JP2011087231A - Communication control program, communication control device and network system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To ensure security in a wireless network. <P>SOLUTION: In the communication control method, it is determined at an access point AP whether a channel with the other wireless terminal 101b is already established (A) when there is a quarantine request from a wireless terminal 101a. When the channel with the other wireless terminal 101b is already established, the quarantine request from the wireless terminal 101a is rejected at the access point AP (B). Alternatively, when any channel with the other wireless terminal 101b is not established yet, the quarantine of the wireless terminal 101a is conducted (C) at the access point AP. Furthermore, the access point AP is controlled not to accept an access request (quarantine request and data relay request) from the other wireless terminal 101b while the wireless terminal 101a is under quarantine (D). <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a communication control program, a communication control device, and a network system that control wireless communication.

  Conventionally, as a threat countermeasure technique for a wireless terminal in a mobile space (wireless network), there is one that performs quarantine in a quarantine apparatus connected to a wired network after being accommodated in a wired network from a wireless LAN (Local Area Network) access point. . Here, a conventional quarantine system will be described.

  FIG. 49 is an explanatory diagram showing an example of a conventional quarantine system. In the quarantine system 4900, the wireless terminals 4901-1 to 4901-3 can access the quarantine apparatus 4903 via wireless LAN access points 4902-1 and 4902-2. The quarantine apparatus 4903 quarantines the wireless terminals 4901-1 to 4901-3 connected via the access points 4902-1 and 4902-2.

  Here, the wireless terminals 4901-1 to 4901-3 can access the internal network when the quarantine by the quarantine apparatus 4903 is successful. For this reason, in the quarantine system 4900, since the wireless terminals 4901-1 to 4901-3 that have not been quarantined cannot access the internal network, security in the internal network is ensured.

  Conventionally, there is a technique for determining permission to use a wireless LAN access point by wireless communication (see, for example, Patent Document 1 below). Specifically, when receiving a wireless LAN access point use registration request from a mobile phone terminal, the wireless communication connection management server transmits a registration form to the mobile phone terminal. Thereafter, when the wireless communication connection management server receives the registration form in which the predetermined items are input, the wireless communication connection management server confirms the registration content information and performs a connection process to the wireless LAN access point.

  There is also a technique for determining unauthorized connection between wireless LAN devices (see, for example, Patent Document 2 below). Specifically, the authentication system performs PHS authentication connection prior to LAN connection in response to a request from a client at an access point. Thereafter, the authentication system performs PHS number authentication with reference to the PHS number authentication list, controls the LAN connections in a LAN environment in terms of defining the success or failure of the wireless LAN connection in accordance with the result of the PHS number authenticated by client's request To do.

  In addition, there is a technique for starting communication after confirming that the security level of a computer as a communication partner satisfies a certain condition (see, for example, Patent Document 3 below). Specifically, after confirming the mutual security level with the communication partner, a mutual authentication security driver for performing communication is introduced into each computer belonging to the network. The mutual authentication security driver suspends communication if any one of the virus definition files for communication is old, automatically updates the virus definition file, and then restarts communication.

Japanese Patent Laid-Open No. 2003-235082 JP 2007-150519 A JP 2006-277633 A

  However, according to the prior art described above, when a plurality of wireless terminals to the access point such as a wireless LAN is accessed, until the quarantine in quarantine device is completed, viral infection among a plurality of wireless terminals There is a problem that it is difficult to prevent.

  For example, in FIG. 49, it is assumed that the wireless terminal 4901-3 is attacked by a computer virus. In this case, when the wireless terminal 4901-3 is connected to the access point 4902-2, the entire terminal being connected to the access point 4902-2 (e.g., wireless terminal 4901-2) is at risk of being infected with a computer virus. That is, there is a problem that it is difficult to ensure security outside the quarantine apparatus 4903 such as the mobile space or the access points 4902-1 and 4902-2.

  Further, according to the conventional techniques described in Patent Documents 1 and 2 described above, since that is the authentication using the mobile phone terminal or PHS (quarantine), those not portable telephone terminal or a PHS is connected to a terminal device There is a problem that cannot be applied.

  An object of the present invention is to provide a communication control program, a communication control device, and a network system capable of ensuring security in a wireless network in order to solve the above-described problems caused by the prior art.

  In order to solve the above-described problems and achieve the object, the disclosed technique is such that there is a communication safety inspection request from the wireless terminal in any relay device in the relay device group that connects the wireless terminal and the network. If it is determined whether a communication path is established between another wireless terminal different from the wireless terminal and the relay device, and if it is determined that a communication path is not established, the wireless terminal It is a requirement to establish a communication path for checking the safety of communication between the wireless terminal and the relay device.

  According to the communication control program, the communication control device, and the network system, there is an effect that security in a wireless network can be ensured.

FIG. 3 is an explanatory diagram illustrating an example of an outline of a communication control method according to the first exemplary embodiment; 1 is a system configuration diagram of a network system according to a first exemplary embodiment; It is a block diagram which shows the hardware constitutions of an access point. It is a block diagram which shows the hardware constitutions of a radio | wireless terminal. It is explanatory drawing which shows an example of the memory content of an access point table. It is explanatory drawing which shows an example of the memory content of an authentication table. It is explanatory drawing which shows an example of the memory content of a quarantine policy table. It is explanatory drawing which shows an example of the memory content of a patch information table. It is explanatory drawing which shows an example of the memory content of a permission information table. It is a block diagram which shows the functional structure of an access point. It is explanatory drawing which shows an example of the memory content of a communication status management table. It is explanatory drawing (the 1) which shows the example of registration of a communication status management table. It is explanatory drawing (the 2) which shows the example of registration of a communication status management table. It is explanatory drawing which shows an example of the authentication information contained in a test | inspection request | requirement. It is explanatory drawing which shows an example of the software information contained in a test | inspection request | requirement. It is a block diagram which shows the functional structure of a radio | wireless terminal. It is explanatory drawing which shows an example of the memory content of a quarantine implementation table. It is a flowchart which shows an example of the security determination processing procedure of an access point. It is a flowchart which shows an example of the specific process sequence of the authentication / quarantine process of step S1806. It is a flowchart which shows an example of the search processing procedure of an access point. It is a flowchart which shows an example of the access point relay possibility judgment processing procedure. It is a flowchart which shows an example of the data relay processing procedure of an access point. It is a flowchart which shows an example of the security test | inspection processing procedure of a radio | wireless terminal. It is a flowchart which shows an example of the test | inspection confirmation process procedure of a radio | wireless terminal. FIG. 9 is an explanatory diagram illustrating an example of an outline of a communication control method according to a second embodiment; FIG. 3 is a system configuration diagram of a network system according to a second exemplary embodiment. It is a block diagram which shows the hardware constitutions of an access point management apparatus. It is explanatory drawing which shows an example of the memory content of quarantine log DB. It is explanatory drawing which shows an example of the memory content of an access point management table. It is explanatory drawing which shows an example of the memory content of a separate forced blockage table. It is explanatory drawing which shows an example of the memory content of the group-specific forced blockage table (normal state). It is explanatory drawing which shows an example of the memory content of the forced blockage table classified by group (warning state). It is a block diagram which shows the functional structure of an access point management apparatus. It is explanatory drawing which shows an example of the memory content of a quarantine policy management table. It is explanatory drawing which shows an example of the memory content of a patch information management table. It is a block diagram which shows an example of a functional structure of a determination part. It is explanatory drawing which shows an example of the memory content of a separate forced blockage state table. It is explanatory drawing which shows an example of the memory content of the compulsory blocking state table classified by group. It is explanatory drawing which shows an example of the memory content of a compulsion blockage table. It is a flowchart which shows an example of the individual forced blockade processing procedure of an access point management apparatus. It is a flowchart which shows an example of the individual forced blockade cancellation | release process procedure of an access point management apparatus. It is a flowchart (the 1) which shows an example of the group-by-group forced blockage processing procedure of the access point management device. It is a flowchart (the 2) which shows an example of the forcibly blocking process procedure according to group of an access point management apparatus. It is a flowchart which shows an example of the forced blockade cancellation | release process procedure classified by group of an access point management apparatus. It is a flowchart which shows an example of the policy delivery processing procedure of an access point management apparatus. It is a flowchart which shows an example of the patch delivery processing procedure of an access point management apparatus. It is a flowchart which shows an example of the policy request processing procedure of an access point. It is a flowchart which shows an example of the patch request processing procedure of an access point. It is explanatory drawing which shows an example of the conventional quarantine system.

