponding IP address in the MAC address file 111 to check whether or not the IP address matches. However, if automatic distribution by DHCP is used, the DH in which the terminal name is registered
A comparison is made as to whether the IP address matches any of the IP addresses in the CP group.

The alert notification program 106 receives a notification from the usage status monitoring program 105 or the like, and notifies the IP address manager of the status by a preset method.

Next, the operation of the first embodiment of the present invention will be described in detail with reference to the flowcharts of FIGS.

FIG. 6 shows the MAC address collection program 10
6 is a flowchart illustrating a search operation, which is one of the operations of FIG. The following search operation is automatically executed at a predetermined time or at a predetermined interval. First S601
Then, the first registered subnetwork address is extracted from the subnetwork record of the network plan file 113, and the IP address (A) included in this subnetwork and further implementing SNMP is extracted from the terminal information file 112. For example, when the subnetwork address is the subnetwork X2 in FIG. 1, the access destination is the IP address of the network interface unit 252 of the router 25.

In step S602, the IP address (A) is accessed by using the SNMP protocol, and information such as a network address, a subnetwork address, and a subnet mask for each network interface unit of the device and the information of each network interface unit. As the information on the terminal devices under the sub-network to be connected, a MAC address for each terminal device and information in which an IP address is paired are acquired. For example, as information of the network interface unit 252 of the router 25, the subnetwork X
Information on the pair of the MAC address and the IP address regarding the terminal devices 26 and 27 connected to the terminal 2 is acquired.

In S603, the obtained subnetwork address information is compared with the subnetwork addresses registered in the subnetwork record 1132 of the network plan file 113. In the case of an unregistered subnetwork address, the process proceeds to S610, and the unregistered subnetwork address and its subnet mask are registered in the subnet record 1132. At this point, no further information collection is performed and no subnetwork name is registered. When the IP address manager recognizes the subnetwork as a management target, this subnetwork name is registered, and access to this subnetwork is executed at the time of subsequent search.

Therefore, when this procedure is first executed in the system, the subnetwork is not searched for unless the subnetwork address and the subnetwork name are registered in the subnetwork record 1132 in advance. At that time, since unregistered subnet information is registered in the first execution result, the IP address administrator looks at the result and registers the subnetwork name if the subnetwork is to be managed. Will be executed.

If it is a registered sub-network address, the process advances to step S604 to check whether or not each of the acquired MAC addresses is registered in the terminal information file 112. If there is no unregistered MAC address, the pair of the MAC address and the IP address is stored in the MAC address file 1
11 and repeat the search for the remaining sub-networks. If there is an unregistered MAC address, in S605, the device is accessed and this MAC address is
It is checked whether the device having the address implements SNMP.

When the SNMP is installed, information such as a MAC address for each network interface unit of the device is obtained. Actually, it is a procedure for checking whether or not the SNMP is implemented. If the SNMP is implemented, such information can be obtained. Next, the process proceeds to S607. If the SNMP is not installed, the process directly proceeds to S607, and information such as the MAC address of each network interface unit is additionally registered in the terminal information file 112. However, registration of the terminal name is not performed. The terminal device is recognized only after the IP address manager registers the terminal name using the terminal management program 102. Next, proceeding to S608, the pair of the MAC address and the IP address is stored in the MAC address file 1
Register to 11. In this case, since the terminal information file 112 is updated, the usage status monitoring program 105 is started, and the registration information is checked as described later.

When unregistered information is detected for one subnetwork address as described above, each file is updated, and this procedure is performed in subnetwork record 1
Repeat for the remaining sub-networks registered in 132.

FIG. 7 shows the MAC address collection program 10
6 is a flowchart illustrating an operation as one DHCP server. In the DHCP protocol, the IP address is not fixedly assigned to the terminal device but dynamically assigned by the DCHP server. Therefore, the DHCP client mounted on the terminal device adopting the DHCP issues an IP address request to the DHCP server as needed. I do. Issuance of an IP address request differs depending on the operation method of DHCP.
The P address request is executed when the terminal device starts up.

