TWI475845B - Remote management of network equipment management system and its management and network equipment operation method - Google Patents

Description

Remote control network device management system and its management terminal and network device operation method

The present invention relates to a management system for a remote control network device, and a method for operating the same and a network device, and more particularly to a system and method for remotely controlling and managing a network device by means of a short message.

In current network devices (for example, routers, wireless network sharers), the management of these network devices is mostly based on the management mechanism of the architecture on the Ethernet, such as: SNMP, WEB GUI, SSH, TELNET, etc. The way, etc., but these are managed and maintained through the physical network route. Once the physical network has a problem, the management and maintenance mechanism is useless, and it is incapable of knowing what is wrong with the equipment. It is impossible to solve the problem that occurs in the device. The administrator of the management terminal must personally go to the installation location of the network device to connect the network device for maintenance through the maintenance tool. Therefore, there are still many problems to be overcome in the existing network device management.

The main purpose of the present invention is to provide a remote control network device management system and a management method thereof and a network device operation method. The administrator does not need to go to the installation location of the network device in person, and can use the short message mode remotely. Control network devices to increase the convenience of network device maintenance and management.

A secondary object of the present invention is to provide a remote control network device management system and a management method thereof and a network device operation method. Maintenance and management of network equipment can still be implemented when there is a disconnection between the standby and physical network lines.

To this end, the present invention provides a management system for a remote control network device, the structure comprising: a management terminal, sending a start notification message or a control command message, the control command message includes at least one control command; and at least one The network device has the function of supporting the sending and receiving of the short message, and receives the initial notification message sent by the management terminal to generate a short message sent back to the management terminal, and the management terminal encrypts the control instruction according to the encryption key. And sending the encrypted control command message to the network device, so that the network device decrypts and executes the control command, and after each control command is completed, an instruction is generated to complete the message reply to the management terminal.

The present invention further provides an operation method for a management terminal applied to a management system of a remote control network device, the steps comprising: sending a start notification message to a network device; receiving an encryption key message sent by the network device; The encryption key encryption control instruction; sending the encrypted control instruction brief message to the network device; and receiving the instruction sent by the network device to complete the short message.

Moreover, the present invention further provides a method for operating a network device applied to a management system of a remote control network device, the steps of which are as follows: reading a short message, checking whether at least one sent by the management terminal is received In the new newsletter, when the newsletter receives the new newsletter, it determines whether the new newsletter is the start notification message. If the new newsletter is the start notification message, the encryption key is generated, and the encryption key is transmitted to the management terminal by using the short message transmission mode. Otherwise, The new newsletter is the control command message, decrypting the control command encrypted in the control command message to execute the control command, and after executing the control command, replying the command Complete the SMS to the management terminal and return to the step of reading the SMS. Conversely, when the SMS does not receive the new SMS, the process of reading the SMS is continued.

Please refer to FIG. 1 and FIG. 2 , which are schematic diagrams of the SMS transmission sequence diagram of the management system of the remote control network device of the present invention and an operation flowchart of the network device thereof. As shown in the figure, the management system includes a management terminal 11 and at least one network device 13. The management terminal 11 can send and receive a short message through a communication device, such as a mobile phone, a computer or other device capable of sending and receiving a short message, and the network device 13 is A 3G network device includes a communication module for transmitting and receiving a short message. The administrator of the management terminal 11 of the present invention can transmit a short message to the network device 13 to perform manipulation management on the network device 13.

As shown in FIG. 2, the network device 13 of the present invention receives the operation program for managing the short message sent by the management terminal 11, and the steps are as follows: First, in step S201, when the network device 13 is powered on, the short message management resident program is executed. It will start to start until the device 13 is turned off to stop the program.

Step S202, after the program is started, it will enter the internal short message 匣131 for reading to check whether the short message 匣131 receives at least one new short message sent by the management terminal 11.

In step S203, when the new message is received by the message frame 131, it is determined whether the new message is a start notification message (SMS-INT) 101.

