The present disclosure relates to a determination apparatus, a gateway, a determination method, and a determination program.
Heretofore, failures of Internet of things (IoT) devices have been determined by a script for alive monitoring, state monitoring by an alarm from each device, and execution of a command to confirm the normality of operation (see, for example, Non Patent Literatures 1 and 2).
Non Patent Literature 1: Nihon Unisys, “IoT Device Management Function”, [online], [Searched on Aug. 3, 2018], Internet (https://www.unisys.co.jp/solution/tec/iot/bp/bp02.html) Non Patent Literature 2: Hitachi Solutions, “Introduction of IoT/M2M Data Collection, Analysis and Utilization Infrastructure”, [online], [Searched on Aug. 3, 2018]; Internet (https://www.hitachi-solutions.co.jp/reports/dms2016/pdf/presentation06.pdf)
However, related-art failure determination techniques are problematic in that procedures are complex and may require extra communication costs.
For example, a method of executing a command to confirm the normality of operation requires preparation of a command matching the operation of each device, which makes it complicated to deal with. In addition, even in the case of using any of script, alarm, and command to determine a failure as described above, for analysis of data, data communication costs occur between the device and a management cloud or the like. Examples of the communication costs include processing loads in a carrier network and communication charges of the user.
In order to solve the problems described above and attain an object, a determination apparatus includes a collection unit that collects information of traffic generated when data is transmitted from a device connected to a network, and a determination unit that determines that an abnormality occurs in the device that generated the traffic when the information of the traffic collected by the collection unit satisfies a determination condition preset based on a traffic pattern of each of a plurality of the devices.
According to the present disclosure, a failure of an IoT device can be easily determined at low costs.
Hereinafter, an embodiment of a determination apparatus, a gateway, a determination method, and a determination program according to the present application will be described in detail with reference to the drawings. Note that the present disclosure is not limited to the embodiments described below. Note that the virtual CPE in the embodiment is an example of a determination apparatus.
First, a determination processing performed by a determination system having a determination apparatus will be described with reference to
The cloud server 10 is provided in a cloud network 3. The virtual CPE 20 is provided between the cloud network 3 and a carrier network 2. The IoT gateway 30 is connected to the carrier network 2. The operator terminal 40 is a terminal operated by an operator of the determination system 1. The operator terminal 40 can transmit and receive data to and from the virtual CPE 20.
The IoT device 50 is accommodated in the IoT gateway 30. Examples of the IoT device 50 include a security camera, an automobile, a drone, a home appliance, and various sensors. The IoT device 50 transmits predetermined data to the cloud server 10 according to a traffic pattern. Examples of the traffic pattern include continuous communication, periodic communication, and occasional (random) communication.
When the IoT device 50 continuously transmits data, the traffic pattern is continuous communication. When the IoT device 50 transmits data at a predetermined time period (e.g., once per minute), the traffic pattern is periodic communication. When the IoT device 50 transmits data at a timing at which prescribed processing is performed or at a random timing, the traffic pattern is occasional communication.
Here, determination processing will he described. First, as illustrated in
Here, when the IoT device 50 is configured, the operator terminal 40 inputs information regarding the IoT device 50 to the virtual CPE 20 by an operator's operation (Step S2). Then, the operator terminal 40 sets, with respect to the virtual CPE 20, a determination condition based on the determination pattern by an operator's operation (Step S3). The virtual CPE 20 may automatically generate and set the determination condition. In addition, the virtual CPE 20 starts collecting information of traffic generated when data is transmitted from the IoT device 50 to the cloud server 10 (Step S4).
With reference to
At this time, the virtual CPE 20 determines that an abnormality occurs in the IoT device 50 based on the collected traffic information. Then, the virtual CPE 20 transmits an alarm to the operator terminal 40 (Step S6). Further, the virtual CPE 20 instructs the IoT gateway 30 accommodating the IoT device 50 to stop transferring data transmitted from the IoT device 50 and accumulate the data (Step S7).
