NETWORK SYSTEM, ITS CONTROL METHOD, AND PROGRAM

• US 20090158410A1
• Filed: 10/27/2005
• Published: 06/18/2009
• Est. Priority Date: 10/28/2004
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Yasuda, Masataka
• Granted Patent: US 8,613,049 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

The invention provides a network system which can prevent an illegal access to a network or the like set in a specific area and improve security of the network. The network system permits the entering of the user into a security area in accordance with security information (user ID) read out of a contactless IC in a carrying ID card by an entering/leaving room managing apparatus and registers an MAC address of a notebook computer carried by the user when he enters the security area to a managing server as ID information corresponding to the user ID. When a leaving request of the user is received through the entering/leaving room managing apparatus, the network system deletes the registered ID information and restricts connection between the notebook computer and the network on the basis of a registration situation of the ID information to the managing server.

Claims

1. A network system having:

a reading apparatus for reading security information to make user authentication;

a server for managing said read security information; and

at least one communicating terminal which can communicate with a network,

wherein said server comprises;

a reception unit adapted to receive identification information of said communicating terminal;

a registration unit adapted to register the received identification information in correspondence to the security information;

a deletion unit adapted to delete the registered identification information in accordance with the read security information; and

a control unit adapted to control the communication between said communicating terminal and the network on the basis of a registration situation of the identification information.

2. A system according to claim 1, wherein said control unit permits the communication when the identification information has been registered and does not permit the communication when the registered identification information has been deleted.

3. A system according to claim 1, wherein when the communication is not executed for a predetermined time, said deletion unit deletes the registered identification information.

4. A system according to claim 1, wherein said reception unit receives the identification information from said communicating terminal carried by the authenticated user.

5. A system according to claim 1, wherein said reception unit receives the identification information from a carrying device of the authenticated user.

6. A system according to claim 1, wherein said control unit does not register the received identification information if timing when the security information is read and timing when the identification information is registered do not lie within a predetermined time.

7. A system according to claim 1, wherein when there is an access to the network from a communicating terminal in which the identification information is not registered, said control unit forms a warning message to be displayed on a display unit of said communicating terminal and outputs the message.

8. A system according to claim 1, wherein at least either an MAC address or an IP address of said communicating terminal is included in the identification information.

9. A system according to claim 1, wherein said reading apparatus reads the security information and the identification information in a contactless manner.

10. A system according to claim 1, wherein the security information is read out of at least a carrying device of the user.

11. A system according to claim 5, wherein at least an ID card or a cellular phone having an RFID tag is included in the carrying device.

12. A system according to claim 5, wherein at least a communicating terminal having an RFID tag is included in the carrying device.

13. A control method for a network system having a reading apparatus for reading security information to make user authentication, a server for managing the read security information, and at least one communicating terminal which can communicate with a network, comprising:

a reception step of receiving identification information of said communicating terminal;

a registration step of registering the received identification information in correspondence to the security information;

a deletion step of deleting the registered identification information in accordance with the read security information; and

a control step of controlling the communication between the communicating terminal and the network on the basis of a registration situation of the identification information.

14. A method according to claim 13, wherein in said control step, the communication is permitted when the identification information has been registered, and the communication is not permitted when the registered identification information has been deleted.

15. A method according to claim 13, wherein in said deletion step, when the communication is not executed for a predetermined time, the registered identification information is deleted.

16. A method according to claim 13, wherein in said reception step, the identification information is received from the communicating terminal carried by the authenticated user.

17. A method according to claim 13, wherein in said reception step, the identification information is received from a carrying device of the authenticated user.

18. A method according to claim 13, wherein in said control step, the received identification information is not registered if timing when the security information is read and timing when the identification information is registered do not lie within a predetermined time.

19. A method according to claim 13, wherein in said control step, when there is an access to the network from a communicating terminal in which the identification information is not registered, a warning message to be displayed on a display unit of the communicating terminal is formed and outputted.

20. A method according to claim 13, wherein at least either an MAC address or an IP address of the communicating terminal is included in the identification information.

21. A method according to claim 13, wherein the reading apparatus reads the security information and the identification information in a contactless manner.

22. A method according to claim 13, wherein the security information is read out of at least a carrying device of the user.

23. A method according to claim 17, wherein at least an ID card or a cellular phone having an RFID tag is included in the carrying device.

24. A method according to claim 17, wherein at least a communicating terminal having an RFID tag is included in the carrying device.

25. A computer program, stored in a computer-readable storage medium, for allowing a computer to execute a control method according to any one of claims 13 to 24.