  Exemplary embodiments of a communication control program, a communication control apparatus, and a network system according to the present invention will be explained below in detail with reference to the accompanying drawings. In the present specification, the communication control device is an access point, and the communication control program is a program installed in the communication control device. However, the communication control device and the access point may be provided separately.

(Embodiment 1)
First, an example of the outline of the communication control method according to the first embodiment will be described. In this communication control method, the wireless terminal is quarantined at the access point AP of the wireless LAN. At this time, in this communication control method, control is performed such that access from another wireless terminal is not accepted during quarantine of one wireless terminal, and communication between wireless terminals that have not been quarantined is blocked.

  FIG. 1 is an explanatory diagram of an example of an outline of a communication control method according to the first embodiment. In FIG. 1, an access point AP is a relay device that can communicate with wireless terminals 101a and 101b via a wireless LAN. The access point AP is connected to the internal network via a wired LAN. The internal network is a communication network including a computer group to which the wireless terminals 101a and 101b are connected.

  In this communication control method, quarantine of the wireless terminals 101a and 101b is performed at the access point AP. The quarantine is a process for determining the security countermeasure status of the wireless terminals 101a and 101b.

  Specifically, first, the communication control method, at the access point AP, when there is a quarantine request from the wireless terminal 101a, other wireless terminals (e.g., wireless terminal 101b) in communication path is established between the It is determined whether or not ((A) in FIG. 1).

  Here, when a communication path is established with another wireless terminal 101b, in this communication control method, the access point AP rejects a quarantine request from the wireless terminal 101a ((B) in FIG. 1). . On the other hand, when a communication path has not been established with another wireless terminal 101b, this communication control method quarantines the wireless terminal 101a at the access point AP ((C) in FIG. 1).

  Further, in this communication control method, the access point AP is controlled so as not to accept a connection request (quarantine request, data relay request, etc.) from another wireless terminal 101b while the wireless terminal 101a is being quarantined (in FIG. 1). (D)). When the quarantine is successful, the wireless terminal 101a can access the internal network via the access point AP capable of data relay.

  Thus, in this communication control method, the quarantine of the wireless terminal 101a is performed only in the access point AP when the communication path with the other wireless terminal 101b is not established. Further, in this communication control method, the access point AP performs control so as not to accept a connection request from another wireless terminal 101b while the wireless terminal 101a is being quarantined.

  Thus, according to this communication control method, at the access point AP, in quarantine wireless terminal 101a, quarantine incomplete wireless terminal 101a, it is possible to cut off communication between 101b, the mobile space (wireless network) Security can be ensured.

(System configuration of network system)
Next, an example of a system configuration of the network system according to the first embodiment will be described. FIG. 2 is a system configuration diagram of the network system according to the first embodiment. In FIG. 2, the network system 200 is configured to include access points AP1 to APn, wireless terminals T1 to Tm, and a server group C.

  Here, the access points AP1 to APn are relay apparatuses that connect the wireless terminals T1 to Tm and the server group C or connect the wireless terminals T1 to Tm. These access points AP1 to APn are installed at each base such as a company head office, branch, sales office, or department.

  The wireless terminals T1 to Tm are portable communication devices such as a notebook personal computer, a mobile phone, and a PHS (Personal Handyphone System). The server group C is, for example, a computer group such as a Web server, a mail server, or a proxy server installed at each site.

  In network system 200, wireless terminals T1 to Tm can communicate with access points AP1 to APn via a wireless network 110 such as a wireless LAN. The access points AP1 to APn are connected to the server group C and other access points AP1 to APn via a wired network 120 such as a wired LAN.

  In the following description, an arbitrary access point among the access points AP1 to APn is referred to as “access point APi” (where i = 1, 2,..., N). An arbitrary wireless terminal among the wireless terminals T1 to Tm is represented as “wireless terminal Tp” (where p = 1, 2,..., M).

(Hardware configuration of access point APi)
Next, an example of the hardware configuration of the access point APi according to the first embodiment will be described. FIG. 3 is a block diagram showing a hardware configuration of the access point. In FIG. 3, an access point APi includes a CPU (Central Processing Unit) 301, a ROM (Read-Only Memory) 302, a RAM (Random Access Memory) 303, a magnetic disk drive 304, a magnetic disk 305, and an optical disk drive. 306, an optical disk 307, an interface (hereinafter referred to as “I / F”) 308, and an operation panel 309. Each component is connected by a bus 300.

  Here, the CPU 301 governs overall control of the access point APi. The ROM 302 stores a program such as a boot program. The RAM 303 is used as a work area for the CPU 301. The magnetic disk drive 304 controls the reading / writing of the data with respect to the magnetic disk 305 according to control of CPU301. The magnetic disk 305 stores data written under the control of the magnetic disk drive 304.

  The optical disk drive 306 controls the reading / writing of the data with respect to the optical disk 307 according to control of CPU301. The optical disk 307 stores data written under the control of the optical disk drive 306, and causes the computer to read data stored on the optical disk 307.

  The I / F 308 is connected to a network 320 (for example, the wireless network 110 and the wired network 120) such as a wireless LAN, a wired LAN, a WAN (Wide Area Network), and the Internet through a communication line. The I / F 308 is connected to other devices (for example, wireless terminals T1 to Tm, server group C) via the network 320.

  The I / F 308 controls an internal interface with the network 320 and controls input / output of data from an external device. For example, a LAN adapter, a modem, or the like can be employed as the I / F 308. The operation panel 309 includes keys for inputting characters, numbers, various instructions, and the like, and inputs data. The operation panel 309 may be a touch panel type input pad, a numeric keypad, or the like.

(Hardware configuration of wireless terminal Tp)
Next, an example of a hardware configuration of the wireless terminal Tp according to the first embodiment will be described. FIG. 4 is a block diagram illustrating a hardware configuration of the wireless terminal. In FIG. 4, the wireless terminal Tp includes a CPU 401, a ROM 402, a RAM 403, a magnetic disk drive 404, a magnetic disk 405, an optical disk drive 406, an optical disk 407, a display 408, an I / F 409, a keyboard 410, and the like. And a mouse 411. Each component is connected by a bus 400.

  Here, the CPU 401 governs overall control of the wireless terminal Tp. The ROM 402 stores programs such as a boot program. The RAM 403 is used as a work area for the CPU 401. The magnetic disk drive 404 controls the reading / writing of the data with respect to the magnetic disk 405 according to control of CPU401. The magnetic disk 405 stores data written under the control of the magnetic disk drive 404.

  The optical disk drive 406 controls reading / writing of data with respect to the optical disk 407 according to the control of the CPU 401. The optical disk 407 stores data written under the control of the optical disk drive 406, or causes the computer to read data stored on the optical disk 407.

  The display 408 displays data such as a document, an image, and function information as well as a cursor, an icon, or a tool box. As the display 408, for example, a TFT liquid crystal display, a plasma display, or the like can be adopted.

  The I / F 409 is connected to a network 420 (for example, the wireless network 110) such as a wireless LAN, a wired LAN, a WAN, and the Internet through a communication line, and other devices (for example, an access point APi, a server group) via the network 420 C). The I / F 409 controls an internal interface with the network 420 and controls data input / output from an external device. For example, a LAN adapter, a modem, or the like can be adopted as the I / F 409.

  The keyboard 410 includes keys for inputting characters, numbers, various instructions, and the like, and inputs data. Moreover, a touch panel type input pad or a numeric keypad may be used. The mouse 411 moves the cursor, selects a range, moves the window, changes the size, and the like. A trackball or a joystick may be used as long as they have the same function as a pointing device.

