KR101522927B1 - Method, appratus and computer-readable recording medium for controlling communication of terminal using dynamic filtering - Google Patents

Abstract

According to an aspect of the present invention there is provided a method for controlling communication of a terminal using a network device, the method comprising the steps of: (a) receiving, by a network device, one or more And (b) the network device controlling communication of the one or more terminals by using the one or more filters configured, wherein the operational state includes on-line and off-line. Is provided. According to the present invention, a filter is configured based on an operation state of all terminals managed by a network device, and communication is controlled, thereby achieving an effect that communication control of terminals can be performed by efficiently utilizing limited filter resources.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a method, apparatus, and computer readable recording medium for controlling communication of a terminal using dynamic filtering.

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method, apparatus and computer-readable recording medium for controlling communication of a terminal using dynamic filtering, and more particularly, And more particularly, to a method, apparatus, system, and computer-readable recording medium for enabling management of a plurality of terminals by efficiently utilizing a limited number.

In order for network devices such as routers and switches to perform high-speed packet forwarding, effective classification of packets is essential.

The TCAM is one of the contents addressable memories (CAMs), and is used for classification for packets. Based content retrieval hardware used.

In general, a random access memory (RAM) receives a memory address and outputs data of an input memory address. On the other hand, when the CAM receives a search word or content, it searches the entire memory space of the search word or the content, returns the search word or the address where the content is located, or returns data associated with the search word or the content.

TCAM allows the expression "0" and "1" as well as "X" (Do not care) of the binary in the representation of the query or content. "X" indicates that it can correspond to both "0" and "1". With the use of "X ", greater flexibility in search can be provided.

In classifying packets, rules for purposes such as traffic blocking and traffic permitting can be used. TCAM can be used to represent rules and apply rules to packets. For example, a rule may cause packets that are allowed to forward packets and packets that are blocked for packet forwarding to be separated.

The TCAM can be used to control multiple terminals communicating via a network device. The TCAM may include one or more configurable filters. For example, the filters may indicate a terminal whose communication is interrupted among the plurality of terminals. In addition, the filters may store data indicating an identifier of a terminal whose communication is blocked among the plurality of terminals. The identifier may be an Internet protocol (IP) address of the terminal or a Media Access Control (MAC) address of the terminal.

The TCAM receives the query and can output whether the query matches the TCAM's filters. For example, the TCAM can return the address of a filter that matches an input search term, and can transform the data of a filter that matches the input search term. The network device can control the communication of the terminal using the result of the match. For example, the network device may block the forwarding of a packet if the terminal that transmitted the packet or the terminal to receive the packet matches the filters. That is to say, the network device can block packet forwarding if the source address or the destination address of the received packet is searched in the TCAM or matched with the filter. That is, the network device can perform filtering on the packet by using the TCAM.

As described above, the TCAM has an advantage that it can perform classification for packets at high speed. However, when TCAM is used for classifying packets, high cost is required due to the structural characteristics of TCAM, and there arises a problem that capacity expansion is difficult. Here, the capacity of the TCAM may mean the number of filters of the TCAM. That is to say, the TCAM of the hardware guarantees the speed of the communication line, but has a limitation on the number of terminals that can be managed according to the capacity of the TCAM. When the number of configurable filters of the TCAM is N, the number of terminals that can be managed can also be limited to N.

Also, the number of terminals managed by the network device can be continuously increased, as compared with the case where the capacity of the TCAM is limited. For example, if the number of terminals is very large, the capacity of the TCAM may not be sufficient to express the rule indicating terminals that are blocked or allowed to traffic. That is to say, due to the capacity limitation of the TCAM, the TCAM may not accurately represent the terminals to which the rule is applied.

In order to solve the above problems, it is possible to use a TCAM having a sufficiently large capacity suitable for the network. However, the larger the TCAM capacity, the higher the cost, the problem is that the scale of the network is not fixed, Is still present.