Since DHCP is managed in the subnetwork, for example, when issued from the terminal device 27 of the subnetwork X2 other than the subnetwork X1, the DHCP agent mounted on the terminal device 26 of the subnetwork X2 mediates this. Then, the user accesses the MAC address collection program 101 of the host device 10 through the router 25. In the case of access from the terminal device 24, the host device 10 directly receives the IP address request,
In the case of access of the terminal device 27, the MAC of the terminal device 27
The host device 10 receives information such as a subnetwork address to which the terminal device 27 belongs and a subnet mask in addition to the address. MA implemented in host device 10
The C address collection program 101 collectively executes an IP address assignment process for each sub-network,
If permitted, the assigned IP address is
Alternatively, the data is transmitted to the terminal device 27 or the like via the DHCP agent of the terminal device 26. In the flowchart of FIG. 7, it is checked whether the IP address request is valid.
A process for assigning a P address is performed.

First, in step S621, an IP address request is received from a DHCP client. Next, in S622, I
The subnetwork address to which the DHCP client requesting the P address belongs is stored in the network plan file 11
It is checked whether or not it is registered in the sub-network record 1132 of No. 3; if it is an unregistered sub-network address, the flow advances to S631 to additionally register information of the unregistered sub-network address and its subnet mask in the subnet record 1132; In step S632, a rejection response is sent to the DHCP client. However, the subnetwork name is not registered here, and the subnetwork name is registered when the connection is permitted according to the judgment of the IP address administrator.

In the case of a registered subnetwork address, the subnetwork record 113 is entered in S623.
2 to determine whether it is a subnetwork in which DHCP is set. S6 when DHCP is not set
Proceed to 32 to send a rejection response to the DHCP client.

If DHCP has been set, S12
The process proceeds to step 4 to check whether or not the MAC address of the device requesting the IP address and the terminal name are registered in the terminal information file 112. If registered, proceed to S629,
Referring to the use state of the IP address record 1133,
Select an available IP address and send it back to the DHCP client. Also, this DHCP client M
The pair of the AC address and the assigned IP address is registered in the MAC address file 111, and the use state of the IP address record 1133 is changed to “used”.

If it is determined in step S624 that the MAC address has not been registered, the flow advances to step S126 to check whether the device that has requested the IP address has SNMP installed. SNM
If P is installed, the process proceeds to S626, and information such as the MAC address of each network interface unit in the device is acquired. Acquired MAC address, IP address, SNM of each network interface unit
Information such as the P implementation is additionally registered in the terminal information file 112 (the terminal name is not registered), and the MAC address and I
A pair with the P address is additionally registered in the MAC address file 111, and a rejection response is sent to the DHCP client.

If SNMP is not implemented, MAC
Information such as an address, an IP address, and SNMP implementation is additionally registered in the terminal information file 112, and a pair of the MAC address and the IP address is stored in the MAC address file 111.
To be added (terminal name is not registered) and DHCP
Respond to the client.

If it is determined in step S624 that the MAC address has not been registered, the terminal information file 112 is updated. Therefore, the usage status monitoring program 105 is started, and the validity is checked as described later.

Next, the operation of the terminal management program 102 will be described. FIG. 8 is a flowchart showing the operation of the terminal management program 102. As shown in FIG. 3, the terminal information file 112 operated by the terminal management program 102 stores information such as a MAC address, an IP address, and whether or not SNMP is installed for each network interface unit of each terminal device. Program 10
2 is mainly based on the terminal information file 1
This is a program for assisting in changing the registered contents of Twelve.

It is preferable that all terminal devices be registered by the IP address manager first. Alternatively, after the unregistered terminal information is registered in the terminal information file 112 by the MAC address collection program 101, There is also a method of registering a terminal name or the like for a device that approves each registered network interface unit. In this program, a new terminal device addition request,
It operates according to a change / deletion request for a registered terminal device or an approval request for registering a terminal name or the like to give approval.

In S701, it is determined whether or not the request is an approval request.
If the request is an approval request, the process advances to step S704 to read the terminal information file 112 for the requested device, and add the terminal name and the like to the terminal information file 112 according to the input instruction.
The network interface of the device whose terminal name is newly registered is approved for connection to the network. If the request is an addition / change / deletion request, the process advances to step S703, where addition / change / deletion is performed on the terminal information file 112 according to an instruction for each network interface unit of the terminal device.

