Opened network connection control method, opened network connection control system, connection control unit and recording medium

• US 20060018264A1
• Filed: 12/30/2004
• Published: 01/26/2006
• Est. Priority Date: 07/21/2004
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Yamakawa, Kazuo
• Granted Patent: US 7,809,001 B2
• Time in Patent Office: Days
• US Class Current: 370/241
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Disclosed are an opened network connection control method, an opened network connection control system, a connection control unit and a recording medium, which allow only terminal units capable of securing security to be connected to an opened network, thereby improving the security level. The connection control unit acquires connection history information held by the terminal unit which has sent a request for connection to the opened network to a central unit, and assigns a logic identifier to the terminal unit and connects the terminal unit to the opened network when the contents of the acquired connection history information coincide with the contents of connection condition information record.

Claims

1. An opened network connection control method, for connecting to an opened network from a closed network, the closed network comprises:

terminal units connected to one another in such a way as to be able to exchange data with one another;

a central unit which receives a connection request to the opened network from each of the terminal units, and controls connection to the opened network; and

a connection control unit which receives an assignment request for a virtual logic identifier from the central unit and assigns the virtual logic identifier to each of the terminal units, and

the connection control method comprises the following steps of;

storing connection condition information necessary for ensuring a network security,

receiving an assignment request from the central unit,

acquiring connection history information on connection of said terminal unit which corresponds to the assignment request to the opened network,

determining whether the acquired connection history information fulfills the connection condition information or not, and

assigning the virtual logic identifier to the terminal unit corresponding to the assignment request when it is determined that the acquired connection history information fulfills the connection condition information.

2. The opened network connection control method according to claim 1, wherein

the method comprises the step of

accepting alteration of the connection condition information record.

3. The opened network connection control method according to claim 1, wherein

the method comprises the step of

acquiring the connection history information from the terminal unit which corresponds to the assignment request.

4. The opened network connection control method according to claim 2, wherein

the method comprises the step of

acquiring the connection history information from the terminal unit which corresponds to the assignment request.

5. The opened network connection control method according to claim 1, wherein

the method comprises the steps of

sending information on an item of the connection condition information which is not fulfilled by the connection history information to the terminal unit corresponding to the assignment request in case that it is determined that the acquired connection history information does not fulfill the connection condition information,

receiving information on the item of the connection condition information which is not fulfilled,

updating the connection history information according to the information on the item of the connection condition information which is not fulfilled, and

storing the updated connection history information.

6. The opened network connection control method according to claim 2, wherein

the method comprises the steps of

sending information on the item of the connection condition information which is not fulfilled by the connection history information to the terminal unit corresponding to the assignment request in case that it is determined that the acquired connection history information does not fulfill the connection condition information,

receiving information on the item of the connection condition information which is not fulfilled,

updating the connection history information according to the information on the item of the connection condition information which is not fulfilled, and

storing the updated connection history information.

7. The opened network connection control method according to claim 1, wherein

the method comprises the step of

acquiring the connection history information of the terminal unit and storing the acquired connection history information.

8. The opened network connection control method according to claim 2, wherein

the method comprises the step of

acquiring the connection history information of the terminal unit and storing the acquired connection history information.

9. An opened network connection control system comprising:

terminal units;

a central unit which receives a connection request to the opened network from each of the terminal units, and controls connection to the opened network; and

a connection control unit which receives an assignment request for a virtual logic identifier from the central unit and assigns the virtual logic identifier to each of the terminal units, wherein

the terminal units are connected, and

the connection control unit comprises a processor capable of performing the following operations of;

storing connection condition information necessary for ensuring a network security,

receiving an assignment request from the central unit,

acquiring connection history information on connection of the terminal unit which corresponds to the assignment request to the opened network,

determining whether the acquired connection history information fulfills the connection condition information or not, and

assigning the virtual logic identifier to the terminal unit corresponding to the assignment request in case that it is determined that the acquired connection history information fulfills the connection condition information.

10. The opened network connection control system according to claim 9, wherein

said processor further capable of performing the operation of accepting alteration of the connection condition information record.

11. The opened network connection control system according to claim 9, wherein

said processor further capable of performing the operation of acquiring the connection history information from the terminal unit which corresponds to the assignment request.

12. The opened network connection control system according to claim 10, wherein

said processor further capable of performing the operation of acquiring the connection history information from the terminal unit which corresponds to the assignment request.

