Access control system and access control server

• US 20080034092A1
• Filed: 07/06/2007
• Published: 02/07/2008
• Est. Priority Date: 07/06/2006
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Kikuchi, Satoshi, Kobayashi, Emiko, Miyawaki, Toui, Tsunehiro, Takashi
• Application Number:
  US11/822,544
• Publication Number:
  US 20080034092A1
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

An access control system and an access control server using Terminal Services or the like, which prevents information from being leaked are provided. The access control system includes one or more computer units, one or more terminals, and the access control server that controls a hub. The one or more terminals are coupled with the one or more computer units through a network and the hub. The hub controls access from the one or more terminals to the one or more computer units. In accordance with the result of the authentication, the access control server authenticates a user who operates one of the terminals and sets the hub so that a network link for a particular protocol is established between the terminal operated by the user and a particular one of the computer units.

Claims

1. An access control system comprising:

one or more computer units;

one or more terminals coupled with the one or more computer units through a network and a hub that controls access from the one or more terminals to the one or more computer units; and

an access control server that controls the hub;

wherein the access control server authenticates a user who operates one of the one or more terminals; and

the access control server sets, in accordance with the result of the authentication, the hub so that a network link for a particular protocol is established between the terminal operated by the user and a particular one of the one or more computer units.

2. The access control system according to claim 1,

wherein the access control server controls start of the particular computer unit in accordance with the result of the authentication.

3. The access control system according to claim 1,

wherein, when the access control server determines that the user is legitimate in accordance with the result of the authentication, the access control server provides, to the terminal, a control screen that allows the user to control an operation of the particular computer unit;

the terminal displays the control screen and receives an instruction given to the control screen from the user to transmit the instruction to the access control server; and

the access control server controls the start of the particular computer unit in accordance with the instruction given from the user.

4. The access control system according to claim 1,

wherein the access control server determines a communication port number assigned to the particular protocol and sets, in the hub, access permission of the communication port number that has been determined for establishment of the network link for the particular protocol.

5. The access control system according to claim 4,

wherein the particular computer unit selects a communication port number used for the network link to notify the access control server of the communication port number;

and

the access control server sets, in the hub, access permission of the communication port number notified from the computer unit as the communication port number to be assigned to the particular protocol for establishment of the network link for the particular protocol.

6. The access control system according to claim 5,

wherein the particular computer unit randomly selects the communication port number to be notified.

7. The access control system according to claim 4,

wherein the access control server determines a location where the terminal is coupled with the network based on an address assigned to the network to which the terminal is coupled;

and

the access control server determines the communication port number to be assigned to the particular protocol of the network link for establishment of the network link for the particular protocol based on the location that has been determined.

8. The access control system according to claim 1,

wherein the access control server monitors an event that may occur in the particular computer;

and

when the access control server detects the occurrence of an predetermined event, the access control server sets the hub so that the network link between the particular computer unit and the terminal operated by the user is released.

9. An access control server used in an access control system including one or more computer units, one or more terminals coupled with the one or more computer units through a network and a hub that controls access from the one or more terminals to the one or more computer units, the access control server controlling the hub, the access control server comprising:

a unit for authenticating a user who operates one of the one or more terminals; and

in accordance with the result of the authentication, a unit for setting the hub so that a network link for a particular protocol is established between the terminal operated by the user and a particular one of the one or more computer units.

10. The access control server according to claim 9, wherein the same determines a communication port number assigned to a particular protocol and sets, in the hub, access permission of the communication port number that has been determined for establishment of a network link for the particular protocol.

11. The access control server according to claim 10, wherein the same sets, in the hub, access permission of a communication port number notified from the particular computer unit for which the network link is established as the communication port number to be assigned to the particular protocol for establishment of the network link for the particular protocol.

12. The access control server according to claim 10, wherein the same determines a location where the terminal is coupled with the network based on an address assigned to the network and determines the communication port number to be assigned to the particular protocol of the network link based on the location that has been determined for establishment of the network link for the particular protocol.

13. The access control server according to claim 9, wherein the same monitors an event that may occur in the particular computer unit and, when detecting the occurrence of a predetermined event, sets the hub so that the network link between the particular computer unit and the terminal operated by the use is released.