Thus, the present inventors have found that, compared with the entire terminals managed by the network device, the TCAM is configured only for a smaller number of terminals specified based on the operation state of the terminal, To manage more terminals compared with the conventional technique.

It is an object of the present invention to solve all the problems described above.

The present invention also relates to a method and apparatus for configuring filters based on operational states of terminals and using the configured filters to control communications of terminals to efficiently utilize limited filter resources to increase the number of terminals' So that control can be achieved.

In order to accomplish the above object, a representative structure of the present invention is as follows.

According to an aspect of the present invention there is provided a method for controlling communication of a terminal using a network device, the method comprising the steps of: (a) receiving, by a network device, one or more And (b) the network device controlling communication of the one or more terminals by using the one or more filters configured, wherein the operational state includes on-line and off-line. Is provided.

According to another aspect of the present invention, there is provided a network device for controlling communication of a terminal, comprising: a filter constructing part that configures one or more filters for controlling communication of the one or more terminals based on an operation state of one or more terminals; Wherein the apparatus comprises a communication control unit for controlling communication of the one or more terminals by using the one or more filters configured, wherein the operating state includes on-line and off-line.

In addition, there is further provided another method, apparatus, system for implementing the invention and a computer readable recording medium for recording a computer program for executing the method.

According to the present invention, the filters are configured based on the operation states of all the terminals managed by the network device, and the communication of the terminals is controlled by using the configured filters, An effect that can be achieved is achieved.

In addition, according to the present invention, a filter is configured for all terminals by eliminating terminals that are off-line among all the terminals managed by the network apparatus and configuring a filter for the remaining terminals, The communication can be controlled with respect to the terminals of the base station.

1 is a diagram schematically showing a configuration of an overall system for controlling communication of a terminal based on an operation state of the terminal according to the present invention.
2 is a diagram illustrating an internal configuration of a network device according to an embodiment of the present invention.
3 is a diagram illustrating a process in which a network device controls communication of a terminal according to an embodiment of the present invention.
4 is a diagram illustrating a process of a network device determining a state of a UE according to an embodiment of the present invention.
5 is a diagram illustrating a process of changing values of one or more filters of a network device according to a change of operation states of one or more terminals according to an exemplary embodiment of the present invention.

The following detailed description of the invention refers to the accompanying drawings, which illustrate, by way of illustration, specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that the various embodiments of the present invention are different, but need not be mutually exclusive. For example, certain features, structures, and characteristics described herein may be implemented in other embodiments without departing from the spirit and scope of the invention in connection with an embodiment. It is also to be understood that the position or arrangement of the individual components within each disclosed embodiment may be varied without departing from the spirit and scope of the invention. The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present invention is to be limited only by the appended claims, along with the full scope of equivalents to which such claims are entitled, if properly explained. In the drawings, like reference numerals refer to the same or similar functions throughout the several views.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings, so that those skilled in the art can easily carry out the present invention.

Configuration of the entire system

1 is a diagram schematically showing a configuration of an overall system for controlling communication of a terminal based on an operation state of the terminal according to the present invention.

As shown in FIG. 1, the network device 100 and one or more terminals may be included. 1, a first terminal "A" 121, a second terminal "B" 122, a third terminal "C" 123 and a fourth terminal "D" .

First, in accordance with an embodiment of the present invention, network device 100 may comprise one or more filters for controlling communication of one or more terminals based on the operational state of one or more terminals, And controls the communication of the terminals. The operational status can include online and offline.

According to one embodiment of the present invention, the one or more filters may be a hardware TCAM (Ternary Content Addressable Memory).

According to an embodiment of the present invention, the network device 100 may be a switch, a router, and a server, and may be a device that performs a function of forwarding a packet. The one or more terminals may be devices that perform communication via the network device 100.