(Contents stored in various tables)
Next, storage contents of various tables used in the access point APi will be described. Various tables are stored in a storage device such as the RAM 303, the magnetic disk 305, and the optical disk 307 shown in FIG.

<Storage contents of access point table>
FIG. 5 is an explanatory diagram showing an example of the contents stored in the access point table. In FIG. 5, an access point table 500 has fields for an access point ID, a connection medium, and connection information. By setting information in each field, the access point information 500-1 to 500-n is stored as a record.

  Here, the access point ID is an identifier for identifying the access point APi. The connection medium is a connection medium used when the wireless terminal Tp connects to the access point APi. The connection information is information necessary when the wireless terminal Tp connects to the access point APi.

  Taking the access point information 500-1 as an example, the connection medium used when connecting to the access point AP1 is “wireless LAN”, and the connection information necessary for connecting to the access point AP1 is “Type = 802”. .11b, SSID = kyoten... The access point table 500 is used, for example, for search processing of the search unit 1011 for the access point APi described later.

<Storage contents of authentication table>
FIG. 6 is an explanatory diagram of an example of the contents stored in the authentication table. In FIG. 6, the authentication table 600 has fields for user ID, password, identification type, and identification ID. By setting information in each field, authentication information (for example, authentication information 600-1 to 600-3) is stored as a record.

  Here, the user ID is an identifier for identifying a user who uses the wireless terminal Tp. The password is information for determining an authorized user. The identification type is an identifier type for identifying the wireless terminal Tp. The identification ID is an identifier for identifying the wireless terminal Tp.

  Taking the authentication information 600-1 as an example, the user ID is “tanaka”, the password is “! Akanat0033”, the identification type is “MAC address”, and the identification ID is “000e324435543”. The authentication table 600 is used, for example, for authentication processing of the authentication unit 1008 of the access point APi described later.

<Contents stored in the quarantine policy table>
FIG. 7 is an explanatory diagram showing an example of the stored contents of the quarantine policy table. In FIG. 7, the quarantine policy table 700 has fields of policy ID, OS / terminal type, patch application status / anti-virus status / setting status, and application conditions. By setting information in each field item, policy information (for example, policy information 700-1 to 700-6) is stored as a record.

  Here, the OS / terminal type is information for identifying an OS (Operating System) or a terminal type. The patch application status / virus countermeasure status / setting status is a check item at the time of quarantine (including installation status such as anti-virus software and virus pattern update data). The application condition is a condition to be applied to each check item.

  Taking the policy information 700-1 as an example, the wireless terminal Tp of "OS-1" has been installed has been set policy P1 that must be "BIOS password" is "already set". The quarantine policy table 700 is used for, for example, a quarantine process of the quarantine unit 1009 of the access point APi described later.

<Storage contents of patch information table>
FIG. 8 is an explanatory diagram showing an example of the contents stored in the patch information table. In FIG. 8, the patch information table 800 has fields of patch ID, OS / terminal type, patch name, and patch file. By setting information in each field, patch information (for example, patch information 800-1 to 800-3) is stored as a record.

  Here, the patch ID is an identifier for identifying patches of various software. The OS / terminal type is information for identifying the OS or the terminal type. The patch name is the name of the patch. The patch file is information for correcting various software.

  Taking patch information 800-1 as an example, patch S1 (patch file “MS003.exe” with patch name “MS-003”) of OS / terminal type “OS-1” is set. The patch information table 800 is used for, for example, a quarantine process of the quarantine unit 1009 of the access point APi described later.

<Storage contents of permission information table>
FIG. 9 is an explanatory diagram of an example of the contents stored in the permission information table. In FIG. 9, the permission information table 900 has fields of OS / terminal type, connection medium, identification type, and identification ID. By setting information in each field, permission information (for example, permission information 900-1 and 900-2) is stored as a record.

  Here, the OS / terminal type is information for identifying the OS or the terminal type. The connection medium is a connection medium used when the wireless terminal Tp connects to the access point APi. The identification type is an identifier type for identifying the wireless terminal Tp. The identification ID is an identifier for identifying the wireless terminal Tp.

  Taking the permission information 900-1 as an example, permission information of the wireless terminal Tp with the OS / terminal type “OS-1”, the connection medium “wireless LAN”, the identification type “MAC address”, and the identification ID “000e324435543” is set. ing. The permission information table 900 is used, for example, for communication control processing of the communication control unit 1006 of the access point APi described later.

(Functional configuration of access point APi)
Next, an example of a functional configuration of the access point APi will be described. FIG. 10 is a block diagram showing a functional configuration of the access point. In FIG. 10, the access point APi includes a first receiving unit 1001, a first transmitting unit 1002, a second receiving unit 1003, a second transmitting unit 1004, a determining unit 1005, and a communication control unit 1006. A security determination unit 1007, an authentication unit 1008, a quarantine unit 1009, an extraction unit 1010, and a search unit 1011.

  Specifically, the functions (first receiving unit 1001 to searching unit 1011) serving as the control unit are stored in a storage device such as the ROM 302, the RAM 303, the magnetic disk 305, and the optical disk 307 shown in FIG. The function is realized by causing the CPU 301 to execute the program or by the I / F 308. Further, the processing results of the respective functional units are stored in a storage device such as the RAM 303, the magnetic disk 305, and the optical disk 307, for example.

  The first receiving unit 1001 has a function of receiving various pieces of information from other access points APj (i ≠ j, j = 1, 2,..., N). Specifically, for example, the first receiving unit 1001 receives various types of information from other access points APj via a wired network 120 such as a wired LAN.

  Here, the various types of information to be received are, for example, permission information, relay availability determination request / response, and the like. The permission information is information that guarantees the communication security of the wireless terminal Tp and permits connection to the connection destination network. The relay enable / disable determination request / response is a request / response that prompts the user to determine whether data relay is possible. The received permission information is stored, for example, in the permission information table 900 shown in FIG.

  The first transmission unit 1002 has a function of transmitting various types of information to other access points APj. Specifically, for example, the first transmission unit 1002 transmits various types of information to another access point APj via a wired network 120 such as a wired LAN. Here, the various types of information to be transmitted are, for example, permission information, relay availability determination request / response, and the like.

  The second receiving unit 1003 has a function of receiving various information from the wireless terminal Tp. Specifically, for example, the second receiving unit 1003 receives various types of information from the wireless terminal Tp via the wireless network 110 such as a wireless LAN. Here, the various types of information to be received are, for example, inspection requests (inspection requests), connection requests (data relay requests), and the like.

  The inspection request is a request for prompting a determination as to whether or not the communication safety (hereinafter referred to as “communication security”) of the wireless terminal Tp is inspectable. The inspection request is a request for prompting the start of execution of the communication security inspection process. The connection request is a request for prompting connection to the connection destination network prior to data relay. The data relay request is a request for prompting data relay to the connection destination network.

  The second transmission unit 1004 has a function of transmitting various information to the wireless terminal Tp. Specifically, for example, the second transmission unit 1004 transmits various types of information to the wireless terminal Tp via the wireless network 110 such as a wireless LAN. Here, the various types of information to be transmitted are, for example, inspection responses, inspection results, connection responses (data relay responses), and the like.

  The determination unit 1005 has a function of determining whether or not a communication path has been established with another wireless terminal Tq when an inspection request is received from the wireless terminal Tp. Specifically, for example, the determination unit 1005 refers to the communication state management table 1100 shown in FIG. 11 and is inspecting other wireless terminals Tq (p ≠ q, q = 1, 2,..., M) Alternatively, it is determined whether data is being relayed by another wireless terminal Tq. Data relay includes data relay between wireless terminals and data relay between other wireless terminals Tq and server group C.

  FIG. 11 is an explanatory diagram of an example of the contents stored in the communication state management table. In FIG. 11, the communication state management table 1100 has fields for a communication path ID, a communication type, an OS / terminal type, a connection medium, an identification type, and an identification ID. By setting information in each field, communication information regarding the currently established communication path is stored as a record.

  Here, the communication channel ID is an identifier for identifying a communication channel established with the access point APi. The communication type is a type of communication performed with the wireless terminal Tp. In this communication type field, for example, “quarantine” or “data relay” is set. The OS / terminal type, connection medium, identification type, and identification ID are information for specifying a communication partner.