13. The opened network connection control system according to claim 9, wherein

said processor further capable of performing the operation of sending information on an item of the connection condition information which is not fulfilled by the connection history information to the terminal unit corresponding to the assignment request in case that it is determined that the acquired connection history information does not fulfill the connection condition information, and

each of the terminal units comprises a processor capable of performing the operations of:

receiving information on the item of the connection condition information which is not fulfilled,

updating the connection history information according to the information on the item of the connection condition information which is not fulfilled, and

storing the updated connection history information.

14. The opened network connection control system according to claim 10, wherein

said processor further capable of performing the operation of sending information on the item of the connection condition information which is not fulfilled by the connection history information to the terminal unit corresponding to the assignment request in case that it is determined that the connection history information does not fulfill the connection condition information, and

each of the terminal units comprises a processor capable of performing the operations of:

receiving information on the item of the connection condition information which is not fulfilled,

updating the connection history information according to the information on the item of the connection condition information which is not fulfilled, and

storing the updated connection history information.

15. The opened network connection control system according to claim 9, wherein

said processor further capable of performing the operation of

acquiring the connection history information of the terminal unit and storing the acquired connection history information.

16. The opened network connection control system according to claim 10, wherein

said processor further capable of performing the operation of

acquiring the connection history information of the terminal unit and storing the acquired connection history information.

17. An opened network connection control system comprising:

terminal units;

a central unit which receives a connection request to the opened network from each of the terminal units, and controls connection to the opened network; and

a connection control unit which receives an assignment request for a virtual logic identifier from the central unit and assigns the virtual logic identifier to each of the terminal units, wherein

the connection control unit to be used in a closed network environment where the terminal units are connected to one another in such a way as to be able to exchange data with one another comprises;

means for previously storing connection condition information necessary for ensuring a network security,

means for receiving an assignment request from the central unit,

means for acquiring connection history information on connection of the terminal unit which corresponds to the assignment request to the opened network,

means for determining whether the acquired connection history information fulfills the connection condition information or not, and

means for assigning the virtual logic identifier to the terminal unit corresponding to the assignment request when it is determined that the connection history information fulfills the connection condition information.

18. The opened network connection control system according to claim 17, wherein

the connection control unit comprises means for accepting alteration of the connection condition information record.

19. The opened network connection control system according to claim 17, wherein

the connection control unit comprises means for acquiring the connection history information from the terminal unit which corresponds to the assignment request.

20. The opened network connection control system according to claim 18, wherein

the connection control unit comprises means for acquiring the connection history information from the terminal unit which corresponds to the assignment request.

21. The opened network connection control system according to claim 17, wherein

the connection control unit comprises means for sending information on an item of the connection condition information which is not fulfilled by the connection history information to the terminal unit corresponding to the assignment request when it is determined that the connection history information does not fulfill the connection condition information, and

each of the terminal units comprises:

means for receiving information on the item of the connection condition information which is not fulfilled,

means for updating the connection history information according to the information on the item of the connection condition information which is not fulfilled, and

means for storing the updated connection history information.

22. The opened network connection control system according to claim 18, wherein

the connection control unit comprises means for sending information on an item of the connection condition information which is not fulfilled by the connection history information to the terminal unit corresponding to the assignment request when it is determined that the connection history information does not fulfill the connection condition information, and

each of the terminal units comprises:

means for receiving information on the item of the connection condition information which is not fulfilled,

means for updating the connection history information according to the information on the item of the connection condition information which is not fulfilled, and

means for storing the updated connection history information.

23. The opened network connection control system according to claim 17, wherein

the connection control unit comprises means for acquiring the connection history information of the terminal unit and storing the acquired connection history information.

24. The opened network connection control system according to claim 18, wherein

the connection control unit comprises means for acquiring the connection history information of the terminal unit and storing the acquired connection history information.

25. A connection control unit, which receives a connection request to the opened network from a terminal unit, and receives an assignment request for a virtual logic identifier from a central unit which controls connection to the opened network, and assigns the virtual logic identifier to the terminal unit, wherein

the connection control unit comprises a processor capable of performing the following operations of:

storing connection condition information necessary for ensuring a network security,

receiving an assignment request from the central unit,

acquiring connection history information on connection of said terminal unit which corresponds to the assignment request to the opened network,

determining whether the acquired connection history information fulfills the connection condition information or not, and

assigning the virtual logic identifier to the terminal unit corresponding to the assignment request when it is determined that the connection history information fulfills the connection condition information.

26. The connection control unit according to claim 25, said processor capable of performing the following operation of

accepting alteration of the connection condition information record.