According to one embodiment of the present invention, one or more filters of the network device 100 may be a blocking filter or a permissive filter. The blocking filter may indicate a terminal whose communication is blocked, and the permitting filter may indicate a terminal that is allowed to communicate. When one or more filters are blocking filters, control of communication of the terminal may mean blocking of communication. Alternatively, when one or more of the filters are permissive, control of communication of the terminal may mean allowing the communication.

In Figure 1, one or more filters are shown to be blocking filters. In other words, in FIG. 1, one or more filters may indicate a terminal from which communication among one or more terminals is blocked.

According to an embodiment of the present invention, one or more terminals can be classified into a terminal that is allowed to communicate and a terminal whose communication is blocked. A terminal whose communication is blocked may be a terminal of an unauthorized user or an unauthorized terminal. The network device 100 may classify one or more terminals into a terminal that is allowed to communicate and a terminal that is blocked from communication. A terminal that is permitted to communicate may be a terminal to which communication has been granted by authentication, a policy, or the like, and a terminal to which communication is blocked may be a terminal to which communication is not applied due to authentication and policy.

1, the first terminal " A "121 is shown as a terminal allowed to communicate and the second terminal " B" 122, the third terminal "C" 123, 124 are shown as terminals whose communication is blocked.

As described above, the operating state of the terminal may be online or offline. In other words, there may be a simultaneous presence of an on-line terminal and an off-line terminal in the network. The first terminal " A "121 and the fourth terminal" D "124 are shown as being online and the second terminal " B" 122 and the third terminal "C" It was shown to be offline. The terminal that is offline may be a terminal that is powered off, a terminal that is not logged on, a terminal that is in an idle state, and a terminal that is in a power saving state. In other words, a terminal that is offline may be a terminal that is not communicating or a terminal that does not need communication.

According to one embodiment of the present invention, rules are not required to be set for a terminal that is offline among one or more terminals. Here, the rule may be a blocking rule indicating a terminal whose communication is blocked among one or more terminals, or a permitting rule indicating a terminal indicating a terminal to which communication is permitted. 1, even though the terminal with which communication is blocked is the second terminal "B" 122, the third terminal "C" 123 and the fourth terminal "D" 124, D "124, except for the second terminal" B "122 and the third terminal" C " Since the data for off-line terminals is not stored in the blocking filter, the network device 100 can manage sufficient data to control the communication of one or more terminals, for example, even if there are only two filters . That is to say, the network device 100 can control the communication of a greater number of terminals compared to the number of one or more filters that are hardware, by determining terminals that are off-line among one or more terminals of the network.

According to one embodiment of the present invention, when one or more filters are blocking filters, the network device may perform the following functions.

First, the network device 100 may configure one or more filters to indicate a terminal that is on-line and disconnected from one or more terminals. For example, one or more filters may be blocking filters.

Next, the network device 100 may configure one or more filters to indicate to the one or more remaining terminals, one of the one or more remaining terminals, that the communication is blocked, have.

Next, the network device 100 configures one or more filters to control communication for one or more remaining terminals, except for terminals that are off-line among one or more terminals, thereby providing a greater number of one or more And control can be performed on the terminals. The capacity of the hardware TCAM may refer to the number of data that the TCAM can store or the number of one or more filters.

According to one embodiment of the present invention, each of the one or more filters may store an identifier of the terminal. The terminal's identifier may be at least one of an IP address and a MAC address of the terminal. That is to say, if the filter is a blocking filter, each of the one or more filters may store an identifier of the terminal from which the communication is blocked. Further, when the filter is an allowable filter, each of the one or more filters may store an identifier of a terminal that is allowed to communicate.

The above description can be equally applied when one or more filters are permissive filters. In other words, in the above description, the term "blocking" Duplicate description is omitted.

A more detailed description of the configuration of the network device 100 will be given later.

The configuration of network device 100

Hereinafter, an internal configuration and specific functions of the network device 100 performing an important function for the implementation of the present invention will be described.