  Here, when the determination unit 1005 is not in the inspection of the other wireless terminal Tq and is not in the data relay of the other wireless terminal Tq, the communication path is not established with the other wireless terminal Tq. to decide. For example, the determination unit 1005 may determine that a communication path has not been established with another wireless terminal Tq when communication information is not registered in the communication state management table 1100. The communication state management table 1100 is stored in a storage device such as the RAM 303, the magnetic disk 305, and the optical disk 307, for example.

  The communication control unit 1006 has a function of establishing a communication path with the wireless terminal Tp when it is determined that a communication path has not been established with another wireless terminal Tq. Specifically, for example, the communication control unit 1006 controls the second transmission unit 1004 to transmit an inspection response indicating that the communication security of the wireless terminal Tp can be inspected to the wireless terminal Tp.

  As a result, the communication point is recognized between the access point APi and the wireless terminal Tp, and a communication path is established between the access point APi and the wireless terminal Tp. As a result, the communication information related to the communication path established with the wireless terminal Tp is registered as a new record in the communication state management table 1100.

  FIG. 12 is an explanatory diagram (part 1) of a registration example of the communication state management table. In FIG. 12, communication information 1200 regarding the communication path CR1 is registered in the communication state management table 1100 as a new record. According to the communication information 1200, it can be recognized that the communication path CR1 for performing the quarantine of the wireless terminal Tp specified from the identification type / identification ID or the like is established.

  The communication control unit 1006, when a communication path with another wireless terminal Tq has been established, and controls the second transmission section 1004, a test response indicating that it is impossible inspect communications security Transmit to the wireless terminal Tp. In this case, for example, the wireless terminal Tp searches for another access point APj that can check the communication security.

  The security determination unit 1007 has a function of determining communication security of the wireless terminal Tp. Specifically, for example, the security determination unit 1007 determines the communication security of the wireless terminal Tp based on the processing result of the authentication unit 1008 and / or the quarantine unit 1009 described later. This security determination process is executed, for example, when an inspection request is received from the wireless terminal Tp as a result of an inspection response indicating that communication security can be inspected being transmitted to the wireless terminal Tp.

  The authentication unit 1008 has a function of executing authentication processing of the wireless terminal Tp. The authentication process is a process for determining the legitimacy of the user who uses the wireless terminal Tp. Specifically, for example, the authentication unit 1008 executes authentication processing for the wireless terminal Tp based on authentication information unique to the wireless terminal Tp.

  Here, the authentication information is information including, for example, a user ID unique to the user using the wireless terminal Tp, a password, a terminal-specific identification type, an identification ID, and the like. This authentication information is included in, for example, an inspection request or an inspection request from the wireless terminal Tp. The specific processing content of the authentication processing will be described later with reference to FIG.

  The quarantine unit 1009 has a function of executing a quarantine process of the wireless terminal Tp. The quarantine process is a process for determining the security countermeasure status of the wireless terminal Tp and ensuring communication security. Specifically, for example, the quarantine unit 1009 executes a quarantine process for the wireless terminal Tp based on software information unique to the wireless terminal Tp.

  Here, the software information is information including the patch application status of the OS installed in the wireless terminal Tp, the version of the security countermeasure software, the setting status of various passwords, and the like. This software information is included in, for example, an inspection request or an inspection request from the wireless terminal Tp. Details of the quarantine process will be described later with reference to FIG.

  For example, when the wireless terminal Tp is authenticated and the quarantine of the wireless terminal Tp is successful, the security determination unit 1007 determines that there is no problem in communication security of the wireless terminal Tp. Incidentally, the security determination unit 1007, when the wireless terminal Tp is authenticated, or, in the case of successful quarantine wireless terminals Tp, may be determined that there is no problem in the communication security of the wireless terminal Tp.

  The security determination unit 1007, if there is no problem with the communication security of the wireless terminals Tp, for example, is registered in the authorization information table 900 shown permission information for permitting the connection to the destination network of the wireless terminal Tp 9 . This permission information is information including, for example, the OS / terminal type, connection medium, identification type, identification ID, and the like of the wireless terminal Tp.

  In addition, the second transmission unit 1004 has a function of transmitting the determined determination result to the wireless terminal Tp. Specifically, for example, the second transmission unit 1004 transmits the processing result of the authentication unit 1008 and / or the processing result of the quarantine unit 1009 (authentication / quarantine OK, authentication NG, quarantine NG) to the wireless terminal Tp.

  Extracting unit 1010, if it fails to quarantine wireless terminals Tp, from a database that stores the correction information for correcting the software has a function of extracting the correction information on software installed in the wireless terminal Tp. Specifically, for example, the extraction unit 1010 extracts a patch file corresponding to the OS / terminal type of the wireless terminal Tp from the patch information table 800 illustrated in FIG. At this time, for example, the extraction unit 1010 may extract only the patch file having the patch name specified from the policy that has become incompatible.

  In this case, the second transmission unit 1004 transmits the extracted correction information to the wireless terminal Tp. That is, a patch file for correcting the problematic software is provided from the access point APi to the wireless terminal Tp. As a result, the patch is applied to the wireless terminal Tp, and the problematic software is corrected.

  Search unit 1011, when receiving the connection request to the destination network from no problem in communication security wireless terminal Tp, the ability to search for other access points APj capable establishing a communication path between the mobile station Tp Have. Here, the connection destination network is a network (for example, an internal network) including a computer group (for example, another wireless terminal Tq, a server group C) that can be accessed via the access point APi.

  The connection request (data relay request) includes the OS / terminal type, connection medium, identification type, identification ID, and the like of the wireless terminal Tp. Specifically, for example, first, the search unit 1011 searches the access point table 500 for an access point APj whose connection medium matches the connection medium included in the connection request.

  Thereafter, the first transmission unit 1002 transmits a relay availability determination request for inquiring whether or not data relay is possible to the searched access point APj. As a result, when a relayability determination response indicating that data relay is possible is received, an access point APj capable of establishing a communication path with the wireless terminal Tp is searched.

  The first transmission unit 1002 has a function of transmitting permission information for permitting connection to the connection destination network of the wireless terminal Tp having no communication security problem to another access point APj. Specifically, for example, the first transmission section 1002, extracts the permission information corresponding to the identification ID of the radio terminal Tp included in the connection request from the authorization information table 900, and transmits the retrieved access point APj .

  Note that permission information that has already been transmitted to another access point APj may be deleted from the permission information table 900. Moreover, you may decide to set to the permission information the effective period (for example, 1 hour, 6 hours, 1 day etc.) which permits the connection to the connecting point network of the radio | wireless terminal Tp.

  The second transmission unit 1004 has a function of transmitting connection information for connecting to another access point APj to the wireless terminal Tp when there is no problem with the communication security of the wireless terminal Tp. Specifically, for example, the second transmission unit 1004 refers to the access point table 500 and transmits connection information for connecting to the searched access point APj to the wireless terminal Tp.

  Further, the second transmission unit 1004 may transmit connection information for connecting to itself (access point APi) to the wireless terminal Tp when another access point APj is not searched. That is, when there is no other access point APj capable of establishing a communication path with the wireless terminal Tp, the terminal operates as an access point for data relay.

  Further, the determination unit 1005 has a function of determining whether to permit connection of the wireless terminal Tp to the connection destination network based on the received permission information when there is a data relay request from the wireless terminal Tp. Specifically, for example, the determination unit 1005 searches the permission information table 900 for permission information corresponding to the identification ID of the wireless terminal Tp included in the connection request. Here, when the permission information is searched, the determination unit 1005 determines that the connection of the wireless terminal Tp to the connection destination network is permitted.

  Furthermore, when the data relay request is a data relay request for another wireless terminal Tq, the determination unit 1005 may determine the communication security of the other wireless terminal Tq. Specifically, for example, first, the second transmission unit 1004 transmits a communication security inspection confirmation request to another wireless terminal Tq.

