Communication control device and communication control system

• US 8,073,855 B2
• Filed: 03/28/2005
• Issued: 12/06/2011
• Est. Priority Date: 03/28/2005
• Status: Expired due to Fees

• Current Assignee: Duaxes Corporation
• Original Assignee: Duaxes Corporation
• Inventors: Nagoya, Mitsugu
• Primary Examiner(s): Ly, Cheyne D
• Application Number:
  US11/910,240
• Publication Number:
  US 20090132509A1
• Time in Patent Office: 2,444 Days
• Field of Search: 707/754, 707/922, 707/959, 707/999.009, 713/154, 709204-208, 709217-219, 709223-224
• US Class Current: 707/754
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: Y10S 707/922 Communications
• CPC Class Codes: Y10S 707/959 Network
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

The present invention provides a technique for enabling a high-speed communication control apparatus.

A packet processing circuit of a communication control apparatus includes a user database, a virus list, a whitelist, a blacklist and a common category list. Upon acquisition of a request for access to a content, matching between information on a user who has sent the access request and the user database is performed by a search circuit, so as to authenticate the user. When the user is authenticated, the search circuit performs matching between the URL of the content to be accessed and the virus list, whitelist, blacklist and common category list. A process execution circuit controls the permission for the access based on the search result of the search circuit and determination conditions stored in a second database. The packet processing circuit is configured with a wired logic circuit.

Claims

1. A communication control apparatus, comprising:

a memory unit which stores reference data to be referred to when determining the permission for access to a content stored in a position accessible via a network;

a search unit which acquires communication data for requesting access to the content and searches the communication data for the reference data; and

a processing unit which controls access to the content based on the result of the search, wherein;

the search unit is configured with a wired logic circuit,

the search unit comprises a determination circuit which determines which range comparison target data to be compared with the reference data pertains to, out of three or more ranges into which the plurality of pieces of reference data stored in the memory unit are divided, and

the determination circuit comprises a plurality of comparison circuits which compare reference data at borders of the ranges with the comparison target data so that the plurality of comparison circuits determine which of the three or more ranges the comparison target data pertains to simultaneously in parallel.

2. The communication control apparatus of claim 1, wherein the search unit searches, for the reference data, information indicating the position of a content to be accessed in the communication data.

3. The communication control apparatus of claim 1, wherein:

the memory unit includes a plurality of databases storing the reference data;

the search unit includes, with respect to each of a plurality of the databases, a search circuit which searches the communication data for the reference data stored in the database; and

a plurality of the search circuits perform searches on a plurality of the databases in parallel.

4. The communication control apparatus of claim 3, wherein:

priorities of the plurality of databases are defined; and

,

when a plurality of the search circuits perform searches on a plurality of the databases in parallel and consequently a plurality of pieces of reference data included in a plurality of the databases are found, a search result with the highest priority is employed.

5. The communication control apparatus of claim 3, wherein the database stores data indicating the Position of a content to which access is permitted.

6. The communication control apparatus of claim 3, wherein the database stores data indicating the position of a content to which access is prohibited.

7. The communication control apparatus of claim 3, wherein the database stores data indicating the position of a content containing a computer virus to which access is prohibited.

8. The communication control apparatus of claim 3, wherein the database stores data in which the permission or prohibition of access to a content belonging to a category is determined by a user, with respect to each category.

9. A communication control system, comprising:

the communication control apparatus of claim 1; and

a server apparatus which is connected to the communication control apparatus and controls the operation of the communication control apparatus.

10. A communication control apparatus comprising:

a memory unit which stores reference data to be referred to when determining the permission for access to a content stored in a position accessible via a network;

a search unit which acquires communication data for requesting access to the content and searches the communication data for the reference data; and

a processing unit which controls access to the content based on the result of the search, wherein

the search unit is configured with a wired logic circuit, and

the search unit comprises a binary search circuit which searches the data for the reference data by binary search, and wherein, when the number of pieces of the reference data is smaller than the number of pieces of data storable in the memory unit, the reference data is stored in the memory unit in descending order from the last data position, while 0 is stored in the rest of the data.