Security management system

• US 20030196082A1
• Filed: 03/14/2003
• Published: 10/16/2003
• Est. Priority Date: 04/10/2002
• Status: Abandoned Application

• Current Assignee: Yokogawa Electric Corporation
• Original Assignee: Yokogawa Electric Corporation
• Inventors: Fukuyama, Shin-Ichi
• Application Number:
  US10/387,374
• Publication Number:
  US 20030196082A1
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The present invention is characterized by the following points:

A monitoring station is provided in a network to which systems are connected. Data, when sent from a transmission source to a transmission destination, are passed once through the above monitoring station in which security checks are implemented. When remote services or the like are carried out between enterprises, this method enables communications for which an ensured, definite level of security check has been implemented,—and also enables the prevention of the diffusion of viruses.

Claims

1. A security management system which manages security for communications between systems connected to a network;

comprising a monitoring station that acquires data sent from a system as a transmission source, implements security checks for the acquired data, and if there are no problems as a result of the checks, sends the acquired data to a system as a transmission destination.

2. A security management system in accordance with claim 1, wherein said system as a transmission source sends out encrypted data to a network, said monitoring station decrypts the acquired data and implements security checks for the decrypted data, and if there are no problems as a result of checks, sends these data to a system as a transmission destination after again encrypting them.

3. A security management system in accordance with claim 1 or claim 2, wherein said monitoring station cuts off communication of the data if any abnormalities have been detected as a result of security checks of the data.

4. A security management system in accordance with claim 1 or claim 2, wherein said monitoring station periodically reports the result of security checks or offers information on security, and if abnormalities have been detected as a result of security checks, notifies the parties concerned of emergency information.

5. A security management system in accordance with any of claims 1 to 4, wherein systems connected to a network include service provider systems and service client systems.

6. A security management system in accordance with claim 5, wherein said service provider systems and service client systems carry out 1:

N or N;

N communications.

7. A security management system in accordance with claim 5, wherein said monitoring station performs part of the services that are carried out by a service provider system for that system.

8. A security management system in accordance with claim 5, wherein said monitoring station receives a contract for management jobs that a service provider system carries out on a service client'"'"'s system from the service provider.

9. A security management system in accordance with claim 5, wherein said service that a service provider system carries out is at least one of remote monitoring, remote running, remote maintenance, or remote engineering.

10. A security management system in accordance with claim 5, wherein communications between said service provider system and said service client system are business to business communications.