  Then, when there is an inspection confirmation response indicating that communication security has been inspected (no problem) from another wireless terminal Tq, the determination unit 1005 permits connection between the wireless terminal Tp and the connection destination network. On the other hand, the determination unit 1005 does not permit the connection between the wireless terminal Tp and the connection destination network when there is an inspection confirmation response indicating that the communication security has not been inspected.

  In addition, when the connection of the wireless terminal Tp to the connection destination network is permitted, the communication control unit 1006 establishes a communication path for connecting the wireless terminal Tp and the connection destination network. Specifically, for example, the communication control unit 1006 controls the second transmission unit 1004 to transmit a data relay response indicating that data relay is possible to the wireless terminal Tp.

  As a result, the communication point is recognized between the access point APi and the wireless terminal Tp, and a communication path is established between the access point APi and the wireless terminal Tp. As a result, the communication information related to the communication path established with the wireless terminal Tp is registered as a new record in the communication state management table 1100.

  FIG. 13 is an explanatory diagram (part 2) of a registration example of the communication state management table. In FIG. 13, communication information 1300 regarding the newly established communication path CR2 is registered in the communication state management table 1100 as a record. According to this communication information 1300, it can be recognized that the communication path CR2 for performing data relay of the wireless terminal Tp specified by the identification type / identification ID or the like is established.

  In addition, the determination unit 1005 has a function of determining whether or not data relay is possible when a relay permission determination request is received from another access point APj. Specifically, for example, the determination unit 1005 refers to the communication state management table 1100 to determine whether communication security is being inspected. Here, when the inspection is not in progress, the determination unit 1005 further refers to the communication state management table 1100 to determine whether or not the number of communication paths currently established with other wireless terminals Tq is less than the specified number.

  This specified number is set in advance and stored in a storage device such as the RAM 303, the magnetic disk 305, and the optical disk 307. The determination unit 1005 determines that data relay is possible when the number of currently established communication paths is less than the specified number. When data relay is possible, the first transmission unit 1002 transmits a relay availability determination response indicating that data relay is possible to the access point APj. On the other hand, when data relay is not possible, the first transmission unit 1002 transmits a relay availability determination response indicating that data relay is not possible to the access point APj.

(Specific processing contents of authentication unit 1008)
Next, an example of specific processing contents of the authentication unit 1008 will be described. Here, an authentication process based on authentication information included in an inspection request (inspection request) from the wireless terminal Tp will be described. FIG. 14 is an explanatory diagram illustrating an example of authentication information included in the inspection request. In FIG. 14, the authentication information 1400 includes a user ID, a password, an identification type, and an identification ID.

  In this case, first, the authentication unit 1008 specifies authentication information 600-1 corresponding to the user ID “tanaka” included in the authentication information 1400 from the authentication table 600 shown in FIG. Next, the authentication unit 1008 determines that the password, identification type, and identification ID of the specified authentication information 600-1 match the password, identification type, and identification ID included in the authentication information 1400.

  Here, since the password, the identification type, and the identification ID all match, the authentication unit 1008 authenticates the wireless terminal Tp. If even one does not match, the authentication unit 1008 does not authenticate the wireless terminal Tp. Further, even when the record corresponding to the user ID “tanaka” included in the authentication information 1400 is not specified from the authentication table 600, the authentication unit 1008 does not authenticate the wireless terminal Tp.

(Specific processing contents of the quarantine unit 1009)
Next, an example of specific processing contents of the quarantine unit 1009 will be described. Here, a quarantine process based on software information included in an inspection request (inspection request) from the wireless terminal Tp will be described. FIG. 15 is an explanatory diagram illustrating an example of software information included in the inspection request. In FIG. 15, software information 1500 includes information for specifying the patch application status, virus countermeasure status, and setting status of the wireless terminal Tp.

  In this case, first, the quarantine unit 1009 identifies a record corresponding to the OS / terminal type “OS-1” included in the software information 1500 from the quarantine policy table 700 illustrated in FIG. Here, for example, the policy information 700-1 and 700-2 are specified from the quarantine policy table 700.

  Next, the quarantine unit 1009 refers to the software information 1500 to determine whether or not the quarantine policies P1 and P2 specified from the policy information 700-1 and 700-2 are satisfied. Here, because the patch application status is “MS-003” and the setting status is “BIOS password set”, it is determined that the quarantine policies P1 and P2 are satisfied.

  If all quarantine policies (for example, quarantine policies P1 and P2) are satisfied, the quarantine unit 1009 determines that the wireless terminal Tp has been successfully quarantined. On the other hand, if even one quarantine policy is not satisfied, the quarantine unit 1009 determines that the quarantine of the wireless terminal Tp has failed. In addition, when the record corresponding to the OS / terminal type “OS-1” included in the software information 1500 is not specified from the quarantine policy table 700, the quarantine unit 1009 fails to quarantine the wireless terminal Tp. Judge.

(Functional configuration of wireless terminal Tp)
Next, an example of a functional configuration of the wireless terminal Tp will be described. FIG. 16 is a block diagram illustrating a functional configuration of the wireless terminal. In FIG. 16, the wireless terminal Tp includes a transmission unit 1601, a reception unit 1602, an inspection status determination unit 1603, and a correction unit 1604. Specifically, the functions (transmission unit 1601 to correction unit 1604) serving as the control unit are, for example, a program stored in a storage device such as the ROM 402, RAM 403, magnetic disk 405, and optical disk 407 shown in FIG. This function is realized by executing the function or by the I / F 409. Further, the processing results of the respective functional units are stored in a storage device such as the RAM 403, the magnetic disk 405, and the optical disk 407, for example.

  First, the transmission unit 1601 has a function of transmitting various types of information to the access point APi. Specifically, for example, the transmission unit 1601 transmits various types of information to the access point APi via the wireless network 110 such as a wireless LAN. Here, the various types of information to be transmitted are, for example, inspection requests (inspection requests), connection requests (data relay requests), and the like.

  The receiving unit 1602 has a function of receiving various information from the access point APi. Specifically, for example, the receiving unit 1602 receives various types of information from the access point APi via the wireless network 110 such as a wireless LAN. Here, the various types of information to be received include, for example, inspection responses, inspection results, connection responses (data relay responses), connection information, inspection confirmation requests, correction information, and the like.

  The inspection status determination unit 1603 has a function of determining the communication security inspection status (inspected / uninspected) prior to the inspection request to the access point APi. Specifically, for example, the inspection status determination unit 1603 may determine the communication security inspection status with reference to the quarantine execution table 1700 shown in FIG.

  Here, the contents stored in the quarantine execution table 1700 will be described. FIG. 17 is an explanatory diagram of an example of the contents stored in the quarantine execution table. In FIG. 17, the quarantine execution table 1700 has fields of implementation status and implementation date / time. By setting information in each field, the quarantine execution history is stored as a record.

  When the execution status in the quarantine execution table 1700 is “performed”, the inspection status determination unit 1603 determines that the communication security has been inspected (no problem). On the other hand, when the execution status in the quarantine execution table 1700 is “not executed”, the inspection status determination unit 1603 determines that the communication security is not checked.

  Further, when the communication security has not been inspected, the transmission unit 1601 transmits a communication security inspection request to the access point APi. As a result, the communication security of the wireless terminal Tp is checked by the access point APi that can establish a communication path with the wireless terminal Tp.

  Further, when the communication security has been inspected, the inspection status determination unit 1603 may further determine whether the elapsed time from the implementation date is within the allowable time. Here, the allowable time is a period during which communication security can be guaranteed, and is expressed by, for example, an elapsed time since the last quarantine was performed. The permissible time is arbitrarily set and stored in a storage device such as the RAM 403, the magnetic disk 405, and the optical disk 407.

  Specifically, for example, the inspection status determination unit 1603 first executes the quarantine from the execution date and time “October 10, 2008 13:40” in the quarantine execution table 1700 and the current date and time. The elapsed time of is calculated. Thereafter, the inspection status determination unit 1603 determines whether the calculated elapsed time is within the allowable time.

  In this case, when the elapsed time exceeds the allowable time, the transmission unit 1601 transmits a communication security inspection request to the access point APi. Note that authentication information and software information unique to the wireless terminal Tp may be included in the inspection request, or may be included in the inspection request for requesting the start of execution of the security inspection process.