2 is a diagram illustrating an internal configuration of a network device 100 according to an embodiment of the present invention.

2, the network device 100 according to an exemplary embodiment of the present invention may include a filter configuration unit 210, a communication control unit 220, a communication unit 230, and a status determination unit 240 have. According to an embodiment of the present invention, at least a part of the filter configuration unit 210, the communication control unit 220, the communication unit 230, and the status determination unit 240 may be program modules communicating with external systems. Such program modules may be included in the network device 100 in the form of an operating system, application program modules, and other program modules, and may be physically stored on various known memory devices. Also, at least some of these program modules may be stored in a remote storage device that is capable of communicating with the network device 100. These program modules include, but are not limited to, routines, subroutines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types as described below in accordance with the present invention. In addition, at least some of these program modules may be performed by a processor of the network device 100. For example, the filter configuration unit 210, the communication control unit 220, and the status determination unit 240 may be program modules that are executed by the processor of the network device 100, and the communication unit 230 may communicate with the network device 100 ) Network interface card.

The filter component 210 may include one or more of the filters described above with reference to FIG.

Specific functions of the filter unit 210, the communication control unit 220, the communication unit 230, and the state determination unit 240 according to an exemplary embodiment of the present invention will be described in detail with reference to FIG.

The operation procedure of the network device 100

FIG. 3 is a diagram illustrating a process in which the network device 100 controls communication of a terminal according to an embodiment of the present invention.

Referring to FIG. 3, (i) first, the filter configuration unit 210 may configure one or more filters for controlling communication of one or more terminals based on the operation state of one or more terminals (S310). The operational status can include online and offline.

According to one embodiment of the present invention, one or more filters may be a blocking filter indicating a terminal whose communication is blocked, and control of communication may be blocking of communication. The filter configuration unit 210 may configure one or more filters to indicate a terminal that is on-line and disconnected from one or more terminals (i.e., terminals for which communication has not been granted). Alternatively, the filter constructor 210 may configure one or more filters to indicate, for one or more of the remaining terminals, that one of the one or more remaining terminals is out of communication, have. The filter configuration unit 210 configures one or more filters for controlling communication with one or more remaining terminals except the terminal that is off-line among one or more terminals so that a larger number of one or more terminals Lt; / RTI >

According to one embodiment of the present invention, the one or more filters may be an admission filter indicating a terminal that is allowed to communicate, and the control of communication may be a permission of communication. The filter configuration unit 210 may configure one or more filters to indicate a terminal that is on-line and communicable among the one or more terminals (i.e., a terminal to which communication is permitted). Alternatively, the filter configuration unit 210 may configure one or more filters to indicate, among the one or more remaining terminals, that the terminal is allowed to communicate, with respect to one or more remaining terminals, have. The filter configuration unit 210 configures one or more filters for controlling communication with one or more remaining terminals except the terminal that is off-line among one or more terminals so that a larger number of one or more terminals Lt; / RTI >

According to an embodiment of the present invention, the filter configuration unit 210 can distinguish between an on-line terminal and an off-line terminal among one or more terminals using the communication unit 230 and the status determination unit 240. A method of determining the state of the terminal by the communication unit 230 and the state determination unit 240 will be described below in detail with reference to FIG.

(ii) Next, the communication control unit 220 may control communication of one or more terminals by using one or more configured filters (S320).

According to an embodiment of the present invention, when the filter is a cutoff filter, the communication control unit 220 can block the communication of the terminal matched with the cutoff filter and allow the communication of the terminal that does not match the cutoff filter. In other words, if the packet received by the communication unit 230 is a packet transmitted to the terminal matched with the blocking filter, the communication control unit 220 may not forward the packet, and if the received packet does not match the blocking filter, The packet forwarding can be performed. If the packet received by the communication unit 230 is a packet transmitted from the terminal matched with the blocking filter, the communication control unit 220 may not forward the packet. If the received packet does not match the blocking filter, The packet forwarding can be performed.

