ROUTING METHOD

• US 20100205300A1
• Filed: 04/23/2010
• Published: 08/12/2010
• Est. Priority Date: 10/25/2007
• Status: Active Grant

• Current Assignee: Fujitsu Client Computing Limited (Lenovo Group Ltd.)
• Original Assignee: Fujitsu Limited
• Inventors: Uchida, Yoshiaki
• Granted Patent: US 8,626,915 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 15/17331 Distributed shared memory [DSM], e.g. remote direct memory access [RDMA]
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

A method executed by a router that establishes a connection between a network and an another network that includes an information processing device and an information storage device, the method includes: detecting an access status of the information processing device to the information storage device; and prohibiting transfer of the information from the information processing device to the another network depending on the access status managed in the detecting.

Claims

1. A method executed by a router that establishes a connection between a network and an another network that includes an information processing device and an information storage device, the method comprising:

detecting an access status of the information processing device to the information storage device; and

prohibiting transfer of the information from the information processing device to the another network depending on the access status managed in the detecting.

2. The method according to claim 1, wherein

the detecting includes acquiring the access status from the information storage device.

3. The method according to claim 2, wherein

the detecting includes managing a period of time during which transfer of the information from the information processing device to the another network is prohibited in the prohibiting.

4. The method according to claim 3, further comprising:

detecting a connection between the information processing device and the another network.

5. The method according to claim 4, wherein

the detecting includes managing a connection status between the information processing device and the another network.

6. The method according to claim 5, wherein

the detecting includes managing a period of time, during which an access from the information processing device to the information storage device is prohibited, depending on a connection status between the information processing device and the another network.

7. A method executed by an information storage device that is connected to an information processing device via a network, the method comprising:

generating a characteristic pattern corresponding to a file held in the information storage device; and

storing the characteristic pattern.

8. The method according to claim 7, further comprising:

searching for a file corresponding to the characteristic pattern.

9. The method according to claim 8, further comprising:

detecting a file access from the information processing device to the information storage device.

10. The method according to claim 9, further comprising:

when a file corresponding to the characteristic pattern has been newly detected in the searching, adding the detected file as a monitoring target in the detecting.

11. A method that establishes a connection between a network and an another network that includes an information processing device and an information storage device, comprising:

determining whether a characteristic pattern corresponding to a file held in the information storage device is contained in a packet received from the information processing device; and

discarding a packet that contains the characteristic pattern.