If the new short message is the start notification message (SMS-INT) 101, step S204 is performed, and the network device 13 generates an encryption key (KEY), and the encryption key (KEY) is generated by a random function. Proceeding to step S205, the encryption key (KEY) is embedded in a short message 102, and the network device 13 transmits the encrypted key short message (SMS-KEY) 102 to the management terminal 11 by means of a short message transmission.

On the other hand, if the new short message is not the initial notification message (SMS-INT) 101 but an encrypted control command message (SMS-ECMD) 103, step 206 is performed to perform the decryption process of the control command message (SMS-ECMD) 103. And the control command message (SMS-ECMD) 103 includes at least one encrypted control command (ECMD), and the network device 13 substitutes the encryption key (KEY) and the encrypted control command (ECMD) into a symmetric decryption equation. d(X, Y) performs the decryption operation, and the equation is as follows: CMD=d(KEY, ECMD)..................................(1) where CMD is the decrypted plain control command KEY is the encryption key and ECMD is the encrypted control command.

Proceeding to step S207, after obtaining the decrypted control command (CMD), the network device 13 executes a control command (CMD) to perform a corresponding action according to the instruction of the control command (CMD). The control command (CMD) of the present invention includes a reboot command (CMD-RBT), a network connection command (CMD-CNT), and a wake-up specific computer device command in the local area network (CMD-WOL). ), wake up all computer device commands (CMD-WOLALL) in the local area network, an interrupt and re-establish network connection command (CMD-RECNT) or a firmware version of the read network device and related connections Message command (CMD-STATUS). The restart command (CMD-RBT) is used to control the action of the network device 13 to restart, and the network connection command is established. (CMD-CNT) is used to control the network device 13 to establish a 3G network connection, and the wake-up is in the local area network, a specific computer device command (CMD-WOL) is used to wake up a specific computer device in the local area network (LAN) end. The action, the wake-up all computer device command (CMD-WOLALL) in the local area network is used to wake up all the computer devices in the local area network (LAN), the interrupt and re-establish the network connection command (CMD- RECNT) is used to interrupt the current 3G network connection of the network device 13 and re-establish the connection of the 3G network, and the firmware version of the read network device and the related connection message command (CMD-STATUS) Used to read the firmware version of the network device 13 (Firmware Version), connection status, connection time, connection type (UMTS/GPRS), signal strength, International Mobile Subscriber Identity (IMSI), wireless Internet address (WAP-IP), network card number (MAC Address). Furthermore, the control commands (CMD) listed above are only partial instructions, and the management terminal 11 can add various power control commands (CMDs) according to other control requirements.

Finally, in step S208, after executing each control command (CMD), the network device 13 replies with an instruction completion SMS (SMS-OK) 104 to the management terminal 11 to notify the management terminal 11 that the control command (CMD) has been executed. And returning to step S202 of reading the short message 匣 131, continuing to monitor whether the management terminal 11 has a new short message indication.

In the above step S202, if the short message 匣131 does not receive the new short message, the reading of the short message 匣131 in step S202 is continued to check whether a new short message indication received by the management terminal 11 is received.

Furthermore, the newsletter 131 does not receive the new newsletter factor, and the number of newsletters may exceed the capacity limit of the newsletter 匣131 and be transmitted by the management terminal 11. The incoming SMS cannot be imported. Therefore, in another embodiment of the present invention, if the short message 匣131 does not receive the new short message, the subsequent step S2021 may be performed, and the number of the short messages in the short message 匣131 may be checked whether the capacity exceeds the upper limit of the capacity. If the capacity limit is not exceeded, the process returns to step S202 of reading the message , 131. Otherwise, if the number of messages in the message frame 131 has exceeded the capacity limit, step S2022 is continued to delete part of the message in the message frame 131 (for example: the longest time) The message can be returned to the read message 匣 131 step S202 until the message capacity is less than the capacity limit to maintain a certain amount of space to receive the management message transmitted by the management terminal 11.

In addition, in step S202, after the new message is received, the message frame 131 includes a step S2023 for checking the validity of the new message, and the authentication check is performed on the management terminal 11, and the network device 13 pre-set The sender number of the legal management terminal 11 is implanted in the device to determine whether the sender number of the new message matches the pre-implanted sender number. If the two are the same, the new message message can be determined to be a legitimate management terminal. 11 transmits, and proceeds to step S203 of determining whether the new short message is the start notification message (SMS-INT) 101, otherwise, returns to step S202 of reading the message frame 131.

