Access control service and control server

• US 20060224897A1
• Filed: 02/28/2006
• Published: 10/05/2006
• Est. Priority Date: 04/01/2005
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Kikuchi, Satoshi, Kobayashi, Emiko, Miyawaki, Toui, Tsunehiro, Takashi
• Application Number:
  US11/363,508
• Publication Number:
  US 20060224897A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

To provide an access control service and control server for protecting a computer from an Illegal access such as a password cracking, in a terminal service and other related services. An access server 3 includes an authentication manager 7 for authenticating a user to operate a terminal, and an ACE manager 9 for setting a network link that enables communication between a terminal 1 that the user operates and a specific computer unit 2, to a hub 4 in accordance with a result of the authentication. Information on each user and information on the specific computer unit 2 that the each user can use are associated with each other and registered in the ACE manager 9.

Claims

1. An access control service carrying out communication by connecting one or more computer units with one or more terminals via a network to access from the terminal to the computer unit, the access control service comprising a control server for authenticating a user to operate the terminal and for setting a network link that enables communication between the terminal that the user operates and the specific computer unit in accordance with a result of the authentication.

2. The access control service according to claim 1,

wherein, in the control server, information on each user and information on the specific computer unit that the each user can use are associated with each other and registered.

3. The access control service according to claim 1, further comprising a hub for establishing the network link between the network and each of the computer units,

wherein the hub relays a packet between a specified terminal and a specified computer unit by a control command from the control server.

4. The access control service according to claim 3, wherein the access control server issues, to the hub, the control command in which identifier of the terminal that the user operates and identifier of the computer unit are combined together.

5. The access control service according to claim 3, wherein the control server is integrally configured with the hub.

6. The access control service according to claim 1, wherein the control server releases the established network link, upon reception of a request from the terminal.

7. The access control service according to claim 6, wherein the control server releases the established network link in a case where the user interrupts or terminates the operation of the terminal.

8. The control access service according to claim 1,

wherein the computer units share a storage.

21. The access control service according to claim 1,

wherein the computer units are a storage.

24. The access control service according to claim 1, wherein the control server monitors a communication status between the terminal and the computer unit, and releases the established network link when detecting a non-communication status.

25. The access control service according to claim 6, wherein the terminal monitors the communication status with the computer unit and releases the established network link when detecting a non-communication status.

9. An access control service carrying out communication by connecting one or more computer units with one or more terminals via a network to access from the terminal to the computer unit, the access control service comprising:

a shared storage coupled to each of the computer units, having an available storage area assigned to each user; and

a control server for authenticating a user to operate the terminal, mounting the storage area within the storage assigned to the user in accordance with a result of the authentication in any of the computer units, and setting a network link that enables communication between a terminal that the user operates and the mounted computer unit.

10. The access control service according to claim 9, wherein, in the control server, information on each user and information on the storage area within the storage that the each user can use are associated with each other and registered.

11. The access control service according to claim 9, wherein the number of the computer units coupled to the network is equal to or less than the number of the terminals.

12. The access service according to claim 9, wherein the control server mounts the storage area within the storage assigned to the user, to an available computer unit of the computer units.

13. In a computer system in which one or more computer units and one or more terminals are coupled via a network, a control server for controlling communication between the terminal and the computer unit, comprising:

an authentication manager for authenticating a user to operate the terminal; and

a link manager for setting a network link that enables communication between a terminal that the user operates and the specific computer unit in accordance with a result of the authentication.

14. The control server according to claim 13, further comprising a management database in which information on each user and information on the specific computer unit that the each user can use are associated with each other and registered.

15. The control server according to claim 13, wherein the link manager issues a control command indicating to permit the relay of a packet between identifier of the terminal that the user operates and identifier of the specific computer unit, to a hub that forms the network link between the network and each of the computer units.

16. The control server according to claim 15, wherein the control server is integrally configured with the hub.

17. The control server according to claim 13, wherein the link manager denies a login operation to a computer unit other than the specific computer unit to the terminal that the user operates.

18. In a computer system in which one or more computer units and one or more terminals are coupled via a network, a control server for controlling communication between the terminal and the computer unit,

wherein each of the computer units is coupled with a shared storage in which an available storage area is assigned to each user,

the control server comprising:

an authentication manager for authenticating the user to operate the terminal;

a computer unit manager for mounting the storage area within the storage assigned to the user, to any of the computer units in accordance with a result of the authentication; and

a link manager for setting a network link that enables communication between a terminal that the user operates and the mounted computer unit.

19. The control server according to claim 18,

the control server having a management database in which information on each user and information on the storage area within the storage that the each user can use are associated with each other and registered.

20. The control server according to claim 18,

wherein the computer unit manager mounts the storage area within the storage assigned to the user, in an available computer unit of the computer units.

22. An access control service carrying out communication by connecting one or more terminals and a storage via a network to access from the terminal to the storage,

wherein the storage is a shared storage that is coupled to each of the terminals and has an available storage area assigned to each user,

the control service comprising:

a control server for authenticating the user to operate the terminal, mounting, in a terminal that the user operates, the storage area within the storage assigned to the user in accordance with a result of the authentication in the terminal the user operates, and setting a network link that enables communication between the terminal the user operates and the storage.

23. The access control service according to claim 22, wherein, in the control server, information on each user and information on the storage area within the storage that the each user can use are associated with each other and registered.

26. In a computer system in which one or more terminals and a storage are coupled via a network, a control server for controlling communication between the terminal and the storage,

wherein the storage is a shared storage that is coupled with each of the terminals and has an available storage area assigned to each user,

the control server comprising:

an authentication manager for authenticating the user to operate the terminal;

a computer unit manager for mounting the storage area within the storage assigned to the user in accordance with a result of the authentication, in a terminal that the user operates; and

a link manager for setting a network link that enables the communication between the terminal that the user operates and the storage.

27. The control server according to claim 26, the control server having a management database in which information on each user and information on the storage area within the storage that the each user can use are associated with each other and registered.