Method of connection of equipment in a network and network system using same

• US 20060021043A1
• Filed: 08/26/2005
• Published: 01/26/2006
• Est. Priority Date: 06/20/2003
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Kaneko, Takashi, Takayama, Hiroki, Ohta, Tadahiro, Tanaka, Tadaaki
• Granted Patent: US 7,874,002 B2
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: H04L 12/28 characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks] wireless communication networks H04W ; arrangements for dividing the transmission path H04W40/00
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

A method for connecting equipment in a network system, enabling prevention of the spread of viruses throughout the network resulting from connection to the network of a server, client, PC, or other equipment infected with a virus, in which the network configuration is separated into an operation network and a virus check network using VLAN (Virtual Local Area Network) functions, and at the time of connection of equipment, a virus check is performed in the virus check network, and equipment confirmed by the virus check to be safe is accommodated in the operation network. When safety cannot be confirmed through the virus check, the equipment is isolated from the operation network and from the virus network.

Claims

1. A method for connection of equipment to a network, comprising the steps of:

separating network configuration of the network into an operation network and a virus check network by using VLAN (Virtual Local Area Network) functions;

at the time of connection of equipment, performing a virus check in the virus check network; and

accommodating the equipment, which has been confirmed to be safe through the virus check, to the operation network.

2. The method for connection of equipment to a network according to claim 1,

further comprising the step of isolating the equipment from both the operation network and the virus check network, when confirmation of safety through said virus check is not possible.

3. A network system, comprising:

a network connection device, having a plurality of ports, and which employs VLAN (Virtual Local Area Network) functions to separate equipment connected to said plurality of ports into an operation network and a virus check network; and

a virus check server, connected to the virus check network,

wherein when new equipment is connected to an open port of the network connection device, the new equipment is accommodated by said virus check network, and a virus check is performed; and

,

if safety is confirmed through said virus check, the new equipment is accommodated by said operation network.

4. The network system according to claim 3,

wherein when confirmation of safety through the virus check is not possible, the new equipment is isolated from both the operation network and the virus check network.

5. The network system according to claim 3,

Wherein the network connection device includes management tables for each of the plurality of ports, and the management tables are updated corresponding to the results of the virus check, to update the settings of the network to accommodate ports to which the new equipment is connected.

6. The network system according to claim 3,

Wherein when equipment connected to the operation network is removed from the corresponding port, VLAN functions of the network connection device are employed to change the accommodation of the port to the virus check network.