Communicaton information recording device

• US 20020184190A1
• Filed: 05/30/2002
• Published: 12/05/2002
• Est. Priority Date: 10/03/2000
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Sugiura, Takayuki
• Granted Patent: US 7,197,507 B2
• Time in Patent Office: Days
• US Class Current: 707/1
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: H04L 51/234 for tracking messages
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

The object of the present invention is to obtain the records of communication through the network. Monitoring the packet data passing through the objective network and adding the detection data corresponding to its type, and by storing the resultant in the analysis result database, the data can be simply and certainly read out after the completion of communications.

Claims

1. A communication information recording device, wherein

analysis result data is formed by monitoring data of a data stream flowing in the objective network, dividing said monitored data in each communication, and selecting the communication item data contained in said divided data, and then by attaching the detection data to said analysis result data and storing these in an analysis result database, said analysis result data is selectively read out to outside from said analysis result database based on said detection data, resulting in confirming the result of communication through said objective network.

2. A communication information recording device according to claim 1, wherein

said divided data comprises request data to a mail server connected to said objective network from another communication device and response data to said another communication device from said mail server.

3. A communication information recording device according to claim 1, wherein

said divided data comprises header item data and mail main text data as said communication item data.

4. A communication information recording device according to claim 2, wherein

said divided data comprises attachment file item data as said communication item data.

5. A communication information recording device according to claim 1, comprising

a private database for storing said communication items of mail information to be restricted from unauthorized reading by other readers except reading by specific readers, as private items, and wherein

a reading protect item is added to said communication items of said analysis result data that agree with the private item of said private database and stored in said analysis result database, so as not to read said communication items having said reading protect item attached thereto out of said analysis result database.

6. A communication information recording device as defined in claim 2, wherein

a computer virus in an attachment file is detected from said divided data as said communication item data.

7. A communication information recording device according to claim 1, comprising

a category database for storing category items to categorize communication items included in said divided data in correspondence with said communication items, and wherein

said corresponding category items are attached to said communication items that agree with the communication items of said category database and stored in said analysis result database, so as to read said analysis result data out of said analysis result database for each category item.

8. A communication information recording device according to claim 1, wherein

said divided data comprises request data from another communication device from the terminal device connected to said objective network and response data from said HTTP server to said communication device.

9. A communication information recording device according to claim 2, wherein

If there exists a Content-Length item indicating the length of content in the response data from said HTTP server, the content is stored as a file and storage location data indicating the storage location of the corresponding divided data in the analysis result database are accumulated in a storage location database, and thereby said storage location data accumulated in said storage location database is read out to outside, so as to reproduce said divided data.