Moreover, in the above step S203, after the new short message is determined as the start notification message (SMS-INT) 101, the step S2031 of checking the validity of the start notification message (SMS-INT) 101 is included, if the start The notification message is transmitted to the legal management terminal 11 to continue to generate the encryption key (KEY) step S204, otherwise, the step S202 of reading the short message is returned, thereby preventing the network device 13 from transmitting the encryption key message. (SMS-KEY) 102 is given to the illegal management terminal 11. In addition, confirm the start notification message After the (SMS-INT) 101 is sent by the legitimate management terminal 11, step S2032 is further executed to delete the start notification message (SMS-INT) 101 from the message frame 131 to reduce the number of messages in the message frame 131.

Moreover, in the above step S203, after the new short message is determined as the control command message (SMS-ECMD) 103, the method further includes a step S2033 of checking whether the limited time limit of the start notification message has expired, if the start notification message (SMS) -INT) 101 is still within a limited period of time, the network device 13 proceeds to step S206 of the encrypted control command (ECMD) in the decryption control command message (SMS-ECMD) 103, and conversely, if the start notification message (SMS-INT) If the expiration of the expiration date is 101, the control command message (SMS-ECMD) 103 is an illegal SMS, the network device 13 does not perform the decryption process, and subsequently, the step S202 of re-entrying the read message 131 is performed. .

Moreover, before the step S207 of not executing the control command (CMD), the network device 13 further includes a step S2061 of checking the legality of the control command (CMD), and if the decrypted control command (CMD) is a legitimate management terminal 11 After the transmission, the step S207 of executing the control instruction is continued, otherwise, the step S202 of returning to the reading message 131 is performed, thereby avoiding the connection of the network device 13 by executing the illegal control command (CMD). Or the internal data of the connected computer equipment was stolen by others. In addition, after the network device 13 executes the control command (CMD) step S207, the network device 13 further performs step S2071 to delete the control command message (SMS-ECMD) 103 from the message frame 131 to reduce the number of messages in the message frame 131.

Please refer to FIG. 3, which is a flowchart of the operation of the management terminal of the present invention, and also refers to FIG. As shown in the figure, the management terminal 11 of the present invention transmits a management brief message. To the network device 13, the management terminal 11 can control the operation procedure of the network device 13 according to the reply message sent back by the network device 13, and the steps are as follows: First, in step S221, the management terminal 11 sends a start notification message. (SMS-INT) 101 to the network device 13 to notify the network device 13 to start the control procedure.

Step S222, after the network device 13 receives the start notification message (SMS-INT) 101, the management terminal 11 receives an encryption key message (SMS-KEY) 102 returned by the network device 13.

In step S223, the management terminal 11 encrypts the control command (CMD) of the clear code by using an encryption key (KEY) embedded in the encryption key short message (SMS-KEY) 102, and the management terminal 11 encrypts the key (KEY) and the clear code. The control command (CMD) is substituted into a symmetric encryption equation e(X, Y) for encryption operation, and the equation is as follows: ECMD=e(KEY), CMD).............................. .... (2) where ECMD is the encrypted control command, KEY is the encryption key, and CMD is the clear control command.

In step S224, after the encryption control command (ECMD), the management terminal 11 embeds the encryption control command (ECMD) in a short message 103, and the management terminal 11 transmits the encrypted control command message (SMS-ECMD) 103 by using the short message transmission mode. The network device 13 is caused to cause the network device 13 to perform a corresponding action.

Finally, in step S225, after executing each control command (CMD), the network device 13 replies with an instruction completion SMS (SMS-OK) 104 to the management terminal 11 to notify the management terminal 11 that all control commands (CMD) have been executed. When finished, the management terminal 11 ends the control program for the network device 13.

As described above, the administrator of the management terminal 11 can remotely control the network device 13 by using the short message mode to increase the convenience of maintenance and management of the network device 13 without going to the installation location of the network device 13 in person. Moreover, when the disconnection condition occurs between the network device 13 and the physical network line, the maintenance and management of the network device 13 can still be performed.

