NETWORK SYSTEM, MOBILE COMMUNICATION DEVICE AND PROGRAM

• US 20140201808A1
• Filed: 07/25/2012
• Published: 07/17/2014
• Est. Priority Date: 08/10/2011
• Status: Abandoned Application

• Current Assignee: Hitachi Solutions Limited (Hitachi, Ltd.)
• Original Assignee: Hitachi Solutions Limited (Hitachi, Ltd.)
• Inventors: Yada, Tomoki
• Application Number:
  US14/238,100
• Publication Number:
  US 20140201808A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed

Abstract

Leakage of information stored in a mobile communication device via a network is prevented. To this end, a mobile communication device that together with an authentication server forms part of a network system is equipped with: a functional unit configured to detect a change in information on the physical location of the device itself and/or information on the location of the device itself on a network; a functional unit configured to, upon detection of the change, transmit to the authentication server the information on the location of the device itself and/or the information on the location of the device itself on the network; and a functional unit configured to receive from the authentication server a communication control policy corresponding to the information on the location of the device itself and/or the information on the location of the device itself on the network, and apply the communication control policy to the device itself.

Claims

1. A network system comprising a mobile communication device and an authentication server,

wherein the mobile communication device includes

a functional unit configured to detect a change in information on a physical location of the device itself and/or information on a location of the device itself on a network,

a functional unit configured to, upon detection of a change in the location information, transmit to the authentication server information on the location of the device itself and/or the information on the location of the device itself on the network, and

a functional unit configured to receive from the authentication server a communication control policy corresponding to the information on the location of the device itself and/or the information on the location of the device itself on the network, and apply the policy to the device itself, and wherein the authentication server includes

a functional unit configured to receive from the mobile communication device the information on the location of the device itself and/or the information on the location of the device itself on the network, a functional unit configured to retrieve from a management table the communication control policy corresponding to the information on the location and/or the information on the location on the network that has been received, and

a functional unit configured to transmit the retrieved communication control policy to the mobile communication device.

2. The network system according to claim 1, wherein the mobile communication device detects a change in the information on the location on the network from a change in an IP address.

3. The network system according to claim 1, wherein the mobile communication device detects a change in the information on the location on the network from a change in SSID of a wireless access point.

4. The network system according to claim 1, wherein the mobile communication device detects a change in the information on the location on the network from a change in MAC address of a wireless access point.

5. The network system according to claim 1, wherein the mobile communication device detects a change in the information on the physical location when an observed value of a GPS of the mobile communication device is outside a predetermined latitude/longitude range.

6. A mobile communication device that together with an authentication server forms part of a network system, comprising:

a functional unit configured to detect a change in information on a physical location of the device itself and/or information on a location of the device itself on a network;

a functional unit configured to, upon detection of the change, transmit to the authentication server the information on the location of the device itself and/or the information on the location of the device itself on the network; and

a functional unit configured to receive from the authentication server a communication control policy corresponding to the information on the location of the device itself and/or the information on the location of the device itself on the network, and apply the policy to the device.

7. A program for causing a computer, which is mounted on a mobile communication device that together with an authentication server forms part of a network system, to execute:

a function of detecting a change in information on a physical location of the device itself and/or information on a location of the device itself on a network;

a function of transmitting to the authentication server the information on the location of the device itself and/or the information on the location of the device itself on the network for which a change has been detected; and

a function of receiving from the authentication server a communication control policy corresponding to the information on the location of the device itself and/or the information on the location of the device itself on the network, and apply the communication control policy to the device itself.