SYSTEM FOR MONITORING ACCESS TO NETWORK WITHIN SECURED SITE

• US 20160080391A1
• Filed: 08/21/2015
• Published: 03/17/2016
• Est. Priority Date: 09/12/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hasegawa, Tohru, Motoki, Toshiyasu, Oishi, Yutaka, Takayama, Masao
• Granted Patent: US 10,178,099 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A controller is provided which monitors/manages information terminals'"'"' access to a network within a secured site. A controller of the present invention includes: a storage device for storing security information about at least one or more information terminals received from the information terminals before accessing a network; and a processor for determining whether to permit access of an information terminal to the network based on the security information read from the storage device and access permission criteria on the security information, and generating a control signal for permitting or blocking the access of the information terminal to the network according to the determination result.

Claims

1. A controller for monitoring access of an information terminal to a network within a secured site, comprising:

a storage device for storing security information regarding at least one information terminal received from the at least one information terminal before accessing the network; and

a processor for determining whether to permit access of the at least one information terminal to the network based on the security information read from the storage device and access permission criteria in the security information, and for generating a control signal for permitting or blocking the access of the information terminal to the network according to a determination result.

2. The controller according to claim 1, wherein the controller receives, through an RFID reader, the security information stored in an RFID tag included in the information terminal.

3. The controller according to claim 1, wherein the security information includes information on types and versions of software that run on the information terminal.

4. The controller according to claim 3, wherein when predetermined software that runs on the information terminal is not of a predetermined version or higher, the processor generates a control signal for blocking access of the information terminal to the network.

5. The controller according to claim 4, wherein the processor receives a latest version information on the predetermined software as the access permission criteria, and stores the latest version information in the storage device.

6. The controller according to claim 1, wherein the processor generates a filter signal for a firewall of the network as the control signal.

7. A management system for managing access of an information terminal to a network within a secured site, comprising:

a receiver for receiving security information regarding at least one information terminal from the at least one information terminal before accessing the network;

a controller for determining whether to permit access of the information terminal to the network based on the security information received from the receiver and a latest access permission criteria in the security information, and for generating a control signal for permitting or blocking access of the information terminal to the network according to a determination result; and

a filter device for permitting or blocking access of the information terminal to the network according to the control signal from the controller.

8. The management system according to claim 7, wherein the receiver includes an RFID reader, and the controller receives, through the RFID reader, the security information stored in an RFID tag included in the information terminal.

9. The management system according to claim 7, wherein the security information includes information on types and versions of software that run on the information terminal.

10. The management system according to claim 9, wherein when predetermined software that runs on the information terminal is not of a predetermined version or higher, the controller generates a control signal for blocking access of the information terminal to the network.

11. The management system according to claim 10, wherein the controller includes a storage device, and receives information on latest version information of the predetermined software as the access permission criteria, and stores the latest version information in the storage device.

12. The management system according to claim 7, wherein the filter device includes a firewall of the network, and the controller generates a filter signal for the firewall as the control signal.

13. A computer program product stored on a computer readable storage medium, which executed by a computer system implements a controller to monitor access of an information terminal to a network within a secured site, and implements the following processes:

receiving security information regarding at least one information terminal from the at least one information terminal before accessing the network;

determining whether to permit access of the information terminal to the network based on the received security information and a latest access permission criteria on the security information;

generating a control signal for permitting or blocking access of the information terminal to the network according to a determination result; and

permitting or blocking a access of the information terminal to the network according to the control signal.

14. The computer program product of claim 13, wherein the permitting or blocking further includes controlling a firewall of the network according to the control signal.

15. The computer program product of claim 13, wherein receiving the security information includes receiving, through an RFID reader, the security information stored in an RFID tag included in the information terminal.

16. The computer program product of claim 13, wherein the security information includes information on types and versions of software that run on the information terminal.

17. The computer program product of claim 16, wherein the determining whether to permit access includes blocking the access of the information terminal to the network when predetermined software that runs on the information terminal is not of a predetermined version or higher.

18. The computer program product of claim 17, further comprising receiving a latest version information on the predetermined software as the access permission criteria, and storing an updated latest version information in a storage device.