According to an embodiment of the present invention, when the filter is a permissible filter, the communication control unit 220 permits communication of the terminal matched with the permissible filter, and can block communication of the terminal that does not match the permissible filter. In other words, the communication control unit 220 can forward the packet if the packet received by the communication unit 230 is a packet transmitted to the terminal matched with the allowable filter, and if the received packet does not match the permissible filter If the packet is a transmitted packet, the packet may not be forwarded. In addition, the communication control unit 220 can forward the packet when the packet received by the communication unit 230 is a packet transmitted from the terminal matched with the allowable filter, and the received packet can be transmitted from the terminal If the packet is a transmitted packet, the packet may not be forwarded.

FIG. 4 is a diagram illustrating a process of the network device 100 determining the state of a mobile station according to an embodiment of the present invention. Referring to FIG.

Step S310 described above with reference to FIG. 3 may include the steps S410, S420, S430, S440, and S450 described below.

The terminal 400 shown in FIG. 4 may be one of the one or more terminals described above with reference to FIG. That is to say, the steps S410, S420, S430, S440 and S450 described below may be applied to each terminal of one or more terminals for which the network device 100 controls communications. In addition, the steps S410, S420, S430, S440, and S450 described below may illustratively illustrate the process by which the network device 100 determines the status of each terminal of one or more terminals.

In FIG. 4, the state of the terminal 400 is shown to change from online to offline according to the passage of time. A vertical line shown below the terminal 400 indicates an operation state of the terminal 400 according to the passage of time. Bold portions of vertical lines represent time points when the terminal 400 is on-line, and thinly illustrated portions represent times when the terminal 400 is off-line. As the state of the terminal 400 changes, whether or not one or more filters of the network device 100 reflects the state of the terminal 400 may also vary over time. The vertical line shown below the network device 100 indicates the determination of the network device 100 with respect to the operating state of the terminal 400 with the passage of time. The portion where the vertical line is indicated in bold indicates the points at which the network device 100 judges the operation state of the terminal 400 online and the portion where the vertical line is narrowly displayed indicates that the network device 100 As shown in FIG.

4, when the terminal 400 is online, the terminal 400 may transmit an online status message to the communication unit 230 of the network device 100 (S410). For example, the online status message may be a message or packet of an Address Resolution Protocol (ARP).

When the communication unit 230 receives the on-line status message of the terminal 400, the status determination unit 240 may determine the operation status of the terminal 400 online, and the terminal 400 may determine that the one or more filters It can be a target.

According to an embodiment of the present invention, when at least one of the filters is a blocking filter and the terminal 400 is an object of communication blocking and the terminal 400 is determined to be online, ) May be configured to match one or more filters. For example, the filter component 210 may configure one or more filters such that one or more filters include the identifier of the terminal 400. [ Here, the configuration of the filter may mean a change in the value of the filter. In other words, the filter configuration unit 210 may set the value of one of the one or more filters to indicate the identifier of the terminal 400. [

According to an embodiment of the present invention, when one or more filters are allowable filters, and the terminal 400 is an object of communication permission and receives an online status message from the terminal 400, One or more filters may be configured such that filter 400 matches one or more filters.

(ii) Next, the communication unit 230 of the network device 100 may transmit an inquiry message to the terminal 400 (S420). For example, the probe message may be a packet or message of a probe ARP.

The online terminal 400 can receive the inquiry message.

(iii) Next, the terminal 400 may transmit a response message to the inquiry message to the communication unit 230 (S430). For example, the response message may be a message or a packet of the ARP.

When the communication unit 230 receives the response message from the terminal 400, the state determination unit 240 can determine that the operation state of the terminal 400 is on-line.

(iv) Next, the communication unit 230 of the network device 100 can transmit an inquiry message to the terminal 400 (S440). For example, the probe message may be a packet or message of the probe ARP.