Next, the operation of the network management program 103 will be described, in which the contents of the terminal information file 112 are changed as described above. Although the operation of the network management program 103 is not shown, the terminal management program 102 is a program that supports the registration procedure by the IP address administrator, whereas the network management program 103 is that the IP address administrator Is a program that handles addition, change, and deletion of files. MAC address collection program 1
01, when there is an approval request for permitting connection of the newly registered subnetwork, the corresponding subnetwork information is stored in the subnetwork record 1132.
And adds the input subnetwork name to the subnetwork record 1132.

In response to an addition request for permitting a new connection to a subnetwork or a request to change or delete registered information, information such as the input subnetwork address, subnet mask, and the presence or absence of DHCP is provided. , Add / change / delete the sub-network record 1132.

The network records 1131 and I
P address record 1133 and DHCP record 1
In response to the addition / change / deletion request to 134, the record contents are added / changed / deleted according to the input information and the instruction. In the IP address record 1133, if the terminal device has assigned a fixed IP address,
IP address record 1 for the terminal name corresponding to the P address
In the case where automatic assignment of an IP address by DHCP is set, a DHCP group name is registered. Then, a list of terminal names providing services and a list of allocatable IP addresses are registered in the DHCP group record 1134 for each DHCP group.

Next, the operation of the user management program 104 will be described. The operation is not shown, but the network management program 103
The user management program 104 is a program that processes the registration of the user file 114, while the registration of the user file 114 is processed. The information of the user file 114 is added, changed, or deleted in response to an instruction to add, change, or delete information such as a user name and a terminal name input from the IP address administrator.

Next, the operation of the usage status monitoring program 105 will be described. The usage status monitoring program 105 is activated in two cases, that is, when the network plan file 113 is updated and when the terminal information file 112 is updated, and operates as follows.

FIG. 9 is a flowchart showing the operation of the usage status monitoring program 105 when the network plan file 113 is updated. In step S801, pairs of a MAC address (A) and an IP address (A) are sequentially read from the MAC address file 111. S802
Then, it is checked whether or not the MAC address (A) and the terminal name are registered in the terminal information file 112. If not registered, the process advances to step S808 to request the warning notification program 106 to transmit a warning message to the IP address manager.

If the MAC has been registered, the MAC
The terminal name (A) corresponding to the address (A) is read from the terminal information file 112, and the IP address record 1133 or D in the network plan file 113 is read in S805.
The IP address (B) corresponding to the terminal name (A) is read from the HCP group record 1134, and it is checked whether or not the IP address (A) matches. However, in the case of DHCP, if any of the IP addresses (B) included in the same DHCP group matches the above IP address (A), it is determined that they match.

If they match, it is determined that the
S80 for the remaining pairs of the MAC address (A) and the IP address (A) in the C address file 111
The operation is repeated from 1. If they do not match, the process advances to step S808 to request the warning notification program 106 to transmit a warning message to the IP address administrator.

FIG. 10 is a flowchart showing the operation of the usage status monitoring program 105 when the terminal information file 112 is updated. MAC updated in S821
It is checked whether the terminal name has been registered (approved) for the address (A). If not registered, proceed to S826,
It requests the warning notification program 106 to transmit a warning message to the IP address manager.

If the MAC address has already been registered, the MAC
The terminal name (A) corresponding to the address (A) is read from the terminal information file 112, and in S824, the IP address record 1133 or D in the network plan file 113 is read.
The IP address (B) corresponding to the terminal name (A) is read from the HCP group record 1134, and it is checked whether or not the IP address (A) matches. However, in the case of automatic allocation by DHCP, if there is an IP address (B) included in the same DHCP group that matches the above IP address (A), it is determined that the IP address (A) matches.

If they do not match, the flow advances to S826 to request the warning notification program 106 to transmit a warning message to the IP address manager. If they match, it is determined to be valid and the process ends.

Next, the operation of the warning notification program 106 will be described. Although the operation is not illustrated, the warning notification program 106 receives a notification from the usage status monitoring program 105 or the like, and notifies the notified status and information to the IP address manager by a predetermined method. There are several specific methods and means for notifying, but common methods and means include sounding a buzzer, sending an e-mail, and a pager (pager (registered trademark)).
To send a message to the user. In order to sound the buzzer, it is necessary to connect the buzzer device 22, and in order to send a message to the pager, the modem 2 must be connected.
1 is required, and a mail server 23 is required to transmit an e-mail. These are not all necessary,
One or more optimum ones may be selected according to the convenience of the IP address manager.

