Communication control apparatus, communication system, information processing apparatus, and communication control method

• US 8,984,088 B2
• Filed: 11/07/2011
• Issued: 03/17/2015
• Est. Priority Date: 01/12/2011
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Umezuki, Takeshi
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): Harris, Christopher C
• Application Number:
  US13/290,418
• Publication Number:
  US 20120179776A1
• Time in Patent Office: 1,226 Days
• Field of Search: None
• US Class Current: 709/217
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 49/357 Fibre channel switches
• CPC Class Codes: H04L 61/5038 for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

In a communication control apparatus, a first receiving unit receives a registration request packet which is generated so as to enable the communication control apparatus to recognize an access requested apparatus, and if determining that the access requested apparatus recognized from the registration request packet exists in a network, registers first identification information identifying an access requesting apparatus which is included in the registration request packet, in a storage unit. A second receiving unit receives an explorer packet, and if determining that first identification information included in the explorer packet has been registered in the storage unit, sends second identification information identifying the own apparatus to the access requesting apparatus.

Claims

1. A communication control apparatus for controlling data communication between a first network and a second network, the communication control apparatus comprising:

a processor;

a memory containing program instructions, the processor coupled to the memory executing the program instructions stored on the memory causing the processor to perform a procedure including;

receiving a first packet sent from an access requesting apparatus over the first network, and upon determining that an access requested apparatus recognized from the received first packet exists in the second network, registering first identification information included in the received first packet in a storage unit of the communication control apparatus, the first packet being generated so as to include the first identification information identifying the access requesting apparatus and to enable communication control apparatuses which receives the first packet over the first network to recognize the access requested apparatus;

receiving a second packet including the first identification information over the first network, the second packet being sent by multicast to search for a communication control apparatus connected to a network which the access requested apparatus is connected to;

upon determining that the first identification information included in the received second packet is registered in the storage unit of the communication control apparatus, sending second identification information identifying the communication control apparatus to the access requesting apparatus; and

upon determining that the first identification information included in the received second packet is not registered in the storage unit of the communication control apparatus, preventing sending of the second identification information to the access requesting apparatus.

2. The communication control apparatus according to claim 1, wherein, upon receipt of the first packet over the first network,

the processor transfers the received first packet to another apparatus adjacent to the communication control apparatus on the first network upon determining that the access requested apparatus recognized from the received first packet does not exist in the second network;

and

the processor terminates transfer of the received first packet upon determining that the access requested apparatus recognized from the received first packet exists in the second network.

3. The communication control apparatus according to claim 1, wherein:

the first packet includes the first identification information encrypted with third identification information identifying the access requested apparatus; and

the processor receives the first packet, consults an apparatus list having registered therein identification information of apparatuses existing in the second network to extract the identification information, and determines that the access requested apparatus exists in the second network connected to the communication control apparatus in a case where the first identification information included in the received first packet is successfully decrypted with the extracted identification information.

4. The communication control apparatus according to claim 1, wherein:

the first packet includes condition information indicating communication state conditions for a communication path;

the processor receives the first packet over the first network, and selects a communication path having a communication state satisfying the condition information included in the received first packet upon determining that the access requested apparatus recognized from the received first packet exists in the second network; and

the processor receives the second packet over the first network, and determines the selected communication path as a communication path to communicate with the access requesting apparatus upon determining that the first identification information included in the received second packet is registered in the storage unit.

5. The communication control apparatus according to claim 4, wherein:

upon determining that the access requested apparatus recognized from the received first packet does not exist in the second network, the processor adds communication state information to the first packet and transfers the first packet, the communication state information indicating a communication state of a communication port which the first packet passed through out of communication ports of the communication control apparatus; and

upon determining that the access requested apparatus recognized from the received first packet exists in the second network, the processor detects a communication state of a communication path of the first packet on a basis of the communication state information included in the first packet, and selects the communication path having the detected communication state satisfying the condition information included in the first packet.

6. The communication control apparatus according to claim 4, wherein upon receiving the second packet through the selected communication path and determining that the first identification information included in the second packet received through the selected communication path is registered in the storage unit, the processor sends the second identification information to the access requesting apparatus through the selected communication path.

7. The communication control apparatus according to claim 4, wherein:

the first packet includes the first identification information and the condition information which are encrypted with third identification information identifying the access requested apparatus; and

the processor receives the first packet, consults an apparatus list having registered therein identification information of apparatuses existing in the second network to extract the identification information, and determines that the access requested apparatus exists in the second network connected to the communication control apparatus in a case where the first identification information and condition information included in the received first packet are successfully decrypted with the extracted identification information.

8. communication system comprising:

an information processing apparatus connected to a first network; and

a plurality of communication control apparatuses connected to respective ones of other networks different from the first network for controlling data communication between the first network and said respective ones of other networks connected to the communication control apparatuses, wherein;

the information processing apparatus generates a first packet so as to include first identification information identifying the information processing apparatus and to enable communication control apparatuses which receives the first packet over the first network to recognize an access requested apparatus connected to one of said other networks, and sends the generated first packet over the first network, and sends a second packet including the first identification information over the first network after the first packet is sent;

one of the plurality of communication control apparatuses receives the first packet over the first network, and upon determining that the access requested apparatus recognized from the received first packet exists in a second network connected to the one of the plurality of communication control apparatuses, registers the first identification information included in the received first packet in a storage unit of the one of the plurality of communication control apparatuses, receives the second packet over the first network, upon determining that the first identification information included in the received second packet is registered in the storage unit of the one of the plurality of communication control apparatuses, sends second identification information identifying the one of the plurality of communication control apparatuses to the information processing apparatus, and upon determining that the first identification information included in the received second packet is not registered in the storage unit of the one of the plurality of communication control apparatuses, prevents sending of the second identification information to the access requesting apparatus; and

the second packet is sent by multicast to search for a communication control apparatus connected to a network which the access requested apparatus is connected to.