As shown in steps S420 and S440, according to an embodiment of the present invention, the communication unit 230 may periodically transmit an inquiry message to the terminal 400. [

As shown in FIG. 4, at the time when the communication unit 230 transmits the second inquiry message, the terminal 400 has already been converted into the offline operating state. Accordingly, the terminal 400 may not receive the second inquiry message, do not recognize the receipt of the inquiry message, or may not transmit a response message to the inquiry message to the communication unit 230.

(v) Next, since the terminal 400 does not transmit a response message, a timeout may occur in the network device 100. FIG. If a timeout occurs for the response message, the state determination unit 240 may determine that the operation state of the terminal 400 is offline.

According to an embodiment of the present invention, the state determination unit 240 may determine the operation state of the terminal 400 according to whether or not the terminal 400 has received the response message to the inquiry message. The state determination unit 240 waits for a response message to the inquiry message for a predetermined time after transmission of the inquiry message and determines that the terminal 400 is offline if the response message is not received by the communication unit 230 for a predetermined period of time can do.

According to an embodiment of the present invention, when the state determination unit 240 determines that the operation state of the terminal 400 is offline, the terminal 400 may be excluded from objects to be represented by one or more filters. For example, when at least one filter is a blocking filter and the terminal 400 is determined to be off-line, the filter configuration unit 210 determines whether the terminal 400 is an off- May not be matched to one or more filters. For example, the filter component 210 may configure one or more filters such that one or more filters do not include the identifier of the terminal 400. [ That is, the filter configuration unit 210 may set values of one or more filters such that there is no filter indicating the identifier of the terminal 400 among the one or more filters.

FIG. 5 is a diagram illustrating a process of changing values of one or more filters of the network device 100 according to a change of operation states of one or more terminals according to an exemplary embodiment of the present invention.

5, a first terminal " A "511, a second terminal " B" 512 and a third terminal "C" 513 are shown as one or more terminals, The state 520 of the filters and the state 530 of the filters reflecting the operating state of the terminals are shown. In other words, the states 520 of the filters that do not reflect the operational states of the terminals may represent the states of the filters according to the prior art, and the states 530 of the filters reflecting operational states of the terminals may be May represent the state of the filters according to the present invention.

5, one or more filters of the network device 100 may be a blocking filter or a permissive filter and may include a first terminal "A" 511, a second terminal "B" 512 and a third terminal "C" 513 may be terminals whose communication is blocked or terminals which are allowed to communicate.

5, the vertical lines shown below each terminal of the first terminal " A "511, the second terminal" B "512 and the third terminal" C "513, State. In Fig. 5, each horizontal dotted line represents one viewpoint. In Fig. 5, the first point of view, the second point of view, and the third point of view are shown as vertical lines.

The state 520 of the filters that do not reflect the operating states of the terminals and the state 520 of the filters that reflect the operating states of the terminals may indicate the time of one or more filters at each of the time points .

As shown in FIG. 5, if one or more filters are set without reflecting the operating states of the terminals, regardless of whether the operating states of the terminals are changed to on-line and off-line, 5 ", all of the identifiers of the terminal" A "511, the second terminal" B "512 and the third terminal" C "513. If one or more filters are required to represent all identifiers, and if the number of one or more filters is two or less, then one or more filters can not accurately represent the terminals that are the subject of blocking or permitting.

According to one embodiment of the present invention, one or more filters may be set to reflect the operational state of one or more terminals. In other words, at each time point of FIG. 5, one or more filters may be set to indicate only the remaining terminals, except the off-line terminals among the terminals that are subject to blocking or permission. Thus, as shown in FIG. 5, even though there are two or more filters, one or more filters at each time point can accurately represent the terminals that are the subject of blocking or permitting.

That is to say, in the prior art, one or more filters could represent only those terminals that would be blocked from communicating as many as the number of filters, but according to one embodiment of the present invention, It is possible to indicate a terminal whose communication is to be blocked by the number of terminals added.