As described above, the MAC address collection program 101 periodically collects the pair of the MAC address and the IP address in use for each terminal device connected to the network and compares it with the terminal information file 112. By doing so, it can be easily determined whether or not the terminal device has been approved. By comparing the terminal device with the network plan file 113, the terminal device
It can be easily determined whether or not an address is used. In the network plan file 113, the terminal device permitted to use the IP address is defined.
It can be easily detected that a terminal device whose P address is not permitted is used.

Further, since monitoring is performed based on the MAC address, two or more terminal devices can
Even when the address is not used, it is possible to detect that the IP address is used repeatedly with a time lag, so that it is possible to prevent network confusion beforehand.

When an unauthorized use is detected, the IP address manager can be automatically notified by the warning notification program 106, and the user file 114 can be managed to notify the user of the unauthorized terminal device. Since the information such as the destination can be searched immediately, the confusion of the network due to unauthorized use can be recovered at an early stage.

Next, a second embodiment of the present invention will be described in detail with reference to the drawings. FIG. 11 shows a second embodiment of the present invention.
FIG. 2 is a block diagram showing an embodiment of the present invention. Host device 3
0 has the same configuration as the host device 10 of FIG. 1 showing the first embodiment, but shows only the program and file portions. MAC address collection program 301, terminal management program 302, network management program 303, user management program 30 in host device 30
4. The usage status monitoring program 305 and the warning notification program 306 operate in the same manner as the programs of the same name in the host device 10, and the MAC address file 311, the terminal information file 312, the network plan file 313, the usage File 314 stores information on the same items as files of the same name in host device 10. However, as described later, the storage content of each file follows the configuration of FIG. 11, and the collection range of the MAC address collection program 301 is a range excluding a part.

The sub-network X 3 and the sub-network X 5 to which the host device 30 is connected are connected by a router 32, and the sub-network X 3 is further connected by a router 33.
4 are connected. The order of connection and the positional relationship need not be exactly the same, and may be different as long as they are connected via a network.

The host device 40 is connected to the subnetwork X4
And a distributed MAC address collection program 401
And a distributed MAC address file 411.
Although not shown, the distributed MAC address collection program 4
01 and the distributed MAC address file 411 may be implemented in a host device other than the host device 40. Distributed MAC address collection program 401 and distributed MAC
The address file 411 is not used for the entire network system, but is used for MAs used in devices in a partial range of the network such as the subnetwork X4.
The purpose is to maintain and manage the C address and the IP address to reduce the load on the host device 30. This range may be a plurality of sub-networks.

The recording medium 42 is a medium in which a distributed MAC address collection program 401 corresponding to the procedure on the second host device recorded in the recording medium of claim 14 is recorded. The host device 40 installs the program from the recording medium 42 and executes the program on the host device 40.

As described above, the host device 30 is provided in the twelfth embodiment.
Alternatively, a necessary procedure is selected from the procedure of claim 13 and the procedure except for the procedure on the second host device from claim 14, installed, and executed. In FIG. 11, all procedures (programs) are installed.

The host device 50 is connected to the subnetwork X5
Connected to the terminal management client program 502
And the network management client program 503
And a user management client program 504. The terminal management client program 502 replaces the terminal management program 302 in the host device 30 with a program that enables an input / output device connected to the host device 50 to add, change, or delete information in the terminal information file 112. It is. Similarly, the network management client program 503 and the user management client program 504 add information of the network plan file 113 and the user file 114 instead of the network management program 303 and the user management program 304 in the host device 30, respectively. A program that allows a change / delete operation to be performed from an input / output device connected to the host device 50.

The programs to be mounted on the host device 40 and the host device 50 do not need to be separately mounted as shown in FIG. 11, but may be freely selected and mounted according to the respective operation modes. However, the distributed MAC address collection program 401 requires the distributed MAC address file 411, and the terminal management client program 502,
It is more efficient to implement the network management client program 503 and the user management client program 504 together.

Next, the operation of each program will be described. The distributed MAC address collection program 401
Operates in the same manner as the MAC address collection program 101 of the first embodiment, except that the MAC address collection program 10
1 performs a MAC address search and an IP address request process for the entire network, whereas the distributed MAC address collection program 401 performs the same operation only for a predetermined range (for example, only the subnetwork X3). Do. Therefore, only the information on the devices within the above defined range (for example, the subnetwork X3) is registered in the distributed MAC address file 411.