In addition, the operator can confirm the traffic information using the operator terminal 40, manually determine the presence or absence of an abnormality, and consider responses such as replacement of the device (Step SS). The operator terminal 40 can refer to data accumulated in the IoT gateway 30 in response to an instruction from the virtual CPE 20 (Step S9).
A determination pattern will be described below using
As illustrated in
The value pattern in the present embodiment includes a fixed value, an upper limit value, a lower limit value, and a random. The value pattern is determined based on the amount of data transmitted by the IoT device 50 during normal operation. For example, the value pattern of the security camera is determined based on file size of image data transmitted when the security camera is normally operating.
For example, when the file size of the image data transmitted by the security camera during normal operation is constant at all times, the value pattern of the security camera is the fixed value. For example, when the security camera has an upper limit or a lower limit to the file size of the image data transmitted during normal operation, the value pattern of the security camera is the upper limit value or the lower limit value. For example, when the file size of the image data transmitted during normal operation of the security camera is not constant, and has neither upper limit nor lower limit, the value pattern of the security camera is random.
As illustrated in
Using
The determination pattern A-2 is assigned when the traffic pattern is the continuous communication and the value pattern is random. The determination system 1 determines, for the IoT device 50 for which the determination pattern A-2 is assigned, that there is an abnormality when there is no communication within the defined period.
Using
The determination pattern B-2 is assigned when the traffic pattern is the periodic communication and the value pattern is random. The determination system 1 determines, for the IoT device 50 for which the determination pattern B-2 is assigned, that there is an abnormality when there is communication but not in the defined period.
As illustrated in
The determination pattern C-2 is assigned when the traffic pattern is the occasional communication and the value pattern is random. In this case, the determination system 1 can transmit, to the operator terminal 40, a message indicating that the abnormality determination is entrusted to the operator.
Using
The management unit 21 manages information regarding the IoT device 50. The management unit 21 includes a device information transmission and reception unit 211, device determination information 213, and device information 212. The device information transmission and reception unit 211 transmits and receives the device information 212 and the device determination information 213.
For example, the device information 212 is information regarding the IoT device 50 input from the operator terminal 40 in Step S2 in
The collection unit 22 collects traffic information generated when data is transmitted from the IoT device 50 connected to the network. The collection unit 22 includes a traffic information collection unit 221, a traffic information calculation unit 222, and traffic information 223. The traffic information collection unit 221 receives an input of data indicating traffic information. The traffic information calculation unit 222 calculates predetermined calculation based on the input data, and acquires the traffic information 223.
When the traffic information collected by the collection unit 22 satisfies the determination condition preset based on the traffic pattern of each of the JOT devices 50, the determination unit 23 determines that there is an abnormality in the IoT device 50 that generates the traffic.
The determination unit 23 includes a determination information transmission and reception unit 231, a determination processing implementation unit 232, and determination processing information 233. The determination information transmission and reception unit 231 transmits and receives the determination condition, the traffic information to be determined, and determination results. The determination processing information 233 is the traffic information to be determined. The determination processing implementation unit 232 uses the determination condition and the traffic information to be determined to implement actual determination.
When the determination unit 23 determines that an abnormality occurs in the IoT device 50, the instruction unit 24 instructs the IoT gateway 30 accommodating the IoT device 50 to accumulate data to be transmitted from the IoT device 50. The instruction unit 24 includes an instruction transmission and reception unit 241, an instruction implementation unit 242, and CPE instruction information 243. The instruction transmission and reception unit 241 transmits and receives instructions. The instruction implementation unit 242 generates an instruction based on the determination result from the determination unit 23 and passes the instruction to the instruction transmission and reception unit 241. The CPE instruction information 243 is information regarding the IoT gateway 30 and the IoT device 50 to which the instruction is directed.
Using
The instruction management unit 31 manages instructions received from the virtual CPE 20. The instruction management unit 31 includes a CPE instruction transmission and reception unit 311, a CPE instruction processing unit 312, CPE information 313, and a CPE state 314.
