Computer system and method thereof

• US 7,761,539 B2
• Filed: 09/27/2004
• Issued: 07/20/2010
• Est. Priority Date: 09/27/2004
• Status: Expired due to Fees

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Izutani, Kenji
• Primary Examiner(s): Dalencourt; Yves
• Application Number:
  US11/576,045
• Publication Number:
  US 20080059615A1
• Time in Patent Office: 2,122 Days
• Field of Search: 709/220, 709/221, 709/222, 709/227, 709/228, 726/3
• US Class Current: 709/222
• CPC Class Codes: H04L 2101/668 Internet protocol [IP] address subnets
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

A computer system to which measures against computer virus can be taken with ease, and a method therefor. In a computer network system, a first GW server is assigned an IP address to which a netmask of 24 bits (allowing to perform communication with 256 other nodes at the maximum) is imparted, and is allowed to perform communication with all of client computers. Upon occurrence of an abnormal condition such as viral infection, the client computers are assigned or reassigned IP addresses including a netmask (for example, 30 bits; allowing to perform communication with two other nodes at the maximum) that only allow to perform communication with a security measure server via a second GW server, whereby the client computers are allowed to perform communication only with the security measure server via the second GW server. In this way, the security measures are taken.

Claims

1. A computer system, in which communication is performed using a first IP address with a first netmask having a predetermined number of bits and a second IP address with a second netmask having a number of bits different from that of the first netmask,

the computer system comprising:

one or more first nodes for performing communication using the first IP address or the second IP address in a network to which the first netmask and the second netmask are applied;

one or more second nodes for performing communication using the second IP address and performing communication control among the first nodes;

a third node for selectively assigning the first IP address or the second IP address to the first node; and

a fourth node for performing communication with the first nodes, wherein;

the first IP address is an IP address used for communication between each group including one or more of the first nodes, and the fourth node;

the second IP address is an IP address for communication between arbitrary one of the first nodes and the second nodes;

the first nodes communicate with the fourth node using the first IP address assigned thereto;

wherein the fourth node is a second gateway server for applying communication control for a security measure to the first nodes; and

wherein, in a case where the communication control for the security measure for the first node is performed by the second gateway server, the third node assigns the first IP address with a first netmask having a number of bits smaller than the second netmask to the first nodes

the second nodes communicate with arbitrary one of the first nodes using the second IP address assigned thereto.

2. The computer system according to claim 1, wherein:

the first nodes are network computers;

the second nodes are first gateway servers; and

the third node is a DHCP server.

3. The computer system according to claim 1, further comprising a fifth node for performing communication with the first nodes via the fourth node,

wherein the first nodes further perform communication with the fifth node via the fourth node using the first IP address assigned.

4. The computer system according to claim 3, wherein the fifth node provides the first nodes with a predetermined function via the fourth node.

5. The computer system according to claim 4, wherein:

the first nodes request the third node to assign IP addresses at a predetermined time interval; and

the third node assigns the first IP address or the second IP address to the first nodes for requesting assignment of IP addresses.

6. An IP address assigning apparatus for selectively assigning, in a computer system in which communication is performed using a first IP address with a first netmask having a predetermined number of bits and a second IP address with a second netmask having a number of bits different from that of the first netmask, the first IP address or the second IP address, wherein:

the computer system includes;

one or more first nodes for requesting reassignment of IP addresses at predetermined timing and performing communication using the first IP address or the second IP address assigned in response to this request, in a network to which the first netmask and the second netmask are applied;

one or more second nodes for performing communication using the second IP address and performing communication control among the first nodes; and

a fourth node for performing communication with the first nodes;

the first IP address is an IP address used for communication between each group including one or more of the first nodes, and the fourth node;

the second IP address is an IP address for communication between arbitrary one of the first nodes and the second nodes;

the first nodes communicate with the fourth node using the first IP address assigned thereto;

the second nodes communicate with arbitrary one of the first nodes using the second IP address assigned thereto; and

the IP address assigning apparatus comprises;

assigning means for assigning the second IP address to each of the first nodes; and

reassigning means for, in response to requests for reassignment of IP addresses from the first nodes, to the first nodes which have requested the reassignment of IP addresses, reassigning the first IP address in a case where the fourth node and the first nodes communicate with each other, and reassigning the second IP address in other cases.

7. The IP address assigning apparatus according to claim 6, wherein the reassigning means sequentially reassigns, in response to the request for reassignment of IP addresses from the communication node, the specific IP address to all the communication nodes in a case where the communication between the specific nodes and the communication nodes is performed.