The distributed MAC address file 411
In addition, the MAC address file 31 of the host device 30
1. Reference / registration is executed for the terminal information file 312, the network plan file 313, and the user file 314. The same information as the MAC address file 111 of the first embodiment is registered in the MAC address file 311, but the MAC address collection program 3
01, unlike the MAC address collection program 101 of the first embodiment, does not operate in the above range (for example, only the subnetwork X3) and leaves the processing to the distributed MAC address collection program 401.

As described above, the distributed MAC address collection program 401 is stored in the host device 40 separately from the host device 30.
By implementing the distributed MAC address file 411 and searching for a MAC address in a predetermined range and processing the IP address request by the host device 40, the host device 40 Since processing can be performed in a distributed manner without access, the load on the host device 30 and the network can be reduced.

The operation of the terminal management client program 502 is the same as that of the terminal management program 102 of the first embodiment.
21 except that the terminal information file to be managed does not exist in the host device 50 and becomes the terminal information file 312 in the host device 30. In the first embodiment, input operations such as registration of a new terminal device in the terminal information file 112 can be performed only from the input device of the host device 10. However, by installing the terminal management client program 502 on the host device 50, The input operation to the terminal information file 312 in the host device 30 can be performed from either the host device 30 or the host device 50.

The operations of the network management client program 503 and the user management client program 504 are the same as the network management program 103 and the user management program 104 of the first embodiment, respectively, similarly to the terminal management client program 502. The network plan file 3 of the host device 30
13 and the user file 314 can also be input from the host device 50.

As described above, the remote host device 50
From the terminal information file 312, the network plan file 313, or the user file 314 of the host device 30.
, The IP address management work of the network can be distributed to a plurality of bases, and the amount of work per IP address manager can be reduced.

[0087]

According to the first embodiment of the present invention, for each device periodically connected to the network, the MA
Collect the pair of the C address and the used IP address,
By comparing with the preset contents of the network plan file 113, it is possible to easily detect whether or not the device is using the IP address as planned in advance. , It is possible to easily detect the use of the network by an unauthorized device.

Further, even when two or more devices use the same IP address, and one of the devices uses a potential IP address that is not connected to the network, the MAC address and IP address of each device are used. Since the inspection is performed in correspondence with the address, duplicate use can be detected, and a network failure due to the duplicate use can be prevented.

When an unauthorized use is detected, the IP address manager can be automatically notified by the warning notification program 106. By managing the user file 114, the user of the Since the information such as contact information can be searched immediately, it is possible to reduce the recovery time of a network failure due to unauthorized use.

According to the second embodiment of the present invention, by implementing the distributed MAC address collection program 401 in the remote host device 40, the search for the MAC address can be performed between the host device 30 and the remote host device 40. Since the processing can be performed in a distributed manner, the load on the host device 30 and the network can be reduced.

Further, since the registration information of the terminal information file 312, the network plan file 313, or the user file 314 of the host device 30 can be updated from the remote host device 50, the IP address management work can be distributed to a plurality of bases. By doing this, the amount of work per IP address manager can be reduced.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a first embodiment of the present invention.

FIG. 2 is a MAC address file 1 according to the first embodiment;
FIG.

FIG. 3 is a diagram illustrating a terminal information file 112 according to the first embodiment.

FIG. 4 is a diagram showing a network plan file 113 according to the first embodiment.

FIG. 5 is a diagram illustrating a user file 114 according to the first embodiment.

FIG. 6 is a flowchart illustrating a search operation of the MAC address collection program 101 according to the first embodiment.

FIG. 7 is a flowchart showing the operation of the MAC address collection program 101 according to the first embodiment as a DHCP server.

FIG. 8 is a terminal management program 102 according to the first embodiment;
3 is a flowchart showing the operation of the first embodiment.

FIG. 9 is a usage monitoring program 10 when the network plan file 113 according to the first embodiment is updated.
6 is a flowchart showing the operation of FIG.

FIG. 10 shows a usage monitoring program 10 when the MAC address file 111 according to the first embodiment is updated.
6 is a flowchart showing the operation of FIG.