9. The communication system according to claim 8, wherein:

the one of the plurality of communication control apparatuses transfers the received first packet to another apparatus adjacent to the one of the plurality of communication control apparatuses on the first network upon determining that the access requested apparatus recognized from the received first packet does not exist in the second network; and

the one of the plurality of communication control apparatuses terminates transfer of the received first packet upon determining that the access requested apparatus recognized from the received first packet exists in the second network.

10. The communication system according to claim 8, wherein:

the information processing apparatus stores, in the first packet, the first identification information encrypted with third identification information identifying the access requested apparatus; and

the one of the plurality of communication control apparatuses receives the first packet, consults an apparatus list having registered therein identification information of apparatuses existing in the second network to extract the identification information, and determines that the access requested apparatus exists in the second network connected to the one of the plurality of communication control apparatuses in a case where the first identification information included in the received first packet is successfully decrypted with the extracted identification information.

11. The communication system according to claim 8, wherein:

the information processing apparatus stores condition information indicating communication state conditions for a communication path in the first packet;

the one of the plurality of communication control apparatuses selects a communication path having a communication state satisfying the condition information included in the received first packet upon determining that the access requested apparatus recognized from the received first packet exists in the second network; and

the one of the plurality of communication control apparatuses determines the selected communication path as a communication path to communicate with the information processing apparatus upon determining that the first identification information included in the received second packet is registered in the storage unit.

12. The communication system according to claim 11, wherein:

upon determining that the access requested apparatus recognized from the received first packet does not exist in the second network, the one of the plurality of communication control apparatuses adds communication state information to the first packet and transfers the first packet, the communication state information indicating a communication state of a communication port which the first packet passed through out of communication ports of the one of the plurality of communication control apparatuses; and

upon determining that the access requested apparatus recognized from the received first packet exists in the second network, the one of the plurality of communication control apparatuses detects a communication state of a communication path of the first packet on a basis of the communication state information included in the first packet, and selects the communication path having the detected communication state satisfying the condition information included in the first packet.

13. The communication system according to claim 8, wherein the information processing apparatus sends the second packet by multicast over the first network.

14. The communication system according to claim 8, wherein the information processing apparatus uses, upon receipt of the second identification information, the received second identification information to request the communication control apparatus identified by the second identification information to connect to one of said other networks connected to the communication control apparatus.

15. A communication control method for a communication control apparatus connected to a first network and a second network, the communication control method comprising:

receiving, by the communication control apparatus, a first packet sent from an access requesting apparatus over the first network, and upon determining that an access requested apparatus recognized from the received first packet exists in the second network, registering first identification information included in the received first packet in a storage unit of the communication control apparatus, the first packet being generated so as to include the first identification information identifying the access requesting apparatus and to enable communication control apparatuses which receives the first packet over the first network to recognize the access requested apparatus;

receiving, by the communication control apparatus, a second packet including the first identification information over the first network, the second packet being sent by multicast to search for a communication control apparatus connected to a network which the access requested apparatus is connected to;

upon determining that the first identification information included in the received second packet is registered in the storage unit of the communication control apparatus, sending, by the communication control apparatus, second identification information identifying the communication control apparatus to the access requesting apparatus; and

upon determining that the first identification information included in the received second packet is not registered in the storage unit of the communication control apparatus, preventing, by the

communication control apparatus, sending of the second identification information to the access requesting apparatus.

16. The communication control method according to claim 15, wherein, upon receipt of the first packet over the first network,

the communication control apparatus transfers the received first packet to another apparatus adjacent to the communication control apparatus on the first network upon determining that the access requested apparatus recognized from the received first packet does not exist in the second network, and

the communication control apparatus terminates transfer of the received first packet upon determining that the access requested apparatus recognized from the received first packet exists in the second network.

17. The communication control method according to claim 15, wherein:

the first packet includes the first identification information encrypted with third identification information identifying the access requested apparatus; and

the communication control apparatus receives the first packet over the first network, consults an apparatus list having registered therein identification information of apparatuses existing in the second network to extract the identification information, and determines that the access requested apparatus exists in the second network connected to the communication control apparatus in a case where the first identification information included in the received first packet is successfully decrypted with the extracted identification information.

18. The communication control method according to claim 15, wherein:

the first packet includes condition information indicating communication state conditions for a communication path;

the communication control apparatus receives the first packet over the first network, and selects a communication path having a communication state satisfying the condition information included in the received first packet upon determining that the access requested apparatus recognized from the received first packet exists in the second network; and

the communication control apparatus receives the second packet over the first network, and determines the selected communication path as a communication path to communicate with the access requesting apparatus upon determining that the first identification information included in the received second packet is registered in the storage unit.