  In addition, when receiving an inspection confirmation request, the inspection status determination unit 1603 determines the communication security inspection status (inspected / not inspected). Then, the transmission unit 1601 transmits the determined determination result to the access point APi as an inspection confirmation response.

  When the correction information is received from the access point APi, the correction unit 1604 has a function of correcting software installed in the wireless terminal Tp based on the correction information. Specifically, for example, the correction unit 1604 applies a patch file to software installed in the wireless terminal Tp.

  Note that, when the wireless terminal Tp receives connection information from the access point APi, the wireless terminal Tp performs data communication using the connection information. Specifically, for example, the radio terminal Tp controls the transmission unit 1601 to start data communication by transmitting a data relay request to the access point APj (or access point APi) specified from the connection information.

(Communication control processing procedure of access point APi)
Hereinafter, various communication control processing procedures of the access point APi will be described.

<Security judgment processing procedure>
First, the security decision processing procedure of the access point APi will be described. This security determination process is a process for determining the communication security of the wireless terminal Tp. FIG. 18 is a flowchart illustrating an example of a security determination processing procedure for an access point.

  In the flowchart of FIG. 18, first, the second receiving unit 1003 determines whether or not an inspection request has been received from the wireless terminal Tp (step S1801). Here, after waiting for the reception of the inspection request (step S1801: No), if received (step S1801: Yes), the determination unit 1005 refers to the communication state management table 1100 and determines the other wireless terminal Tq. It is determined whether data is being relayed (step S1802).

  Here, when data is not being relayed by another wireless terminal Tq (step S1802: No), the determination unit 1005 refers to the communication state management table 1100 to determine whether the other wireless terminal Tq is being inspected. (Step S1803). Here, when the other wireless terminal Tq is not being inspected (step S1803: No), the second transmission unit 1004 transmits an inspection response indicating that the communication security can be inspected to the wireless terminal Tp (step S1803). S1804).

  Thereafter, the second reception unit 1003 waits to receive an inspection request for requesting to start execution of communication security inspection processing (step S1805: No). If the second receiving unit 1003 receives an inspection request (step S1805: YES), the authentication / quarantine process is executed (step S1806), and the series of processes according to this flowchart ends.

  In addition, when data is being relayed by another wireless terminal Tq in step S1802 (step S1802: Yes), the second transmission unit 1004 transmits an inspection response indicating that communication security inspection is impossible to the wireless terminal Tp. (Step S1807), a series of processing according to this flowchart is terminated.

  If another wireless terminal Tq is being inspected in step S1803 (step S1803: Yes), the second transmission unit 1004 transmits an inspection response indicating that the communication security cannot be inspected to the wireless terminal Tp. (Step S1807), a series of processing according to this flowchart is terminated.

  Next, a specific processing procedure of the authentication / quarantine process in step S1806 shown in FIG. 18 will be described. FIG. 19 is a flowchart illustrating an example of a specific processing procedure of the authentication / quarantine processing in step S1806. In the flowchart of FIG. 19, the security determination unit 1007 identifies the communication type from the header information of the inspection request (step S1901).

  Thereafter, it is determined whether or not the communication type is special communication such as broadcast communication (step S1902). This process is intended to protect the access point APi from broadcast communications by malicious users, attacks from viruses, and the like. If the communication type is not special communication (step S1902: NO), the authentication unit 1008 identifies the user ID, password, identification type, and identification ID from the authentication information included in the inspection request (step S1903).

  Next, the authentication unit 1008 extracts authentication information corresponding to the specified user ID from the authentication table 600 (step S1904). Thereafter, the authentication unit 1008 performs authentication processing by performing a match determination of the identified password, identification type, and identification ID using the extracted authentication information (step S1905).

  Here, in the case of authentication OK (step S1906: Yes), the quarantine unit 1009 identifies the OS / terminal type from the software information included in the inspection request (step S1907). Next, the quarantine unit 1009 extracts policy information corresponding to the identified OS / terminal type from the quarantine policy table 700 (step S1908).

  Thereafter, the quarantine unit 1009 uses the extracted policy information to execute the quarantine process by determining whether the patch application status / virus countermeasure status / setting status of the software information satisfies the quarantine policy application conditions. (Step S1909).

  Here, in the case of quarantine OK (step S1910: Yes), the security determination unit 1007 registers the permission information of the wireless terminal Tp in the permission information table 900 (step S1911). Then, the second transmission unit 1004 transmits the authentication / quarantine OK inspection result to the wireless terminal Tp (step S1912), and the series of processes according to this flowchart is terminated.

  In step S1902, if the communication type is special communication (step S1902: Yes), the authentication NG inspection result is transmitted to the wireless terminal Tp (step S1913), and the series of processes in this flowchart ends. Similarly, in the case of authentication NG in step S1906 (step S1906: No), the inspection result of authentication NG is transmitted to the wireless terminal Tp (step S1913), and the series of processing according to this flowchart ends.

  In step S1910, in the case of quarantine NG (step S1910: No), the inspection result of quarantine NG is transmitted to the wireless terminal Tp (step S1914). Thereafter, the extraction unit 1010 extracts a patch file from the patch information table 800 (step S1915). Then, the second transmission unit 1004 transmits the extracted patch file to the wireless terminal Tp (step S1916), and the series of processes according to this flowchart ends.

  This makes it possible to perform authentication / quarantine of the wireless terminal Tp at the access point APi, and improve security in the mobile space. In addition, only when the communication path has not been established with another wireless terminal Tq, by performing authentication / quarantine of the wireless terminal Tp, wireless terminals that have not been inspected for communication security can communicate with each other. Can be eliminated.

  In step S1902, when the communication type is special communication (step S1902: Yes), the second transmission unit 1004 may transmit the connection NG inspection result to the wireless terminal Tp. That is, the second transmission unit 1004 transmits to the wireless terminal Tp an inspection result indicating connection NG before executing the authentication / quarantine process.

<Search processing procedure>
Next, a search processing procedure for the access point APi will be described. This search process is a process of searching for an access point APj that is a connection destination of the wireless terminal Tp. FIG. 20 is a flowchart illustrating an example of an access point search processing procedure.

  In the flowchart of FIG. 20, first, the second receiving unit 1003 determines whether or not a connection request has been received from the wireless terminal Tp (step S2001). Here, after waiting for the connection request to be received (step S2001: No) and when received (step S2001: Yes), the search unit 1011 sets the identification information included in the connection request from the permission information table 900. The corresponding permission information is searched (step S2002).

  If the permission information is searched (step S2003: Yes), the search unit 1011 searches the access point table 500 for an access point APj corresponding to the connection medium included in the connection request (step S2004). . Here, when the access point APj is searched (step S2005: Yes), the first transmission unit 1002 transmits a relay availability determination request inquiring whether the data relay is possible to the access point APj (step S2006).

  Thereafter, the first reception unit 1001 waits to receive a relay permission determination response (step S2007: No), and if received (step S2007: Yes), the search unit 1011 receives the relay permission determination response. Determines whether or not data relay is possible (step S2008).

  If data relay is not possible (step S2008: No), the process returns to step S2004. On the other hand, when data relay is possible (step S2008: Yes), the first transmission unit 1002 transmits the permission information searched in step S2002 to the access point APj (step S2009).

  Thereafter, the transmitted permission information is deleted from the permission information table 900 by the search unit 1011 (step S2010). Then, the second transmitting unit 1004 refers to the access point table 500 to transmit connection information for connecting to the access point APj to the wireless terminal Tp (step S2011), and performs a series of processes according to this flowchart. finish.

  In step S2003, if permission information is not searched (step S2003: No), the second transmission unit 1004 transmits a connection response indicating that connection is not possible to the wireless terminal Tp (step S2012). Then, a series of processes according to this flowchart is finished.

  In step S2005, when the access point APj is not searched (step S2005: No), connection information for connection to itself is transmitted to the wireless terminal Tp (step S2013), and a series of processing according to this flowchart is performed. finish. The connection information of itself is stored in a storage device such as the RAM 303, the magnetic disk 305, and the optical disk 307, for example.

