COMMUNICATION CONTROL DEVICE AND COMMUNICATION CONTROL SYSTEM

• US 20090132509A1
• Filed: 03/28/2005
• Published: 05/21/2009
• Est. Priority Date: 03/28/2005
• Status: Active Grant

• Current Assignee: Duaxes Corporation
• Original Assignee: Duaxes Corporation
• Inventors: Nagoya, Mitsugu
• Granted Patent: US 8,073,855 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: Y10S 707/922 Communications
• CPC Class Codes: Y10S 707/959 Network
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

The present invention provides a technique for enabling a high-speed communication control apparatus.

A packet processing circuit of a communication control apparatus includes a user database, a virus list, a whitelist, a blacklist and a common category list. Upon acquisition of a request for access to a content, matching between information on a user who has sent the access request and the user database is performed by a search circuit, so as to authenticate the user. When the user is authenticated, the search circuit performs matching between the URL of the content to be accessed and the virus list, whitelist, blacklist and common category list. A process execution circuit controls the permission for the access based on the search result of the search circuit and determination conditions stored in a second database. The packet processing circuit is configured with a wired logic circuit.

Claims

1. A communication control apparatus, comprising:

a memory unit which stores reference data to be referred to when determining the permission for access to a content stored in a position accessible via a network;

a search unit which acquires communication data for requesting access to the content and searches the communication data for the reference data; and

a processing unit which controls access to the content based on the result of the search,

wherein the search unit is configured with a wired logic circuit.

2. The communication control apparatus of claim 1, wherein the search unit searches, for the reference data, information indicating the position of a content to be accessed in the communication data.

3. The communication control apparatus of claim 1, wherein:

the memory unit includes a plurality of databases storing the reference data;

the search unit includes, with respect to each of a plurality of the databases, a search circuit which searches the communication data for the reference data stored in the database; and

a plurality of the search circuits perform searches on a plurality of the databases in parallel.

4. The communication control apparatus of claim 3, wherein:

priorities of the plurality of databases are defined; and

,

when a plurality of the search circuits perform searches on a plurality of the databases in parallel and consequently a plurality of pieces of reference data included in a plurality of the databases are found, a search result with the highest priority is employed.

5. The communication control apparatus of claim 3, wherein the database stores data indicating the position of a content to which access is permitted.

6. The communication control apparatus of claim 3, wherein the database stores data indicating the position of a content to which access is prohibited.

7. The communication control apparatus of claim 3, wherein the database stores data indicating the position of a content containing a computer virus to which access is prohibited.

8. The communication control apparatus of claim 3, wherein the database stores data in which the permission or prohibition of access to a content belonging to a category is determined by a user, with respect to each category.

9. A communication control system, comprising:

the communication control apparatus of claim 1; and

a server apparatus which is connected to the communication control apparatus and controls the operation of the communication control apparatus.