FIG. 11 is a block diagram showing a configuration of a second exemplary embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Host apparatus 101 MAC address collection program 102 Terminal management program 103 Network management program 104 User management program 105 Usage monitoring program 106 Warning notification program 111 MAC address file 112 Terminal information file 113 Network plan file 114 User file 21 Modem 22 Buzzer Device 23 Mail server 24 Terminal device 25 Router 26 Terminal device 27 Terminal device 30 Host device 301 MAC address collection program 302 Terminal management program 303 Network management program 304 User management program 305 Usage monitoring program 306 Warning notification program 311 MAC address file 312 Terminal information file 313 Network plan file 314 User file 32 Router 33 Router 40 Host device 401 Distributed MAC address collection program 411 Distributed MAC address file 50 Host device 502 Terminal management client program 503 Network management client program 504 User management client program

Claims (14)

[Claims] 1. An IP address monitoring system for monitoring a use status of an IP address of a network to which a first host device and a plurality of terminal devices are connected, wherein the first host device is connected to a network of the terminal devices. A first file for registering and storing information related to the network such as correspondence information between a MAC address and an IP address set for each network interface unit of a connecting part, and an IP operating in each network interface unit.
Second for storing correspondence information between addresses and MAC addresses
And a file that is searched during operation of the network to collect information on the network of each network interface unit, and stores correspondence information between the IP address and the MAC address in a second file.
MA for registering in the first file and registering unregistered information from the collected information in the first file
C address collecting means, means for an administrator to operate information on the first file, IP address and MAC registered in the first file
An IP address monitoring system comprising: an IP address monitoring unit that monitors whether an IP address is operated according to an address. 2. When the IP address monitoring means detects that the IP address is not operated in accordance with the correspondence between the IP address and the MAC address registered in the first file, a warning is issued to the administrator. 2. The IP address monitoring system according to claim 1, further comprising a warning notifying unit for notifying. 3. The first file includes a terminal name, a MAC address,
A terminal information file for registering and storing information such as IP addresses and the like, and a network plan file for registering and storing information such as addresses, names and masks of sub-networks and setting information relating to DHCP. The IP address monitoring system according to claim 1 or 2, wherein 4. The first file includes a user file for registering and storing information such as the user name, contact information, and terminal name of the terminal device, and further manages the registration information of the user file. 4. The IP address monitoring system according to claim 1, further comprising a user management unit that performs the operation. 5. A method according to claim 1, wherein said MAC address collection means determines whether said terminal device is set in said file 1 as a terminal device permitted to connect to a network when receiving a request for issuing an IP address by DHCP from a terminal device. 4. The IP address monitoring system according to claim 1, wherein when the permission is set, an IP address is paid out to the terminal device. 5. 6. An IP address monitoring system for monitoring the use status of an IP address of a network to which a first host device, a second host device, and a plurality of terminal devices are connected, wherein the first host device comprises: A first file for registering and storing network-related information such as correspondence information between a MAC address and an IP address set for each network interface of a portion of the terminal device connected to the network; Medium IP
Second for storing correspondence information between addresses and MAC addresses
And a file that is searched during operation of the network to collect information on the network of each network interface unit, and stores correspondence information between the IP address and the MAC address in a second file.
MA for registering in the first file and registering unregistered information from the collected information in the first file
C address collecting means, means for an administrator to operate information on the first file, IP address and MAC registered in the first file
IP address monitoring means for monitoring whether an IP address is operated in accordance with the address, wherein the second host device has an I / O interface for each network interface unit of the terminal device.
A third file storing correspondence information between the P address and the MAC address; and searching a predetermined range in the network during operation to collect information on the network of each network interface unit, A distributed M that registers MAC address correspondence information in the third file and the second file and registers unregistered information from the collected information in the first file.
IP having AC address collecting means
Address monitoring system. 7. An IP address monitoring system for monitoring a use status of an IP address of a network to which a first host device, a second host device, and a plurality of terminal devices are connected, wherein the first host device comprises: A first file for registering and storing network-related information such as correspondence information between a MAC address and an IP address set for each network interface of a portion of the terminal device connected to the network; Medium IP
Second for storing correspondence information between addresses and MAC addresses
And a file that is searched during operation of the network to collect information about the network of each network interface unit, and stores correspondence information between an IP address and a MAC address in a second file.
MA for registering in the first file and registering unregistered information from the collected information in the first file