27. The connection control unit according to claim 25, said processor capable of performing the following operation of

acquiring the connection history information from the terminal unit which corresponds to the assignment request.

28. The connection control unit according to claim 26, said processor capable of performing the following operation of

acquiring the connection history information from the terminal unit which corresponds to the assignment request.

29. The connection control unit according to claim 25, wherein

when it is determined that the acquired connection history information does not fulfill the connection condition information, an item of the connection condition information which is not fulfilled is output to outside.

30. The connection control unit according to claim 26, wherein

in case that it is determined that the acquired connection history information does not fulfill the connection condition information, an item of the connection condition information which is not fulfilled is output to outside.

31. The connection control unit according to claim 25, said processor capable of performing the following operation of

acquiring the connection history information of the terminal unit and storing the acquired connection history information.

32. The connection control unit according to claim 26, said processor capable of performing the following operation of

acquiring the connection history information of the terminal unit and storing the acquired connection history information.

33. A connection control unit, which receives a connection request to the opened network from a terminal unit, and receives an assignment request for a virtual logic identifier from a central unit which controls connection to the opened network, and assigns the virtual logic identifier to the terminal unit, wherein

the connection control unit comprises:

means for storing connection condition information necessary for ensuring a network security;

means for receiving an assignment request from the central unit;

means for acquiring connection history information on connection of the terminal unit which corresponds to the assignment request to the opened network;

means for determining whether the acquired connection history information fulfills the connection condition information or not; and

means for assigning the virtual logic identifier to the terminal unit corresponding to the assignment request when it is determined that the connection history information fulfills the connection condition information.

34. The connection control unit according to claim 33, further comprising

means for accepting alteration of the connection condition information record.

35. The connection control unit according to claim 33, further comprising

means for acquiring the connection history information from the terminal unit which corresponds to the assignment request.

36. The connection control unit according to claim 34, further comprising

means for acquiring the connection history information from the terminal unit which corresponds to the assignment request.

37. The connection control unit according to claim 33, further comprising

means for outputting an item of the connection condition information which is not fulfilled by the connection history information to outside when it is determined that the connection history information does not fulfill the connection condition information.

38. The connection control unit according to claim 34, further comprising

means for outputting the item of the connection condition information which is not fulfilled by the connection history information to outside when it is determined that the connection history information does not fulfill the connection condition information.

39. The connection control unit according to claim 33, further comprising

means for acquiring the connection history information of the terminal unit and storing the acquired connection history information.

40. The connection control unit according to claim 34, further comprising

means for acquiring the connection history information of the terminal unit and storing the acquired connection history information.

41. A recording medium storing a computer program for causing a computer to receive a connection request to the opened network from a terminal unit, to receive an assignment request for a virtual logic identifier from a central unit which controls connection to the opened network, and to assign the virtual logic identifier to the terminal unit, wherein

the connection control unit previously stores connection condition information necessary for ensuring a network security, and

the computer program stored in the recording medium comprises the steps of:

causing a computer to receive an assignment request from the central unit,

causing a computer to acquire connection history information on connection of the terminal unit which corresponds to the assignment request to the opened network,

causing a computer to determine whether the acquired connection history information fulfills the connection condition information or not, and

causing a computer to assign the virtual logic identifier to the terminal unit corresponding to the assignment request in case that it is determined that the acquired connection history information fulfills the connection condition information.

42. The recording medium according to claim 41, wherein the computer program further comprises the step of

causing a computer to accepte alteration of the connection condition information record.

43. The recording medium according to claim 41, wherein the computer program further comprises the step of

causing a computer to acquire the connection history information from the terminal unit which corresponds to the assignment request.

44. The recording medium according to claim 42, wherein the computer program further comprises the step of

causing a computer to acquire the connection history information from the terminal unit which corresponds to the assignment request.

45. The recording medium according to claim 41, wherein the computer program further comprises the step of

causing a computer to output an item of the connection condition information which is not fulfilled by the connection history information to outside in case that it is determined that the connection history information does not fulfill the connection condition information.

46. The recording medium according to claim 42, wherein the computer program further comprises the step of

causing a computer to output an item of the connection condition information which is not fulfilled by the connection history information to outside when it is determined that the connection history information does not fulfill the connection condition information.

47. The recording medium according to claim 41, wherein the computer program further comprises the step of

causing a computer to acquire the connection history information of the terminal unit and storing the acquired connection history information.

48. The recording medium according to claim 42, wherein the computer program further comprises the step of

causing a computer to acquire the connection history information of the terminal unit and storing the acquired connection history information.