VPN COMMUNICATION TERMINAL COMPATIBLE WITH CAPTIVE PORTALS, AND COMMUNICATION CONTROL METHOD AND PROGRAM THEREFOR

• US 20160269380A1
• Filed: 02/02/2016
• Published: 09/15/2016
• Est. Priority Date: 03/10/2015
• Status: Abandoned Application

• Current Assignee: Hitachi Solutions Limited (Hitachi, Ltd.)
• Original Assignee: Hitachi Solutions Limited (Hitachi, Ltd.)
• Inventors: KISHIDA, Hiroyuki
• Application Number:
  US15/013,260
• Publication Number:
  US 20160269380A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Provided is, in a scene where a VPN communication terminal, which has a function of restricting its communication in a network outside a company to communication with a VPN authentication server, connects to the Internet via an access point that complies with a wireless LAN meeting the captive portal specifications, a mechanism capable of performing captive portal authentication independently of vendors while preventing leakage of information. A VPN communication terminal has mounted thereon (1) a functional unit configured to autonomously monitor the connection status of the terminal with the Internet, (2) a functional unit configured to allow communication of a browser program only when the terminal is not determined to be connected to the Internet; and (3) a functional unit configured to restrict network communication of the terminal to only communication with the VPN authentication server only when the terminal is determined to be connected to the Internet.

Claims

1. A VPN communication terminal capable of communicating with a VPN authentication server via an Internet, comprising:

a first functional unit configured to autonomously monitor a connection status of the terminal with the Internet;

a second functional unit configured to allow communication of a browser program only when the terminal is not determined to be connected to the Internet by the first functional unit; and

a third functional unit configured to restrict network communication of the terminal to only communication with the VPN authentication server only when the terminal is determined to be connected to the Internet by the first functional unit.

2. The VPN communication terminal according to claim 1, wherein

the first functional unit is configured to

determine that the terminal is connected to the Internet when communication with a specific HTTP server on the Internet is possible, and

determine that the terminal is not connected to the Internet when communication with the specific HTTP server is not confirmed.

3. A communication control method executed by a VPN communication terminal capable of communicating with a VPN authentication server via an Internet, the method comprising the following processes performed by the VPN communication terminal:

autonomously monitoring a connection status of the terminal with the Internet;

allowing communication of a browser program only when the terminal is not determined to be connected to the Internet; and

restricting network communication of the terminal to only communication with the VPN authentication server only when the terminal is determined to be connected to the Internet.

4. A program for causing a computer, which is mounted on a VPN communication terminal capable of communicating with a VPN authentication server via an Internet, to execute the following processes:

autonomously monitoring a connection status of the terminal with the Internet;

allowing communication of a browser program only when the terminal is not determined to be connected to the Internet; and

restricting network communication of the terminal to only communication with the VPN authentication server only when the terminal is determined to be connected to the Internet.