ACCOUNT ABUSE DETECTION OR PREVENTION DEVICE, DATA COLLECTION DEVICE, AND ACCOUNT ABUSE DETECTION OR PREVENTION PROGRAM

• US 20090281816A1
• Filed: 08/23/2006
• Published: 11/12/2009
• Est. Priority Date: 08/29/2005
• Status: Abandoned Application

• Current Assignee: Daikin Industries Ltd
• Original Assignee: Daikin Industries Ltd
• Inventors: Houga, Shozo, Kawai, Seiji
• Application Number:
  US12/064,977
• Publication Number:
  US 20090281816A1
• Time in Patent Office: Days
• US Class Current: 705/346
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06Q 30/0281 Customer communication at a business location, e.g. providing product or service information, consulting
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection

Abstract

An account abuse detection or prevention device, a data collection device, and an account abuse detection or prevention program, which are capable of promptly detecting or preventing abuse of an account.

An account abuse detection device (6) includes an access-amount-related value information receiving unit (11) and a detection unit (12). The access-amount-related value information receiving unit (11) receives access-amount-related value information from a management device (3). The management device (3) manages a specific account. The specific account is used when transmitting data from a plurality of data transmission devices (2) to a data collection device (5) via a public network. Access-amount-related value information is related to an access-amount-related value. The access-amount-related value is related to the amount of access by the public network (4) through the account. The detection unit (12) compares the access-amount-related value to a predetermined threshold value to detect abuse of the account.

Claims

1. An account abuse detection device comprising:

an access-amount-related value information receiving unit configured to receive access-amount-related value information from a management device, the management device being configured to manage a specific account used when transmitting data from a plurality of data transmission devices to a data collection device via a public network, the access-amount-related value information being based on an access-amount-related value related to the amount of access to the public network through the account; and

a detection unit configured to compare the access-amount-related value to a predetermined threshold value to detect abuse of the account.

2. The account abuse detection device according to claim 1, wherein

the access-amount-related value information receiving unit receives the access-amount-related value information for a plurality of predetermined periods with the threshold value being a difference threshold value based on a difference in the access-amount-related value in each predetermined period, and

the detection unit compares a difference in the access-amount-related value in each predetermined period to the difference threshold value to detect abuse of the account.

3. The account abuse detection device according to claim 1 further comprising:

an access-amount-related value prediction unit configured to determine a predicted trend value of an access-amount-related value from a history of the access-amount-related value,

the threshold value being the predicted trend value, and

the detection unit comparing the access-amount-related value to the predicted trend value to detect abuse of the account.

4. The account abuse detection device according to claim 1, wherein

the access-amount-related value is an access fee for using the public network.

5. The account abuse detection device according to claim 4, wherein

the access-amount-related value information receiving unit receives the access-amount-related value information for a plurality of predetermined periods, and the account abuse detection device further comprises:

an access fee estimation unit configured to estimate the access fee from an amount of incoming data in each predetermined period, the incoming data being received by the data collection device,

the threshold value being an estimated total value that is an estimated value based on the access fee determined by the access fee estimation unit, and

the detection unit comparing the access fee in each predetermined period to the estimated total value to detect abuse.

6. The account abuse detection device according to claim 4, wherein

the access-amount-related value information receiving unit receives the access-amount-related value information for a plurality of predetermined periods, and the account abuse detection device further comprises:

an access fee difference estimation unit configured to estimate a difference in the access fee in each predetermined period from an amount of incoming data in each predetermined period, the incoming data being received by the data collection device

the threshold value being is an estimated difference value that is an estimated value based on the difference in the access fee determined by the access fee difference estimation unit, and

the detection unit comparing the difference in the access fee in each predetermined period to the estimated difference value to detect abuse.

7. The account abuse detection device according to claim 4, wherein

the access-amount-related value information receiving unit receives the access-amount-related value information for a plurality of predetermined periods, and the account abuse detection device further comprises:

an access fee estimation unit configured to estimate a access fee from an amount of incoming data in each predetermined period, the incoming data being received by the data collection device; and

an access fee difference estimation unit configured to estimate a difference in the access fee in each predetermined period from the amount of incoming data in each predetermined period, the incoming data being received by the data collection device,

the threshold value being an estimated fee ratio of an estimated difference value to an estimated total value, the estimated difference value being an estimated value based on the difference in the access fee determined by the access fee difference estimation unit, and the estimated total value being an estimated value based on the access fee determined by the access fee estimation unit, and

the detection unit comparing a fee ratio of the difference in the access fee in each predetermined period to the total of the access fee to the estimated fee ratio to detect abuse.