The above is only the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention, that is, the variations, modifications, and modifications of the shapes, structures, features, and spirits described in the claims of the present invention. All should be included in the scope of the patent application of the present invention.

11‧‧‧Management

13‧‧‧Network equipment

131‧‧‧News匣

101‧‧‧Starting notification newsletter

102‧‧‧Encryption Key Newsletter

103‧‧‧Control order newsletter

104‧‧‧Instruction to complete the newsletter

FIG. 1 is a sequence diagram of a short message transmission of a management system of a remote control network device of the present invention.

Figure 2 is a flow chart showing the operation of the network device of the present invention.

Figure 3 is a flow chart showing the operation of the management terminal of the present invention.

11‧‧‧Management

13‧‧‧Network equipment

131‧‧‧News匣

101‧‧‧Starting notification newsletter

102‧‧‧Encryption Key Newsletter

103‧‧‧Control order newsletter

104‧‧‧Instruction to complete the newsletter

Claims (8)

A management system for a remote control network device, the structure comprising: a management terminal, sending a start notification message or a control command message, the control command message includes at least one control instruction; and at least one network device It has the function of supporting the sending and receiving of the short message. After the network device is powered on, it will enter an internal short message and read it to check whether the short message has received at least one new short message sent by the management terminal. The sender number of the new message is matched with the pre-implanted legal sender number of the management terminal, and the new message is the start notification message, to generate a message including the encryption key, which is sent back to the management terminal. And the management terminal encrypts the control command according to the encryption key, and sends the encrypted short message of the control instruction to the network device, and the network device checks whether the limited period of the initial notification message is invalid, if Not returning to the step of reading the short message within a limited period of time, if still within a limited time period, the network device decrypts the encryption in the control command message The control command and executes the control instructions, each control instruction is completed after, completion SMS generates a command reply to the management end. The management system of claim 1, wherein the management terminal sends and receives a short message through a communication device, and the network device comprises a communication module for transmitting and receiving a short message. The management system of claim 1, wherein the control instruction comprises a reboot command, a network connection command, A wake-up of specific computer device commands in the local area network, a wake-up of all computer device commands in the local area network, an interruption and re-establishment of network connection commands or a firmware version of a read network device and associated Line message command. An operating method for a network device applied to a management system according to claim 1 of the patent application, the steps of which are as follows: reading a short message, checking whether at least one new short message sent by the management terminal is received, when Receiving the new short message, and when the sender number of the new short message matches the pre-implanted legal sender number of the management terminal, determining whether the new short message is the start notification message, if the new message The short message is the start notification message, the encryption key is generated, and the encryption key is transmitted to the management terminal by using a short message transmission manner. Otherwise, the new short message is the control instruction brief message, and the limited time limit of the initial notification message is checked. If the failure is not within a limited period of time, returning to the step of reading the short message, if it is still within a limited time period, decrypting the control instruction encrypted in the control instruction message to execute the control instruction, and executing the control instruction After that, replying to the instruction completes the short message to the management terminal, and returns to the step of reading the short message, and vice versa, when the short message does not receive the new short message, it continues The step of reading the newsletter. For example, in the operation method described in claim 4, wherein the newsletter does not receive the new newsletter, the following steps are also included: checking whether the number of newsletters in the newsletter exceeds the capacity limit, if the newsletter in the newsletter The number exceeds the capacity limit, delete the newsletter匣 Some of the newsletters are until the SMS capacity is less than the capacity limit. The method of claim 4, wherein the new newsletter is a step of checking the validity of the start notification message, and the step of checking the start notification is legal. The step of transmitting the encryption key continues to be transmitted by the management terminal, otherwise, the step of reading the short message is returned. The operation method of claim 4, wherein the network device further includes a step of checking the legality of the control instruction before the step of executing the control instruction, if the control instruction is legal, the management terminal After being transmitted, the step of executing the control command is continued, otherwise, the step of reading the message is returned. The operating method of claim 4, wherein the network device substitutes the encryption key and the encrypted control command into a symmetric decryption equation for decryption operation to obtain the decrypted control command.