Relay device and control method of relay device

• US 9,787,636 B2
• Filed: 05/13/2014
• Issued: 10/10/2017
• Est. Priority Date: 05/16/2013
• Status: Active Grant

• Current Assignee: Yamaha Corporation
• Original Assignee: Yamaha Corporation
• Inventors: Onogawa, Shinya, Osakabe, Kazuhiro
• Primary Examiner(s): Jeudy, Josnel
• Application Number:
  US14/411,583
• Publication Number:
  US 20150195247A1
• Time in Patent Office: 1,246 Days
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

An occurrence of virus infection and fraud caused by web access is prevented in advance without any particular restriction. A relay device (10) which connects an in-house LAN (20) to a wide area network (30) includes a URL checker (1510) for determining whether or not a URL is included in an email transmitted to the in-house LAN (20) from the wide area network (30), and registering the URL in a URL database (154d) when the URL is included; and a redirect section (1512) for determining whether or not a URL associated with a corresponding web server is registered in the URL database (154d) in response to detection of access from a terminal device within the in-house LAN (20) to the web server device in the wide area network (30), displaying a redirect screen inquiring whether to perform web access in the terminal device when there is a registered URL, and relaying the web access when an reply allowing the access is obtained.

Claims

1. A relay device which connects a local area network to a wide area network, the relay device comprising:

a processor and a memory storing instructions, the processor executing the stored instructions to;

receive an email destined for a terminal device within the local area network from the wide area network;

determine whether or not an identifier uniquely indicating an available resource through the wide area network is included in the received email;

register the identifier in a database when it is determined that the identifier is included in the email; and

transfer the email to the terminal device within the local area network, the processor further executing the stored instructions to;

detect access from a terminal device within the local area network to a resource available through the wide area network;

determine whether or not an identifier indicating the resource available through the wide area network is registered in the database in response to detection of the access from the terminal device to the available resource;

display a screen inquiring whether to perform the access in the terminal device when it is determined that the identifier is registered in the database; and

relay the access when a reply allowing the access is obtained through the displayed screen.

7. The relay device according to claim 1, further comprising:

a filter, configured to perform at least one filtering process, among the first filtering process of filtering an email received in the local area network from the wide area network based on a source email address in the email, and a second filtering process of filtering an email transmitted from the local area network to the wide area network based on a destination email address of the email, wherein

the redirect section inquires to the terminal device about whether to release a filtering of a source email address with respect to the email that is filtered by the first filtering process in the terminal device, or whether to release a filtering of a destination email address with respect to the email that is filtered by the second filtering process, and updates a filtering condition of the filter in response to an operation in the terminal device for an inquiry from the redirect section.

8. The relay device according to claim 1, further comprising:

a filter, configured to perform at least one filtering process, among the first filtering process of filtering an email received in the local area network from the wide area network based on a source email address in the email, and a second filtering process of filtering an email transmitted from the local area network to the wide area network based on a destination email address of the email; and

an email address database for storing at least the source email address and the destination email address of the email which is filtered by the filter, wherein

the redirect section determines whether there is an email that is filtered by the filter based on stored content of the email address database, among emails of which a destination or a source is a terminal device that performs access to the available resources through the wide area network.

9. The relay device according to claim 8, wherein

the filter performs the first filtering process at least,

the email address database further stores a terminal identifier indicative of a destination or source terminal device of the email which is filtered by the filter, and

the redirect section inquires to the terminal device about whether to release a filtering of a source email address with respect to the email that is filtered by the first filtering process in the terminal device, or whether to release a filtering of a destination email address with respect to the email that is filtered by the second filtering process, and updates a filtering condition of the filter in response to an operation in the terminal device for an inquiry from the redirect section.

10. The relay device according to claim 9, wherein

the redirect section displays a screen inquiring whether to release a filtering of a source email address with respect to the email that is filtered by the first filtering process in the terminal device, and displays a screen inquiring whether to release a filtering of a destination email address with respect to the email that is filtered by the second filtering process in the terminal device, and updates a filtering condition of the filter in response to an operation for each screen.

2. A relay device which connects a local area network to a wide area network, the relay device comprising:

a processor and a memory storing instructions, the processor executing the stored instructions to;

determine whether or not an identifier uniquely indicating an available resource through the wide area network is included in an email that the local area network receives through the relay device from the wide area network; and

register the identifier in a database when it is determined that the identifier is included in the email; and

the processor further executing the stored instructions to;

detect access from a terminal device within the local area network to a resource available through the wide area network;

determine whether or not an identifier indicating the resource available through the wide area network is registered in the database in response to detection of the access from the terminal device to the available resource;

display a screen inquiring whether to perform the access in the terminal device when it is determined that the identifier is registered in the database; and

relay the access when a reply allowing the access is obtained through the displayed screen,

the relay device further comprising;

a filter, configured to perform at least a first filtering process, among the first filtering process of filtering an email received in the local area network from the wide area network based on a source email address in the email, and a second filtering process of filtering an email transmitted from the local area network to the wide area network based on a destination email address of the email; and

an email address database for storing the source email address or the destination email address of the email which is filtered by the filter, and a terminal identifier indicative of a destination or source terminal device thereof, wherein

the redirect section determines whether there is an email that is filtered by the filter with reference to stored content of the email address database, among emails of which a destination or a source is a terminal device that performs access to the available resources through the wide area network, and displays a screen inquiring whether to release a filtering of a source email address with respect to the email that is filtered by the first filtering process in the terminal device, and displays a screen inquiring whether to release a filtering of a destination email address with respect to the email that is filtered by the second filtering process in the terminal device, and updates a filtering condition of the filter in response to an operation for each screen.

3. The relay device according to claim 2, further comprising:

an email storage section for storing the email that is filtered by the first filtering process; and

an email generator/transmitter, configured to transmit the email stored in the email storage section as an email using with the relay device as a source, wherein

the redirect section causes the email generator/transmitter to transmit an email transmitted to the terminal device from a source email address that is excluded from a filtering target, depending on update of the filtering condition of the first filtering process.

4. The relay device according to claim 2, further comprising:

an email checker, configured to check whether or not the email that is filtered by the filter is a junk email, wherein

the identifier checker checks an email that has passed a checking by the email checker as a check target.

5. The relay device according to claim 2, further comprising:

an address book analyzer, configured to analyze email address book data of a terminal device within the local area network and extract an email address; and

an email filter data generator, configured to generate email filter data representing a filtering condition used by the filter based on the email address extracted by the address book analyzer, and send the email filter data to the filter.

6. A control method of a relay device which connects a local area network to a wide area network, the control method comprising:

receiving an email destined for a terminal device within the local area network from the wide area network;

determining whether or not an identifier uniquely indicating an available resource through the wide area network is included in the received email;

registering the identifier in a database when it is determined that the identifier is included in the email;

transferring the email to the terminal device within the local area network;

detecting access from a terminal device within the local area network to a resource available through the wide area network;

determining whether or not an identifier indicating the resource available through the wire area network is registered in the database in response to detection of the access from the terminal device;

displaying a screen inquiring whether to perform the access in the terminal device when it is determined that the identifier is registered in the database; and

relaying the access when an reply allowing the access is obtained, through the displayed screen.