Information processing system and remote access method

• US 20090001161A1
• Filed: 02/14/2008
• Published: 01/01/2009
• Est. Priority Date: 02/14/2007
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Uchiyama, Shuichi
• Application Number:
  US12/071,065
• Publication Number:
  US 20090001161A1
• Time in Patent Office: Days
• US Class Current: 235/382
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/08 specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

An information processing system comprising a local machine performing an information processing, a remote machine making connection to the local machine via a network and performing operation to the local machine by a user and a management-authorization server performing management and authorization of the remote machine is provided. The management-authorization server includes a plurality of connection information files for the remote machine to make connection to the local machine, and the remote machine, at making connection to the local machine, makes connection to the local machine based on a connection information file provided from the management-authorization server, after the authorization by the management-authorization server.

Claims

1. An information processing system comprising:

a local machine performing an information processing;

a remote machine making connection to the local machine via a network and performing operation to the local machine by a user; and

a management-authorization server performing management and authorization of the remote machine,

wherein the management-authorization server includes plural pieces of connection information for the remote machine to make connection to the local machine, and

wherein the remote machine, at making connection to the local machine, makes connection to the local machine based on the connection information provided from the management-authorization server after the authorization by the management-authorization server.

2. The information processing system according to claim 1,

wherein the management-authorization server, at the authorization of the remote machine, selects optimum connection information from the plural pieces of the connection information to provide to the remote machine based on information of a connection location of the remote machine.

3. The information processing system according to claim 2,

wherein the information of the connection location of the remote machine is determined based on route information in an IP packet transmitted from the remote machine to the management-authorization server.

4. The information processing system according to claim 2,

wherein the optimum connection information is selected based on a connection distance between the remote machine and the local machine.

5. The information processing system according to claim 2,

wherein the optimum connection information is selected based on a communication speed between the remote machine and the local machine.

6. The information processing system according to claim 1,

wherein the management-authorization server, at the authorization of the remote machine, generates a list of plural pieces of optimum connection information from the plural pieces of the connection information based on information of a connection location of the remote machine and provides the generated list of the plural pieces of the optimum connection information to the remote machine, and

wherein the remote machine displays the list of the plural pieces of the optimum connection information provided from the management-authorization server and makes connection to the local machine based on optimum connection information selected from the displayed list of the plural pieces of the optimum connection information by the user.

7. The information processing system according to claim 1, further comprising:

a maintenance server performing maintenance of the remote machine,

wherein the management-authorization server, at the authorization of the remote machine, transmits device information of the remote machine to the maintenance server,

wherein the maintenance server makes judgment of necessity of version-up of the remote machine based on the device information of the remote machine and provides software for the version-up to the remote machine based on a result of the judgment, and

wherein the remote machine performs a processing of version-up based on the software for the version-up provided from the maintenance server.

8. The information processing system according to claim 7,

wherein the management-authorization server, at the maintenance of the remote machine by a maintenance management program from the maintenance server after the authorization of the remote machine, notifies permission of connection to the remote machine and the maintenance server respectively and establishes connection between the remote machine and the maintenance server.

9. The information processing system according to claim 1,

wherein the management-authorization server performs the authorization of the remote machine according to a device unique ID stored in a security chip loaded on the remote machine.

10. The information processing system according to claim 9,

wherein the management-authorization server performs authorization of the user according to an authorization card having only a certificate of the user stored, after the authorization of the remote machine.

11. A remote access method comprising the steps of:

transmitting a device unique ID of a remote machine from the remote machine to a management-authorization server;

authorizing the remote machine by the management-authorization server using the device unique ID;

requesting for the device-authorized remote machine to transmit device condition by the management-authorization server;

transmitting authorization information and authorization card information based on biometric information of a user from the remote machine to the management-authorization server;

performing authorization using the authorization information and the authorization card information based on the biometric information by the management-authorization server;

notifying permission of connection of the remote machine with the device unique ID from the management-authorization server to the local machine having the remote machine connected, according to a result of the authorization of the abovementioned step;

notifying information of connection from the remote machine to the local machine, according to the result of the authorization of the abovementioned step, from the management-authorization server to the remote machine; and

accessing the local machine from the remote machine based on the information of the connection.

12. The remote access method according to claim 11,

wherein the management-authorization server obtains a relay server on a route based on access information of the remote machine and notifies information of connection realizing high-speed connection between the local machine and the relay server.