Management device, method and system

• US 20030040932A1
• Filed: 07/03/2002
• Published: 02/27/2003
• Est. Priority Date: 08/23/2001
• Status: Abandoned Application

• Current Assignee: Allied Telesis Holdings KK
• Original Assignee: Allied Telesis Holdings KK
• Inventors: Sato, Kazuhiko
• Application Number:
  US10/190,339
• Publication Number:
  US 20030040932A1
• Time in Patent Office: Days
• US Class Current: 705/1
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A management system comprises a managed device, located in a managed area, wherein the managed device can be connected to a network and assigned network information that enables the managed device to communicate over the network. The management system further comprises a guard manager, configured to guard the managed area against unauthorized access, and a management device, which manages the guard manager and uses the network information of the managed device to manage the managed device. The management system can provide a variety of security levels in managing the managed area, and can read access information from an information recordable medium to allow access to the managed area and modification of the security level of the managed area.

Claims

1. A management system, comprising:

a managed device, located in a managed area, configured for connection to a network, wherein the managed device is assigned network information that enables the managed device to communicate over the network;

a guard manager, configured to guard the managed area against an intrusion; and

a management device, configured to manage the managed device using the network information, and configured to manage the guard manager.

2. The management system of claim 1, further comprising a plurality of managed areas, a plurality of managed devices, and a plurality of guard managers, wherein at least one managed device and at least one guard manager are located at each of the managed areas.

3. The management system of claim 1, further comprising a plurality of managed areas and a plurality of managed devices, wherein at least one managed device is located in each of the managed areas, wherein the plurality of managed areas comprise a closed space, and wherein the guard manager guards the closed space against an intrusion.

4. The management system of claim 1, wherein the network information is a MAC address of the managed device.

5. The management system of claim 1, wherein the network information is an IP address of the managed device.

6. The management system of claim 1, wherein the network information includes a communication parameter necessary for the managed device to communicate in the network, and wherein the network information includes device information that identifies the managed device.

7. The management system of claim 2, further comprising an interconnecting device configured to connect the managed devices and the management devices to the network, wherein the management device configures the interconnecting device such that a different virtual local area network (VLAN) is assigned to each managed area based on the network information of the managed devices.

8. The management system of claim 7, wherein the network information includes information of the VLAN.

9. The management system of claim 1, wherein the guard manager has a plurality of operational modes corresponding to a plurality of security levels for guarding the managed area, wherein the guard manager changes the operational mode in response to receiving the network information from an individual.

10. The management system of claim 1, further comprising an entrance server configured to provide the managed device access to the network using the network information.

11. The management system of claim 1, further comprising an interconnecting device configured to connect the managed device and the management device to the network, and configured to execute a predefined operation in accordance with information transferred by the guard manager to the management device.

12. The management system of claim 1, wherein the guard manager comprises a drive unit configured to read information from an information recordable medium, and wherein access to the managed area is authorized when the information read from the information recordable medium comprises the network information.

13. The management system of claim 12, wherein the information recordable medium is an integrated circuit card.

14. A management device configured to manage a managed device over a network, the management device comprising:

a storage part for storing network information of the managed device, wherein the network information allows the managed device to communicate over the network; and

a controller, configured to use the network information to control the managed device and a guard manager, wherein the guard manager is configured to control access to an area where the managed device is located.

15. The management device of claim 14, wherein the controller is further configured to control a connection status and traffic of the managed device.

16. The management device of claim 14, wherein the guard manager controls access to the managed area using the network information.

17. The management device of claim 14, wherein the controller authenticates the network information for use with the guard manager.

18. The management device of claim 14, wherein the guard manager sends information received from a person attempting to enter the managed area to the controller for authentication, wherein the controller provides an authentication status to the guard manager upon determining that the information sent from the guard manager corresponds to the network information stored in the storage part, and wherein the guard manager allows the person to access the managed area upon receiving the authentication from the controller.

19. The management device of claim 18, wherein the controller activates an alarm indicating that the information sent from the guard manager does not correspond to the network information stored in the storage part.

20. The management device of claim 14, wherein the controller activates an alarm, thereby informing a user of the management device of an intrusion to the managed area.

21. The management device of claim 14, wherein the controller disconnects the managed device from the network, when the guard manager informs the management device that a user of the managed device is away from the managed area.

