Client apparatus, server apparatus and authority control method

• US 20060048227A1
• Filed: 08/25/2005
• Published: 03/02/2006
• Est. Priority Date: 08/25/2004
• Status: Active Grant

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Suzuki, Takashi, Inamura, Hiroshi, Takeshita, Atsushi, Ohta, Ken
• Granted Patent: US 7,743,413 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/554 involving event detection and direct action

Abstract

A client apparatus to which data or a function is provided from a server apparatus, including: a monitoring unit configured to monitor monitoring target software, and detect an abnormal state or unauthorized state of the target software; a server management unit configured to manage an address of the server apparatus that is being accessed by the client apparatus; an abnormality information creation unit configured to create abnormality information from the abnormal state or the unauthorized state, which is detected by the monitoring unit; and an abnormality information notification unit configured to issue the abnormality information to the server apparatus managed by the server management unit.

Claims

1. A client apparatus to which data or a function is provided from a server apparatus, comprising:

a monitoring unit configured to monitor monitoring target software, and detect an abnormal state or unauthorized state of the target software;

a server management unit configured to manage an address of the server apparatus that is being accessed by the client apparatus;

an abnormality information creation unit configured to create abnormality information from the abnormal state or the unauthorized state, which is detected by the monitoring unit; and

an abnormality information notification unit configured to issue the abnormality information to the server apparatus managed by the server management unit.

2. The client apparatus according to claim 1, further comprising a risk determination unit configured to calculate a risk of the abnormal state or the unauthorized state.

3. The client apparatus according to claim 1, wherein the abnormality information contains at least any one of a type, risk, spot and certainty factor of the abnormal state or the unauthorized state, a type of a recovery state, and a spot of a recovery.

4. The client apparatus according to claim 1, further comprising a digital signature unit configured to add a digital signature to the abnormality information or an encryption unit configured to encrypt the abnormality information.

5. A server apparatus for providing data or a function to a client apparatus, comprising:

an abnormality information reception unit configured to receive abnormality information from the client apparatus;

an abnormality information interpretation unit configured to interpret the abnormality information;

a policy management unit configured to manage an authority setting rule for the interpreted abnormality information;

an authority setting unit configured to set an authority of the client apparatus according to the authority setting rule; and

an authority control unit configured to control the authority of the client apparatus according to the set authority.

6. The server apparatus according to claim 5, further comprising an abnormality information inquiry unit configured to make an inquiry on the abnormality information to the client apparatus.

7. The server apparatus according to claim 5, wherein the abnormality information contains at least any one of a type, risk, spot and certainty factor of an abnormal state or an unauthorized state, a type of a recovery state, and a spot of a recovery.

8. The server apparatus according to claim 5, further comprising a digital signature verification unit configured to verify a digital signature of the abnormality information or a decryption unit configured to decrypt the abnormality information encrypted.

9. The server apparatus according to claim 5, further comprising a client identification unit configured to limit the authority of the client apparatus that does not have means for issuing the abnormality information.

10. An authority control method for controlling an authority of a client apparatus in a system including the client apparatus and a server apparatus for providing data or a function to the client apparatus, comprising:

monitoring monitoring target software;

creating abnormality information from an abnormal state or unauthorized state of the monitoring target software, which is detected by the step of monitoring the monitoring target software;

issuing the abnormality information to the server apparatus that is being accessed by the client apparatus;

interpreting the abnormality information received;

setting an authority of the client apparatus according to an authority setting rule for the interpreted abnormality information; and

controlling the access of the client apparatus according to the authority set.