  Thereby, connection information for connecting to another access point APj capable of establishing a communication path can be provided to the wireless terminal Tp.

<Relayability determination procedure>
Next, a procedure for determining whether or not the access point APi can relay is described. This relayability determination process is a process executed in response to a relayability determination request from another access point APj. FIG. 21 is a flowchart illustrating an example of an access point relay availability determination processing procedure.

  In the flowchart of FIG. 21, first, the first receiving unit 1001 determines whether or not a relay availability determination request is received from another access point APj (step S2101). Here, it waits for reception of the relay availability determination request (step S2101: No), and when received (step S2101: Yes), the determination unit 1005 refers to the communication state management table 1100 to refer to another wireless terminal. It is determined whether or not Tq is being inspected (step S2102).

  Here, when the other wireless terminal Tq is not being examined (step S2102: No), the determination unit 1005 refers to the communication state management table 1100 to calculate the current number of data relays (step S2103), and the data It is determined whether the number of relays is equal to or greater than a specified number (step S2104).

  If the number of data relays is less than the specified number (step S2104: NO), the first transmission unit 1002 transmits a data relay OK relay propriety response to another access point APj (step S2105). Thereafter, waiting for reception of permission information from another access point APj (step S2106: No), if received (step S2106: Yes), the permission information is registered in the permission information table 900 (step S2107). ), A series of processes according to this flowchart is terminated.

  In step S2102, if another wireless terminal Tq is being inspected (step S2102: Yes), the first transmission unit 1002 transmits a relay availability response of the data relay NG to the other access point APj (step S2102). S2108), a series of processing according to this flowchart is terminated.

  In step S2104, if the number of data relays is equal to or greater than the specified number (step S2104: Yes), the first transmission unit 1002 transmits a data relay NG relay permission response to another access point APj (step S2108). ), A series of processes according to this flowchart is terminated.

<Data relay processing procedure>
Next, the data relay processing procedure of the access point APi will be described. This data relay process is a process executed in response to a data relay request from the wireless terminal Tp. FIG. 22 is a flowchart illustrating an example of the data relay processing procedure of the access point.

  In the flowchart of FIG. 22, first, the second receiving unit 1003 determines whether a data relay request has been received from the wireless terminal Tp (step S2201). Here, it waits for the reception of the data relay request (step S2201: No), and when it is received (step S2201: Yes), the determination unit 1005 identifies from the permission information table 900 the identification included in the data relay request. The permission information corresponding to the ID is searched (step S2202).

  Here, when the permission information is searched (step S2203: Yes), the determination unit 1005 identifies the communication type of the data relay request (step S2204). If the communication type is not special communication (step S2205: NO), the determination unit 1005 determines whether the data communication is between wireless terminals from the relay destination (step S2206).

  If the data communication is not between wireless terminals (step S2206: No), the communication control unit 1006 starts data communication between the wireless terminal Tp / server group C (step S2207), and a series of steps according to this flowchart. The process ends. On the other hand, in the case of data communication between wireless terminals (step S2206: Yes), the second transmission unit 1004 transmits a communication security inspection confirmation request to the wireless terminal Tq that is the communication destination (step S2208).

  Thereafter, the second reception unit 1003 waits for reception of an inspection confirmation response (step S2209: No), and if received (step S2209: Yes), the determination unit 1005 determines whether communication security has been inspected. Is determined (step S2210). However, the determination unit 1005 determines that the inspection has been completed only when there is no problem in the communication security of the wireless terminal Tp.

  Here, when the communication security has been inspected (step S2210: Yes), the communication control unit 1006 starts data communication between the wireless terminals (step S2211), and the series of processes according to this flowchart ends.

  On the other hand, when the communication security has not been checked (step S2210: No), the communication control unit 1006 controls the second transmission unit 1004 to transmit a data relay response of communication NG to the wireless terminal Tp (step S2212). ), A series of processes according to this flowchart is terminated.

  In step S2203, when permission information is not searched (step S2203: No), the communication control unit 1006 controls the second transmission unit 1004 to transmit a data relay response of communication NG to the wireless terminal Tp. Then (step S2212), a series of processing according to this flowchart is terminated.

  In step S2205, when the communication type is special communication (step S2205: Yes), the communication control unit 1006 controls the second transmission unit 1004 to transmit a data relay response of communication NG to the wireless terminal Tp. (Step S2212), a series of processes according to this flowchart is terminated.

  This makes it possible to prevent the wireless terminal Tp, whose communication security is not guaranteed, from being connected to the connection destination network, and to ensure security in the connection destination network.

(Communication control processing procedure of wireless terminal Tp)
Hereinafter, various communication control processing procedures of the wireless terminal Tp will be described.

<Security inspection processing procedure>
First, the security inspection processing procedure of the wireless terminal Tp will be described. This security inspection process is a process for inspecting the communication security of the wireless terminal Tp. FIG. 23 is a flowchart illustrating an example of the security inspection processing procedure of the wireless terminal.

  In the flowchart of FIG. 23, first, the examination status determination unit 1603 determines whether or not there is an instruction to start data communication (step S2301). A data communication start instruction is input by the user operating the keyboard 410 or the mouse 411.

  Here, after waiting for an instruction to start data communication (step S2301: No), when there is an instruction to start (step S2301: Yes), the inspection status determination unit 1603 refers to the quarantine execution table 1700 and executes quarantine. It is determined whether or not it has been completed (step S2302). Here, when the quarantine has been performed (step S2302: Yes), the inspection status determination unit 1603 determines whether or not the elapsed time from the execution date is within the allowable time (step S2303).

  If the elapsed time is within the allowable time (step S2303: YES), the process proceeds to step S2313. On the other hand, when the elapsed time exceeds the allowable time (step S2303: No), the transmission unit 1601 transmits a communication security inspection request to the access point APi (step S2304).

  If quarantine is not performed in step S2302 (step S2302: NO), the transmission unit 1601 transmits a communication security inspection request to the access point APi (step S2304).

  Thereafter, the reception unit 1602 waits for reception of a communication security inspection response (step S2305: No), and if received (step S2305: Yes), the inspection state determination unit 1603 converts the inspection response into communication security. It is determined whether or not the inspection is possible (step S2306).

  Here, when the inspection is possible (step S2306: Yes), the transmission unit 1601 transmits an inspection request for requesting the start of execution of the security inspection process to the access point APi (step S2307).

  Thereafter, waiting for reception of a communication security inspection result (step S2308: No), and if received (step S2308: Yes), the inspection status determination unit 1603 determines whether or not the inspection result is authentication NG. (Step S2309).

  If the authentication is OK (step S2309: NO), the inspection status determination unit 1603 determines whether the inspection result is quarantine NG (step S2310). Here, in the case of quarantine NG (step S2310: Yes), the reception unit 1602 waits to receive a patch file from the access point APi (step S2311: No).

  Thereafter, when the patch file is received (step S2311: YES), the correction unit 1604 applies the patch file to the installed software (step S2312), and the process returns to step S2307.

  If the quarantine is OK in step S2310 (step S2310: No), the transmission unit 1601 transmits a connection request to the access point APi (step S2313), and the reception unit 1602 receives the connection information from the access point APi. It waits to do (step S2314: No).

  Thereafter, when connection information is received (step S2314: YES), data communication is started using the connection information by the wireless terminal Tp (step S2315), and a series of processes according to this flowchart is ended.

  In step S2306, if the inspection is not possible (step S2306: No), the wireless terminal Tp displays an error message on the display 408 prompting another access point APj to make an inspection request because the communication security cannot be inspected ( In step S2316), a series of processing according to this flowchart is terminated.

  In step S2309, in the case of authentication NG (step S2309: Yes), the wireless terminal Tp displays an error message indicating that the user cannot be inspected due to non-authentication on the display 408 (step S2316). A series of processes according to the flowchart ends.

  In step S2306, when the inspection is impossible (step S2306: No), the transmission unit 1601 may automatically transmit a communication security inspection request to another access point APj, and the process may proceed to step S2305.