The CPE instruction transmission and reception unit 311 receives an instruction from the virtual CPE 20. The CPE instruction processing unit 312 executes the received instruction. In other words, in response to the instruction from the instruction unit 24, the CPE instruction processing unit 312 controls the IoT gateway 30 to stop transferring data transmitted from the specified IoT 50 and accumulate the data. The CPE information 313 is information regarding the IoT device 50 accommodated in the IoT gateway 30. The CPE state 314 is information indicating whether the data accumulation is being performed, and the amount of accumulated data, for each IoT devices 50.
The accumulation unit 32 includes a communication data transmission and reception unit 321 and accumulated communication data 322. The communication data transmission and reception unit 321 receives data transmitted by the IoT device 50 and stores the data as the accumulated communication data 322.
Using
The device information 212 includes CPE_ID, device type, device ID, first to N-th device information. The CPE_ID is information identifying the IoT gateway 30 accommodating the IoT device 50. The device type is a type of IoT device 50. The device ID is information identifying the IoT device 50. The first to N-th device information is specific information regarding the IoT device 50. The first to N-th device information may include the traffic pattern and the value pattern. Note that the CPE ID and the device ID each may be an IP address.
In the example of
The device determination information 213 includes the device ID, the traffic pattern, the value pattern, determination traffic, the determination pattern, a first determination condition, and a second determination condition. When the traffic information collected by the collection unit 22 satisfies the determination condition that is the combination of the determination pattern identified for each traffic pattern of each IoT device 50 and the traffic amount expected for each IoT device 50, the determination unit 23 determines that an abnormality occurs in the IoT device 50 that generates the traffic. At this time, an example of the traffic amount expected for each device 50 is the determination traffic in the device determination information 213.
In the example of
Also, as illustrated in
As illustrated in
Using
In the example of
Also, in the example of
Using
The virtual CPE 20 starts collecting traffic information (Step S103). The IoT device 50 transmits data to the cloud server 10 via the virtual CPE 20 (S104, S105). At this time, the virtual CPE 20 determines whether the collected traffic information matches the determination condition.
When an abnormality occurs in the IoT device 50 (Step S106) and an abnormality occurs in the traffic (Step S107), the virtual CPE 20 determines the abnormality based on traffic information, and when there is an abnormality (Step S108), transmits an alarm to the operator terminal 40 (Step S108).
The virtual CPE 20 further instructs the IoT gateway 30 accommodating the abnormal IoT device 50 to accumulate data transmitted from the IoT device 50 (Step S109). Then, the IoT gateway 30 starts accumulating data (Step S110).
Thereafter, the IoT device 50 continues to transmit data in the state where the abnormality has occurred (Step S111). However, the transmitted data is accumulated as the accumulated communication data 322. Then, the operator can confirm the accumulated data via the operator terminal 40, and determine that the IoT device 50 has a failure when there is an abnormality in the data (Step S112).
The collection unit 22 collects traffic information generated when data is transmitted from the IoT device 50 connected to the network. When the traffic information collected by the collection unit 22 satisfies the determination condition preset based on the traffic pattern of each IoT device 50, the determination unit 23 determines that an abnormality occurs in the IoT device 50 that generates the traffic. In this manner, the virtual CPE 20 makes a determination using the determination condition based on the traffic pattern of each IoT device 50 and thus, does not need to prepare a command for each IoT device 50. The virtual CPE 20 can also use information regarding traffic generated in normal operation of the IoT device 50 to make a determination. Thus, according to the present embodiment, it is possible to easily determine a failure of the IoT device at low costs.
When the determination unit 23 determines that an abnormality occurs in the IoT device 50, the instruction unit 24 instructs the IoT gateway 30 accommodating the IoT device 50 to accumulate data to be transmitted from the IoT device 50. As a result, according to the present embodiment, communication data generated by the IoT device 50 after the IoT device 50 determined to be abnormal is not lost. Note that the accumulated data may be transmitted to the cloud server 10 and merged after the abnormality is removed or after it is found that there is no abnormality.