8. The account abuse detection device according to claim 4, wherein

the access-amount-related value information receiving unit receives the access-amount-related value information for a plurality of predetermined periods, and the account abuse detection device further comprises:

an access fee prediction unit configured to determine a predicted fee trend value of the access fee from a history of an amount of incoming data in each predetermined period, the incoming data being received by the data collection device,

the threshold value being a predicted fee trend value, and

the detection unit comparing the access fee in each predetermined period to the predicted fee trend value to detect abuse of the account.

9. The account abuse detection device according to claim 1, wherein

the data transmission device is an equipment monitoring device.

10. The account abuse detection device according to claim 1, wherein

the threshold value is a data collection device side access-amount-related value related to an amount of access to the public network by the data collection device through the account, and

the detection unit compares a management device side access-amount-related value to the data collection device side access-amount-related value to detect abuse of the account to detect abuse of the account, the management device side access-amount-related value being related to the amount of access to the public network by the management device through the account.

11. A data collection device comprising:

an access-amount-related value information receiving function to receive access-amount-related value information from a management device, the management device being configured to manage a specific account used when transmitting data from a plurality of data transmission devices to the data collection device via a public network, the access-amount-related value information being based on an access-amount-related value related to the amount of access to the public network through the account, and

a detection function to compare the access-amount-related value to a predetermined threshold value to detect abuse of the account.

12. An account abuse detection program comprising:

an access-amount-related value information receiving step of receiving access-amount-related value information from a management device, the management device, being configured to manage a specific account used when transmitting data from a plurality of data transmission devices to a data collection device via a public network, the access-amount-related value information being based on an access-amount-related value related to the amount of access to the public network through the account; and

a detection step of comparing the access-amount-related value to a predetermined threshold value to detect abuse of the account.

13. An account abuse prevention device, comprising:

an account memory unit configured to store a first account, a second account, and passwords for each of the first and second accounts, the passwords being used when transmitting data from a plurality of data transmission devices to a data collection device via a public network in a plurality of predetermined periods;

an account selection unit configured to alternately select between the first account and the second account in each predetermined period;

a password setting information transmission unit configured to transmit password setting information to the data transmission device when access is made by the data transmission device through one of the first and second accounts selected by the account selection unit, the password setting information being based on a setting condition of the password for the other one of the first and second accounts;

a password rewriting unit for a management device, the password rewriting unit being configured to rewrite the password for the other one of the first and second accounts every time one of the predetermined periods elapses, the management device being configured to manage the first account, the second account, and the passwords for each of the first and second accounts; and

a password changing unit configured to change the password for one of the first and second accounts every time one of the predetermined periods elapses, the passwords being stored in the account memory unit.

19. The account abuse prevention device according to claim 13, further comprising:

a management database for managing a transmission state of the password setting information.

20. The account abuse prevention device according to claim 19, wherein

the management database is configured to store a status of a transmission state of the password setting information.

21. The account abuse prevention device according to claim 19, wherein the management database is integrated with the account memory unit.

14. An account abuse prevention device (128) comprising:

an account memory unit configured to store a plurality of accounts and passwords for each account, the passwords being used when transmitting data from a plurality of data transmission devices to a data collection device via a public network, in a manner corresponding to each data transmission device in a plurality of predetermined periods;

a password changing unit configured to change each password for each account in each predetermined period;

a password setting information transmission unit configured to transmit password setting information to the data transmission devices when access is made by the data transmission device, the password setting information being based on a setting condition of the password; and

a password rewriting unit for a management device, the password rewriting unit being configured to rewrite the password every time one of the predetermined periods elapses the management device being configured to manage the plurality of accounts and the passwords for each account.

15. The account abuse prevention device according to claim 14, further comprising:

a management database for managing a transmission state of the password setting information.

16. The account abuse prevention device according to claim 15, wherein

the management database is configured to store a status of a transmission state of the password setting information.

17. The account abuse prevention device according to claim 15, wherein

the management database is integrated with the account memory unit.

18. An account abuse prevention program comprising:

an account selecting step of alternately selecting between a first account and a second account in each of a plurality of predetermined periods, the first and second accounts being used when transmitting data from a plurality of data transmission devices to a data collection device via a public network;

a password setting information transmitting step of transmitting password setting information to the data transmission device, when access is made by the data transmission device through one of the first and second accounts that is selected, the password setting information being based on a setting condition of a password for the other one of the first and second accounts;

a password rewriting step for a management device, the password rewriting step of rewriting the password for the other one of the first and second accounts every time one of the predetermined periods elapses, the management device being configured to manage the first account, the second account, and the passwords for each account; and

a password changing step of changing the password for one of the first and second accounts every time one of the predetermined periods elapses.