8. A communication method of performing communication in a network using a first IP address with a first netmask having a predetermined number of bits and a second IP address with a second netmask having a number of bits different from that of the first netmask, wherein:

the network includes first to fourth nodes each of which being one or more nodes;

the first IP address is an IP address used for communication between each group including one or more of the first nodes, and the fourth nodes;

the second IP address is an IP address for communication between arbitrary one of the first nodes and the second nodes;

the third nodes selectively assign the first IP address or the second IP address to the first nodes;

each of the first nodes performs communication with the fourth nodes using the first IP address assigned thereto and communicates with the second nodes using the second IP address assigned thereto;

wherein the fourth node is a second gateway server for applying communication control for a security measure to the first nodes; and

wherein, in a case where the communication control for the security measure for the first node is performed by the second gateway server, the third node assigns the first IP address with a first netmask having a number of bits smaller than the second netmask to the first nodes

each of the second nodes communicates with arbitrary one of the first nodes using the second IP address.

9. An IP address assigning method of selectively assigning, in a computer system in which communication is performed using a first IP address with a first netmask having a predetermined number of bits and a second IP address with a second netmask having a number of bits different from that of the first netmask, the first IP address or the second IP address, wherein:

the computer system includes;

one or more first nodes for requesting reassignment of IP addresses at predetermined timing and performing communication using the first IP address or the second IP address assigned in response to this request, in a network to which the first netmask and the second netmask are applied;

one or more second nodes for performing communication using the second IP address and performing communication control among the first nodes; and

a fourth node for performing communication with the first nodes;

the first IP address is an IP address used for communication between each group including one or more of the first nodes, and the fourth node;

the second IP address is an IP address for communication between arbitrary one of the first nodes and the second nodes;

the first nodes communicate with the fourth node using the first IP address assigned thereto;

the second nodes communicate with arbitrary one of the first nodes using the second IP address assigned thereto; and

the IP address assigning method comprises;

assigning the second IP address to each of the first nodes; and

in response to requests for reassignment of IP addresses from the first nodes, to the first nodes which have requested the reassignment of IP addresses, reassigning the first IP address in a case where the fourth node and the first nodes communicate with each other, and reassigning the second IP address in other cases.

10. A program stored on a memory and executed by a processor for performing communication in a network using a first IP address with a first netmask having a predetermined number of bits and a second IP address with a second netmask having a number of bits different from that of the first netmask, wherein:

the network includes first to fourth nodes each of which being one or more nodes;

the first IP address is an IP address used for communication between each group including one or more of the first nodes, and the fourth nodes;

the second IP address is an IP address for communication between arbitrary one of the first nodes and the second nodes; and

the program causes a computer to execute the steps of;

selectively assigning, by the third nodes, the first IP address or the second IP address to the first nodes;

performing, by each of the first nodes, communication with the fourth nodes using the first IP address assigned thereto and communication with the second nodes using the second IP address assigned thereto; and

performing, by each of the second nodes, communication with arbitrary one of the first nodes using the second IP address wherein the fourth node is a second gateway server for applying communication control for a security measure to the first nodes; and

wherein, in a case where the communication control for the security measure for the first node is performed by the second gateway server, the third node assigns the first IP address with a first netmask having a number of bits smaller than the second netmask to the first nodes.

11. A program stored on a memory and executed by a processor for an IP address assigning method of selectively assigning, in a computer system in which communication is performed using a first IP address with a first netmask having a predetermined number of bits and a second IP address with a second netmask having a number of bits different from that of the first netmask, the first IP address or the second IP address, wherein:

the computer system includes;

one or more first nodes for requesting reassignment of IP addresses at predetermined timing and performing communication using the first IP address or the second IP address assigned in response to this request, in a network to which the first netmask and the second netmask are applied;

one or more second nodes for performing communication using the second IP address and performing communication control among the first nodes; and

a fourth node for performing communication with the first nodes;

the first IP address is an IP address used for communication between each group including one or more of the first nodes, and the fourth node;

the second IP address is an IP address for communication between arbitrary one of the first nodes and the second nodes;

the first nodes communicate with the fourth node using the first IP address assigned thereto;

the second nodes communicate with arbitrary one of the first nodes using the second IP address assigned thereto; and

the program causes a computer to execute the steps of;

assigning the second IP address to each of the first nodes; and

in response to requests for reassignment of IP addresses from the first nodes, to the first nodes which have requested the reassignment of IP addresses, reassigning the first IP address in a case where the fourth node and the first nodes communicate with each other, and reassigning the second IP address in other cases.