The embodiments of the present invention described above can be implemented in the form of program instructions that can be executed through various computer components and recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, and the like, alone or in combination. The program instructions recorded on the computer-readable recording medium may be those specially designed and constructed for the present invention or may be those known and used by those skilled in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tape, optical recording media such as CD-ROMs and DVDs, magneto-optical media such as floptical disks, media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules for performing the processing according to the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, Those skilled in the art will appreciate that various modifications, additions and substitutions are possible, without departing from the scope and spirit of the invention as disclosed in the accompanying claims.

Therefore, the spirit of the present invention should not be construed as being limited to the above-described embodiments, and all of the equivalents or equivalents of the claims, as well as the following claims, I will say.

100: Network device
210:
220:
230:
240:

Claims (21)

A method for controlling communication of a terminal using a network device,
(a) configuring one or more filters for blocking or allowing communication of the one or more terminals based on operational status of one or more terminals, and
(b) the network device is configured to block or allow communication of the one or more terminals by using the configured one or more filters
Lt; / RTI >
Characterized in that the operating state includes on-line and off-line,
Wherein the network device configures the one or more filters to block or allow the communication to one or more remaining terminals of the one or more terminals except for the terminal that is offline, And performing the control on one or more terminals. delete delete The method according to claim 1,
In the step (a)
Wherein the network device comprises configuring the one or more filters to indicate to the one or more remaining terminals of the one or more remaining terminals that the communication is blocked, Lt; / RTI > The method according to claim 1,
Wherein the at least one filter is a hardware TCAM (Ternary Content Addressable Memory). delete The method according to claim 1,
In the step (a)
Wherein the network device transmits an inquiry message to the terminal and determines the operation status of the terminal according to whether the terminal has received a response message to the inquiry message from the terminal. 8. The method of claim 7,
In the step (a)
And the network device periodically transmits the inquiry message to the terminal. 8. The method of claim 7,
In the step (a)
Wherein the network device waits for the response message for a predetermined time after transmission of the inquiry message and determines that the terminal is offline if the response message is not received for the predetermined time. The method according to claim 1,
Wherein the one or more filters are permissive filters indicating the terminals that are allowed to communicate. 1. A network device for controlling communication of a terminal,
A filter constructing one or more filters for intercepting or allowing communication of the one or more terminals based on the operational state of the one or more terminals,
Wherein the network device comprises: a communication controller for blocking or allowing communication of the one or more terminals by using the one or more filters configured;
Lt; / RTI >
Characterized in that the operating state includes on-line and off-line,
Wherein the filter configuration unit configures the one or more filters to block or allow the communication to one or more remaining terminals of the one or more terminals except the offline terminal, And performs the control for one or more terminals. delete delete 12. The method of claim 11,
Wherein the filter constructor is configured to configure the one or more filters to indicate to the one or more remaining terminals of the one or more remaining terminals that the communication is blocked, Characterized in that. 12. The method of claim 11,
Wherein the one or more filters are hardware TCAM (Ternary Content Addressable Memory). delete 12. The method of claim 11,
A communication unit for transmitting an inquiry message to the terminal, and
A state determination unit for determining the operation state of the terminal according to whether the communication unit has received a response message to the inquiry message from the terminal,
≪ / RTI > 18. The method of claim 17,
Wherein the communication unit periodically transmits the inquiry message to the terminal. 18. The method of claim 17,
Wherein the status determination unit waits for the response message for a predetermined time after the transmission of the inquiry message and determines that the terminal is offline if the communication unit does not receive the response message for the predetermined time. 12. The method of claim 11,
Wherein the one or more filters are permissive filters that indicate the terminal to which the communication is allowed. A computer-readable recording medium having recorded thereon a computer program for executing the method according to any one of claims 1, 4 to 5, and 7 to 10.

Images