When the traffic information collected by the collection unit 22 satisfies the determination condition that is the combination of the determination pattern identified for each traffic pattern of each IoT device 50 and the traffic amount expected for each IoT device 50. the determination unit 23 determines that an abnormality occurs in the IoT device 50 that generates the traffic. Thus, in the present embodiment, the determination conditions can be patterned. Therefore, the operator can easily create the determination condition by simply setting the specific numerical value to the determination pattern.
Further, each illustrated component of each apparatus is functional and does not necessarily need to be physically configured as illustrated in the drawing. That is, a specific form of distribution and integration of the respective apparatuses is not limited to a form illustrated in the drawings, and all or some of the apparatuses can be distributed or integrated functionally or physically in any units according to various loads, and use situations. Further, all or any part of each processing function to be performed in each apparatus can be implemented by the CPU and a program being analyzed and executed by the CPU, or can be implemented as hardware by wired logic.
In addition, all or some of the processes described as being performed automatically among the processes described in the present embodiment can be performed manually, or all or some of the processes described as being performed manually can be performed automatically by a known method. The processing procedures, the control procedures, the specific names, and information including various data and parameters described in the specification or illustrated in the drawings may be freely changed except for specified cases.
As an embodiment, the virtual CPE 20 or the IoT gateway 30 can be implemented by installing a determination program for executing the determination processing described above on a desired computer as packaged software or on-line software. For example, by causing an information processing apparatus to execute the determination program described above, the information processing apparatus can be configured to function as the virtual CPE 20. Here, the information processing apparatus includes a desktop or laptop personal computer. In addition, as the information processing apparatus, a mobile communication terminal such as a smart phone, a mobile phone, and a Personal Handyphone System (PHS), or a slate terminal such as Personal Digital Assistant (PDA) are included in the category.
In addition, the virtual CPE 20 can be implemented as a determination server apparatus that has a terminal apparatus used by a user as a client and provides services regarding the determination processing described above to the client. For example, the determination server apparatus is implemented as a server apparatus that provides a determination service in which traffic information is input and a determination result is output. In this case, the determination server apparatus may be implemented as a web server or may be implemented as a cloud that provides services regarding the determination processing through outsourcing.
The memory 1010 includes a Read Only Memory (ROM) 1011 and a RAM 1012. The ROM 1011 stores, for example, a boot program such as a Basic Input Output System (BIOS). The hard disk drive interface 1030 is connected to a hard disk drive 1090. The disk drive interface 1040 is connected to a disk drive 1100. For example, a removable storage medium such as a magnetic disk or an optical disc is inserted into the disk drive 1100. The serial port interface 1050 is connected, for example, to a mouse 1110 and a keyboard 1120. The video adapter 1060 is connected, for example, to a display 1130.
Here, the hard disk drive 1090 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. That is, a program defining each processing of the virtual CPE 20 is implemented as the program module 1093 in which computer-executable code is described. The program module 1093 is stored, for example, in the hard disk drive 1090. For example, the program module 1093 for executing the same processing as the functional configuration of the virtual CPE 20 is stored in the hard disk drive 1090. Note that the hard disk drive 1090 may be replaced by an SSD.
Setting data used in the processing of the embodiments described above is stored as the program data 1094, for example, in the memory 1010 or the hard disk drive 1090. The CPU 1020 reads the program module 1093 and the program data 1094 stored in the memory 1010 or the hard disk drive 1090 into the RAM 1012 as necessary, and executes the processing of the above-described embodiments.
The program module 1093 and the program data 1094 are not limited to being stored in the hard disk drive 1090. For example, the program module 1093 and the program data 1094 may be stored in a removable storage medium and read by the CPU 1020 via the disk drive 1100 or the like. Alternatively, the program module 1093 and the program data 1094 may be stored in other computers connected via a network (a Local Area Network (LAN), and a Wide Area Network (WAN)). Then, the program module 1093 and the program data 1094 may be read from the other computer by the CPU 1020 via the network interface 1070.
Number | Date | Country | Kind |
---|---|---|---|
2018-155841 | Aug 2018 | JP | national |
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/JP2019/032711 | 8/12/2019 | WO | 00 |