C address collecting means, means for an administrator to operate information on the first file, IP address and MAC registered in the first file
IP address monitoring means for monitoring whether an IP address is operated according to the address, wherein the second host device is a first host device of the first host device.
An IP address monitoring system comprising means for an administrator to operate the information of the file. 8. An IP address monitoring method for monitoring the use status of an IP address of a network to which a host device and a plurality of terminal devices are connected, wherein a network interface portion of a portion of the terminal device connected to the network is provided in advance. Registering information about the network such as correspondence information between the set MAC address and the IP address in the first file, searching for the network during operation, and collecting information about the network of each network interface unit; The correspondence information between the IP address and the MAC address is registered in a second file, and the IP address and the MAC registered in the first file are registered.
Address correspondence and IP registered in the second file
An IP address monitoring method, comprising: comparing an address with a MAC address to monitor the use status of the IP address. 9. When the result of comparing the correspondence between the IP address and MAC address registered in the first file and the correspondence between the IP address and MAC address registered in the second file does not match, 9. The IP address monitoring method according to claim 8, wherein a warning is automatically notified to an administrator. 10. An IP address monitoring method for monitoring the use status of an IP address of a network to which a host device and a plurality of terminal devices are connected, the method comprising: MAC address and I
Information about the network, such as information corresponding to the P address, is registered in a first file, and when a request for the delivery of an IP address by DHCP is received from the terminal device, the terminal device is permitted to connect to the network. An IP address monitoring method, comprising: determining whether a device is registered in the first file, and paying out an IP address to the terminal device when the device is permitted. 11. An IP address monitoring method for monitoring the use status of an IP address in a network in which a first host device, a second host device, and a plurality of terminal devices are connected. MAC address and I for each network interface
Information about a network, such as information corresponding to a P address, is registered in a first file in a first host device, and a search range of the network is defined by the first host device and the second host device. The search range is divided in advance, and the second host device searches for and collects the correspondence information between the IP address and the MAC address of each network interface unit in the first host device, which has been searched and collected during operation in the divided range. In the second file and the third file on the second host device, wherein the first host device searches for and collects during the operation in the divided area for each of the network interface units. The correspondence information between the IP address and the MAC address is registered in a second file in the first host device, and the IP address registered in the first file is registered. And MAC
Address correspondence and IP registered in the second file
An IP address monitoring method, comprising: comparing an address with a MAC address to monitor the use status of the IP address. 12. A procedure in which information about a network such as correspondence information between a MAC address and an IP address set for each network interface unit of a portion of a terminal device connected to a network is previously registered in a first file; A procedure for searching for the network during operation and collecting information about the network of each network interface unit, a procedure for registering the corresponding information of the collected IP address and MAC address in a second file, IP address and MAC registered in the file
Address correspondence and IP registered in the second file
At least one of a procedure of monitoring the usage status of the IP address by comparing the correspondence between the address and the MAC address, and a procedure of automatically notifying the administrator when the result of the comparison does not match. A recording medium that stores a program to be executed by a computer. 13. A MAC for each network interface of a terminal device connected to a network in advance.
A step of registering information about the network such as correspondence information between the IP address and the IP address in the first file; and a step of, when receiving a request for paying out an IP address by DHCP from the terminal apparatus, the terminal apparatus connecting to the network. A program for causing a computer to execute a procedure of determining whether or not a terminal device is registered as an authorized terminal device in the first file, and a procedure of paying out an IP address to the terminal device when the determination result is authorized Recording medium on which is recorded. 14. A MAC for each network interface of a terminal device connected to a network in advance.
Registering information about the network, such as correspondence information between the IP address and the IP address, in a first file in the first host device; and setting a search range of the network to the first host device and the second host device in advance. The second host device searches for the IP address and MAC address corresponding information for each network interface unit collected by searching during the operation during the operation of the first host device in the first host device. Registering the second file in the host device and the third file on the second host device, and the first host device searches and collects the divided area during operation. A step of registering correspondence information between an IP address and a MAC address of each of the network interface units in a second file in the first host device; IP address and MAC, which is registered in the file
Address correspondence and IP registered in the second file
A recording medium on which a program for causing a computer to execute a procedure for comparing a correspondence between an address and a MAC address is recorded.