22. A guard manager configured to guard a managed area containing a managed device, comprising:

a reader, configured to read information from an information recordable medium provided by a person requesting access to the managed area;

a transmitter, connected to the reader and configured to transmit information read by said reader to a management device; and

a controller, configured to provide access to the managed area in response to an instruction from the management device, wherein the management device sends the instruction to provide access when the information transmitted by the transmitter comprises network information assigned to the managed device.

23. The guard manager of claim 22, wherein the managed area has an entrance that opens and closes, and wherein the guard manager guards the managed area by locking and unlocking the entrance.

24. The guard manager of claim 22, further comprising a sensor configured to detect an intrusion upon the managed area, and wherein the guard manager informs the management device of any intrusion upon the managed area.

25. A method of managing a managed device and a managed area , wherein the managed device is configured for connection to a network and is located in the managed area, and wherein the managed device is assigned network information for communicating in the network, the method comprising:

determining whether information provided by a person requesting access to the managed area comprises the network information;

allowing the person to enter the managed area in response to determining that the information provided by the person comprises the network information; and

managing the managed device in the network using at least the network information.

26. The method of claim 25, wherein the information provided by the person is in the form of an information recordable medium, and wherein the method further comprises reading the information provided by the person from the information recordable medium.

27. The method of claim 25, wherein managing the managed device using at least the network information comprises controlling a connection status of the managed device to the network according to information provided by the guard manager.

28. A computer readable medium that includes a program executing a method of managing a managed device located in a managed area, the method comprising:

determining whether information provided by a person who requests access to the managed area comprises network information assigned to the managed device, wherein the network information enables the managed device to communicate over a network;

allowing the person to enter the managed area in response to determining that the information provided by the person comprises the network information; and

managing a status of the managed device in the network using the network information.

29. A method of controlling access to a managed area containing a device configured to connect to a network, the method comprising:

receiving information from a user at a location outside of the managed area;

processing the information so as to determine whether the information corresponds to network information assigned to the managed area;

allowing the user access to the managed area in response to determining a correspondence between the information received from the user and the network information; and

denying access to the managed area in response to determining the information received does not correspond to the network information.

30. The method of claim 29, wherein receiving information from a user further comprises reading the information from an information recordable medium.

31. The method of claim 29, wherein denying access to the managed area further comprises notifying the management device of an ungranted request for access to the managed area.

32. The method of claim 29, further comprising modifying a security level of the managed area according to status information received from the user at the location outside of the managed area.

33. The method of claim 32, wherein modifying a security level of the managed area comprises changing a network access status for the device according to the status information received from the user.

34. A system for controlling admittance to a managed area containing a device configured to connect to a network, the system comprising:

means for receiving information from a user at a location outside of the managed area;

means for processing the information received from the user so as to determine whether the information corresponds to network information assigned to the managed area;

means for allowing the user to access the managed area in response to determining a correspondence between the information received and the information assigned to the managed area; and

means for denying access to the managed area in response to determining the information received does not correspond to the network information.

35. The system of claim 34, wherein the means for receiving information from a user comprises means for reading the information from an information recordable medium.

36. The system of claim 34, wherein the means for denying access to the managed area comprises means for notifying the management device of an ungranted request for access to the managed area.

37. The system of claim 34, further comprising means for modifying a security level of the managed area according to status information received from the user at the location outside of the managed area.

38. A method of managing a device and a managed area, wherein the device is located in the managed area, and wherein the device is configured for connection to a network, the method comprising:

reading information from an information recordable medium at a location outside the managed area, wherein the information recordable medium is provided by a user;

comparing the information read from the information recordable medium with network information assigned to the device, wherein the network information enables the device to communicate over the network;

allowing the user to access the managed area and changing a security status of the managed area in response to determining a correspondence between the information read from the information recordable medium and the network information; and

denying the user access to the managed area and activating an alarm in response to determining no correspondence between the information read from the information recordable medium and the network information.

39. The method of claim 38, further comprising receiving information from the user at a location inside the managed area and changing a security status of the managed area in response to receiving the information from inside the managed area.

40. The method of claim 38, wherein allowing the user to change a security status of the managed area comprises changing a connection status of the managed device to the network in response to a security status instruction provided by the user.