QUARANTINE NETWORK SYSTEM AND QUARANTINE CLIENT

• US 20120240232A1
• Filed: 03/07/2012
• Published: 09/20/2012
• Est. Priority Date: 03/18/2011
• Status: Abandoned Application

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Azuma, Yoshikazu
• Application Number:
  US13/413,738
• Publication Number:
  US 20120240232A1
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A quarantine network system includes a quarantine control apparatus and a quarantine client connectable with each other. The quarantine control apparatus includes a receiving unit to receive verification information of the quarantine client, an identification unit to identify a security policy that the quarantine client is required to conform to, and an inspection request unit to transmit an inspection request to the quarantine client, requesting the quarantine client to inspect conformance/non-conformance to the identified security policy. The quarantine client includes a receiver to receive the inspection request from the quarantine control apparatus, a storage unit storable inspection information to inspect conformance/non-conformance to the security policy, a reading unit to read out the inspection information from the storage unit, an inspection unit to inspect the quarantine client using the read-out inspection information, and an inspection result reporting unit to transmit an inspection result to the quarantine control apparatus.

Claims

1. A quarantine network system, comprising:

a quarantine control apparatus; and

a quarantine client connectable to the quarantine control apparatus via a network,

the quarantine control apparatus including;

a receiving unit to receive verification information of the quarantine client;

an identification unit to identify a security policy that the quarantine client is required to conform to based on the received verification information; and

an inspection request unit to transmit an inspection request to the quarantine client, the inspection request requesting the quarantine client to inspect conformance/non-conformance to the security policy identified by the identification unit,

the quarantine client including;

a receiver to receive the inspection request from the quarantine control apparatus;

a storage unit that can store inspection information useable to inspect conformance/non-conformance to the security policy set for the quarantine client;

a reading unit to read out the inspection information from the storage unit in view of the inspection request received by the receiver;

an inspection unit to inspect the quarantine client using the inspection information read out by the reading unit from the storage unit; and

an inspection result reporting unit to transmit an inspection result obtained by the inspection unit to the quarantine control apparatus.

2. The quarantine network system of claim 1, further comprising an inspection information module, disposed outside the quarantine client, to store inspection information useable to inspect conformance/non-conformance to each security policy,

wherein the quarantine control apparatus further includes:

a requesting unit to issue a request for inspection information to the inspection information module to inspect conformance/non-conformance to the security policy identified by the identification unit of the quarantine control apparatus,

wherein the inspection information module is provided with a communication unit to transmit the inspection information requested by the quarantine control apparatus to the quarantine control apparatus,

wherein, based on the inspection information received by the quarantine control apparatus, the inspection request unit of the quarantine control apparatus transmits an inspection request to the quarantine client to request an inspection of conformance/non-conformance to the security policy at the quarantine client.

3. The quarantine network system of claim 2, further comprising an inspection execution module, disposed outside the quarantine client, to inspect the quarantine client,

wherein the quarantine client further includes:

a determination unit to determine whether an inspection is conduct-able for each inspection item by the inspection unit by referencing inspection-execution-determination information stored in the storage unit of the quarantine client when the receiver receives the inspection request from the quarantine control apparatus; and

an instruction unit to instruct the inspection execution module to inspect each inspection item that is identified by the determination unit as not inspectable by the inspection unit,

wherein the inspection unit conducts an inspection for each inspection item which is identified by the determination unit as inspectable by the inspection unit,

wherein the inspection result reporting unit transmits at least one of an inspection result obtained from the inspection unit and an inspection result obtained from the inspection execution module to the quarantine control apparatus.

4. The quarantine network system of claim 1, wherein the quarantine control apparatus further includes an isolation control unit to isolate the quarantine client based on the inspection result received from the quarantine client,

wherein the quarantine client further includes a communication unit to communicate with a remedy module disposable on the network,

wherein the quarantine client receives a remedy operation by communicating with the remedy module when the quarantine client is isolated by the quarantine control apparatus.

5. A quarantine client, comprising:

a receiver to receive an inspection request from a quarantine control apparatus connectable via a network, the inspection request requesting an inspection of conformance/non-conformance to a security policy for the quarantine client;

a storage unit that can store inspection information useable to inspect conformance/non-conformance to the security policy set for the quarantine client;

a reading unit to read out the inspection information from the storage unit based on the inspection request received by the receiver;

an inspection unit to inspect the quarantine client using the inspection information read out by the reading unit from the storage unit; and

an inspection result reporting unit to transmit an inspection result of the inspection unit to the quarantine control apparatus.

6. The quarantine client of claim 5, further comprising a communication unit to communicate with a remedy module disposable on the network;

and

wherein the quarantine client receives a remedy operation by communicating with the remedy module when the quarantine client is isolated by the quarantine control apparatus.