Terminal device, terminal-device control method, and terminal-device control program
To provide a terminal device capable of preventing user-unintended communication from being made. A communication control means 91 controls a packet transfer means for transmitting a packet. An instruction information giving means 92 gives instruction information indicating an instruction for the communication control means 91 to the communication control means 91 . The communication control means 91 sends a flow detection notification that it detected a new flow to the instruction information giving means 92 when detecting the new flow. The instruction information giving means 92 determines whether to permit the flow to be communicated when receiving the flow detection notification. When determining to permit communication, the instruction information giving means 92 then gives instruction information for instructing to transmit a packet of the flow in a path as an access network designated by the instruction information giving means 92 to the communication control means 91.
1. A terminal device comprising:
a communication control unit implemented by a processor and which controls a packet transfer unit implemented by the processor and which transmits a packet; and
an instruction information giving unit implemented by the processor and which gives instruction information indicating an instruction for the communication control unit to the communication control unit,
wherein
the communication control unit sends a flow detection notification that it detected a new flow to the instruction information giving unit when detecting the new flow,
the instruction information giving unit determines whether to permit the flow to be communicated when receiving the flow detection notification, and when determining to permit communication, gives instruction information for instructing to transmit a packet of the flow in a path as an access network designated by the instruction information giving unit to the communication control unit,
the communication control unit sends information on an application ID identifying an application software as a transmission source of the flow, for exchanging traffic to be controlled within the terminal device and a destination of the flow as the flow detection notification to the instruction information giving unit, wherein the application software is held in the terminal device, and
the instruction information giving unit determines whether to permit the flow to be communicated, based on the application ID and the destination of the flow.
2. The terminal device according to claim 1 ,
wherein after being given the instruction information for instructing to transmit the packet of the flow in the path as the access network designated by the instruction information giving unit, the communication control unit controls the packet transfer unit to transmit the packet of the flow from a communication interface unit corresponding to the access network.
3. The terminal device according to claim 1 ,
wherein the instruction information giving unit gives instruction information for designating a flow of which detection is to be notified to the communication control unit, and
the communication control unit sends the flow detection notification to the instruction information giving unit when detecting the new flow designated by the instruction information.
4. The terminal device according to claim 3 ,
wherein the instruction information giving unit gives instruction information for designating the flow of which detection is to be notified to the communication control unit by designating either one of or both the application ID and the destination of the flow.
5. The terminal device according to claim 1 ,
wherein the communication control unit controls the packet transfer unit according to OpenFlow.
6. A terminal-device control method comprising:
by a communication control unit implemented by a processor, controlling a packet transfer unit implemented by the processor and which transmits a packet;
by an instruction information giving unit implemented by the processor, giving instruction information indicating an instruction for the communication control unit to the communication control unit;
by the communication control unit, sending a flow detection notification that it detected a new flow to the instruction information giving unit when detecting the new flow; and
by the instruction information giving unit, determining whether to permit the flow to be communicated when receiving the flow detection notification, and when determining to permit communication, giving instruction information for instructing to transmit a packet of the flow in a path as an access network designated by the instruction information giving unit to the communication control unit,
wherein
the communication control unit sends information on an application ID identifying an application software as a transmission source of the flow, for exchanging traffic to be controlled within a terminal device and a destination of the flow as the flow detection notification to the instruction information giving unit, wherein the application software is held in the terminal device, and
the instruction information giving unit determines whether to permit the flow to be communicated, based on the application ID and the destination of the flow.
7. The terminal-device control method according to claim 6 ,
wherein after being given the instruction information for instructing to transmit the packet of the flow in the path as the access network designated by the instruction information giving unit, the communication control unit controls the packet transfer unit to transmit the packet of the flow from a communication interface unit corresponding to the access network.
8. A non-transitory computer readable recording medium in which a terminal-device control program is recorded, the program is mounted on a computer used as a terminal device comprising a communication control unit implemented by a processor and which controls a packet transfer unit implemented by the processor and which transmits a packet and an instruction information giving unit implemented by the processor and which gives instruction information indicating an instruction for the communication control unit to the communication control unit, the program causing the computer to perform:
a flow detection notification processing of, when the communication control unit detects a new flow, sending a flow detection notification that the new flow is detected to the instruction information giving unit; and
an instruction information giving processing of, when the instruction information giving unit determines whether to permit the flow to be communicated when receiving the flow detection notification, and determines to permit communication, giving instruction information for instructing to transmit a packet of the flow in a path as an access network designated by the instruction information giving unit to the communication control unit,
wherein
in the flow detection notification processing, information on an application ID identifying an application software as a transmission source of the flow, for exchanging traffic to be controlled within the terminal device and a destination of the flow as the flow detection notification are sent to the instruction information giving unit, wherein the application software is held in the terminal device, and
in the instruction information giving processing, it is determined whether to permit the flow to be communicated, based on the application ID and the destination of the flow.
9. The non-transitory computer readable recording medium in which the terminal-device control program is recorded according to claim 8 , the program causing a computer to perform:
a control processing of, after the communication control unit is given the instruction information for instructing to transmit the packet of the flow in the path as the access network designated by the instruction information giving unit, controlling the packet transfer unit to transmit the packet of the flow from a communication interface unit corresponding to the access network.