Network node machine and information network system

• US 20050028012A1
• Filed: 07/28/2004
• Published: 02/03/2005
• Est. Priority Date: 07/31/2003
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited, Kyushu University
• Original Assignee: Fujitsu Limited
• Inventors: Okada, Makoto, Amamiya, Satoshi, Iwao, Tadashige, Amamiya, Makoto
• Application Number:
  US10/900,409
• Publication Number:
  US 20050028012A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones

Abstract

In the global information sharing and distributing service system, the public use of idle resources can be propelled and sufficient security can be guaranteed on the resources for private use. A node machine configuring an information network includes resources located in a private zone available to private use, resources located in a public zone for public service use, and a private resource security management unit for management of the security of the resources located in the private zone.

Claims

1. A node machine configuring a network, comprising:

resources located in a private zone for private use;

resources located in a public zone for use in a public service; and

a private resource security management unit managing security of the resources located in the private zone between the private zone and the public zone.

2. The machine according to claim 1, further comprising

a node security management unit operated in the network node machine and realizing a security barrier function between the private zone and the public zone using said private resource security management unit.

3. The machine according to claim 2, wherein

node security management units operating in a plurality of respective network node machines form a community, and the community has a hierarchical structure.

4. The machine according to claim 3, wherein

in the hierarchical structure of the community, said node security management unit in the network node machine corresponding to each community comprises a community security management unit having an interface function with a higher community.

5. The machine according to claim 4, wherein

said community security management unit manages permissibility of subscription of said node security management unit to the community.

6. The machine according to claim 5, further comprising

an access permission attribute condition storage unit storing an attribute condition for an access permission determination to a public policy describing a condition including resources to be presented for a public service after subscription corresponding to an attribute of said node security management unit requesting subscription of the community, wherein

said community security management unit manages permissibility of subscription to a community using the stored contents.

7. The machine according to claim 4, wherein

said community security management unit manages accessibility to resources located in the private zone of the network node machine corresponding to a community to which said unit belongs from the node security management unit of another community.

8. The machine according to claim 7, wherein

said network node machine in which said community security management unit operates further comprises

an access permission attribute condition storage unit storing an attribute condition for an access permission determination in response to an attribute of said node security management unit of the other community requesting access to the resources located in the private zone of the community to which the machine belongs, wherein

said community security management unit manages accessibility using the stored contents.

9. The machine according to claim 4, wherein

said network node machine in which said community security management unit operates further comprises

a community management data storage unit storing information about a higher community and a lower community and a logical address corresponding to a communications path in which security is confirmed in a hierarchical structure of the communities, wherein

said community security management unit manages security of a community using the stored contents.

10. An information network system, comprising:

resources located in a private zone for private use;

resources located in a public zone for use in a public service; and

a private resource security management unit managing security of the resources located in the private zone between the private zone and the public zone, wherein

said system is configured by node machines connected to each other over a network.

11. A network node machine configuring a network, comprising:

resources located in a private zone for private use;

resources located in a public zone for use in a public service; and

private resource security management means for managing security of the resources located in the private zone between the private zone and the public zone.

12. An information network system, comprising:

resources located in a private zone for private use;

resources located in a public zone for use in a public service; and

private resource security management means for managing security of the resources located in the private zone between the private zone and the public zone, wherein

said system is configured by node machines connected to each other over a network.