  Thereby, it is possible to prevent connection of the uninspected wireless terminal Tp whose communication security is not inspected to the connection destination network.

<Inspection confirmation processing procedure>
Next, an inspection confirmation processing procedure of the wireless terminal Tp will be described. This inspection confirmation process is a process executed in response to an inspection confirmation request from the access point APi. FIG. 24 is a flowchart illustrating an example of a procedure for checking and checking a wireless terminal.

  In the flowchart of FIG. 24, first, the reception unit 1602 waits for reception of an inspection confirmation request from the access point APi (step S2401: No), and if received (step S2401: Yes), the inspection state determination unit 1603 Referring to the quarantine execution table 1700, it is determined whether or not the quarantine has been performed (step S2402).

  Here, when the quarantine has been performed (step S2402: Yes), the inspection status determination unit 1603 determines whether or not the elapsed time from the execution date is within the allowable time (step S2403). If the elapsed time is within the allowable time (step S2403: Yes), the transmission unit 1601 transmits an inspection confirmation response whose communication security has been inspected to the access point APi (step S2404), and a series of processes according to this flowchart. Exit.

  On the other hand, when the elapsed time exceeds the allowable time (step S2403: No), the transmission unit 1601 transmits an inspection confirmation response without communication security to the access point APi (step S2405), and a series of processing according to this flowchart. Exit.

  In step S2402, if quarantine has not been performed (step S2402: No), the transmission unit 1601 transmits an inspection confirmation response without communication security to the access point APi (step S2405). Terminate the process.

  As described above, according to the access point APi according to the first embodiment, when there is an inspection request from the wireless terminal Tp, wireless communication is performed only when a communication path is not established with another wireless terminal Tq. A communication path for checking the communication security of the terminal Tp can be established. As a result, it is possible to eliminate the situation in which wireless terminals whose communication security has not been inspected can communicate with each other via the access point APi, and to secure the security in the mobile space.

  Further, according to this access point APi, when there is no problem in the communication security of the wireless terminal Tp, permission information for permitting connection to the connection destination network of the wireless terminal Tp can be transmitted to another access point APj. As a result, it is possible to provide information on the wireless terminal Tp with which the safety of communication is guaranteed to the other access point APj.

  Further, according to this access point APi, when there is no problem in communication security of the wireless terminal Tp, it is possible to search for another access point APj capable of establishing a communication path with the wireless terminal Tp. Furthermore, according to this access point APi, the permission information of the wireless terminal Tp can be transmitted to the other access point APj, and the connection information for connecting to the other access point APj can be transmitted to the wireless terminal Tp. Thereby, efficient and secure communication can be performed between the radio terminal Tp and another access point APj.

  Also, according to this access point APi, when no other access point APj is searched, connection information for connecting to itself can be transmitted to the wireless terminal Tp. As a result, the wireless terminal Tp can be prevented from being unable to connect to the connection destination network, and communication quality can be ensured.

  Further, according to this access point APi, it is possible to determine the communication security of the wireless terminal Tp by executing the quarantine process of the wireless terminal Tp. This makes it possible to quarantine the wireless terminal Tp at the access point APi, and to improve security in the mobile space.

  Further, according to this access point APi, when the quarantine of the wireless terminal Tp fails, the software patch information installed in the wireless terminal Tp can be transmitted to the wireless terminal Tp. As a result, the access point APi can provide a patch to the wireless terminal Tp, and security in the mobile space can be improved.

  Further, according to the access point APi, the authentication process of the wireless terminal Tp can be executed to determine the communication security of the wireless terminal Tp. As a result, the access point APi can perform authentication of the wireless terminal Tp, and security in the mobile space can be improved.

  Further, according to the access point APi, the wireless terminal Tp and the connection destination network can be connected according to the permission information from the other access point APj. Thereby, in the access point APi, it is possible to prevent the wireless terminal Tp whose communication security is not guaranteed from being connected to the connection destination network, and security in the connection destination network can be ensured.

  Further, according to this access point APi, when there is a data relay request from the wireless terminal Tp to another wireless terminal Tq, a communication security inspection confirmation request can be transmitted to the other wireless terminal Tq. As a result, only when the communication security is ensured for the other wireless terminal Tq of the data relay destination, the data relay between the wireless terminals can be permitted to improve the security in the mobile space.

  Further, according to the wireless terminal Tp according to the first embodiment, prior to a connection request to the connection destination network for the access point APi, the communication security inspection status is determined. Can be sent. Thereby, it is possible to prevent connection of the uninspected wireless terminal Tp whose communication security is not inspected to the connection destination network.

  Also, according to this wireless terminal Tp, even if the communication security has been inspected, if the elapsed time from the inspection date and time exceeds the allowable time, the inspection request can be transmitted to the access point APi again. it can. This makes it possible to take measures against threats (such as new viruses) that have occurred immediately after the inspection of communication security, and improve security in the mobile space.

(Embodiment 2)
Next, an example of the outline of the communication control method according to the second embodiment will be described. In the following description, illustration and description of the same portions as those described in the first embodiment are omitted. FIG. 25 is an explanatory diagram of an example of an outline of a communication control method according to the second embodiment.

  In FIG. 25, the access point management device 2500 manages the access points APa to APe scattered in various places. Further, the access points APa to APe are classified into a plurality of groups Ga and Gb according to geographical conditions and the like. Here, the access points APa and APb are classified into the group Ga, and the access points APc, APd and APe are classified into the group Gb.

  In this communication control method, the access point management apparatus 2500 collects quarantine logs from the access points APa to APe. Here, the quarantine log is an inspection result of an inspection process (authentication process / quarantine process) executed at each of the access points APa to APe.

  In this communication control method, the access point management device 2500 forcibly blocks the access points APa to APe based on the collected quarantine logs. Here, the forcible blockage is to prohibit establishment of a communication path between the access points APa to APe having many authentication NG and quarantine NG and the radio terminal Tp.

  Specifically, in this communication control method, the access point management device 2500 forcibly blocks the access points APa to APe in units of access points. In the example of (A) in FIG. 25, the access point APc is forcibly blocked.

  Further, in this communication control method, the access point management device 2500 forcibly blocks the access points APa to APe on a group basis. In the example of (B) in FIG. 25, the access points APc, APd, APe belonging to the group Gb are forcibly blocked.

  Thus, according to this communication control method, for example, by forcibly blocking access points AP with many authentication NGs and quarantine NGs, it is possible to suppress the spread of damage due to unknown viruses and the like. That is, when there are many authentication NGs and quarantine NGs, there is a possibility that unknown viruses are spreading near the access point AP, so the access point AP is forcibly blocked.

(System configuration of network system)
Next, an example of a system configuration of the network system according to the second embodiment will be described. FIG. 26 is a system configuration diagram of the network system according to the second embodiment. In FIG. 26, the network system 2600 includes an access point management device 2500, access points AP1 to APn, wireless terminals T1 to Tm, and a server group C.

  Here, the access point management device 2500 can communicate with the access points AP1 to APn to be managed via a network 2610 such as a WAN or the Internet. This access point management device 2500 is installed in a quarantine center that collectively manages inspection results (authentication results, quarantine results) at all access points AP1 to APn installed at a plurality of bases.

(Hardware configuration of access point management device 2500)
FIG. 27 is a block diagram illustrating a hardware configuration of the access point management apparatus. In FIG. 27, an access point management device 2500 includes a CPU 2701, a ROM 2702, a RAM 2703, a magnetic disk drive 2704, a magnetic disk 2705, an optical disk drive 2706, an optical disk 2707, a display 2708, an I / F 2709, and a keyboard. 2710, a mouse 2711, a scanner 2712, and a printer 2713. Each component is connected by a bus 2700.

  Here, the CPU 2701 controls the entire access point management device 2500. The ROM 2702 stores programs such as a boot program. The RAM 2703 is used as a work area for the CPU 2701. The magnetic disk drive 2704 controls reading / writing of data with respect to the magnetic disk 2705 according to the control of the CPU 2701. The magnetic disk 2705 stores data written under the control of the magnetic disk drive 2704.

  The optical disc drive 2706 controls reading / writing of data with respect to the optical disc 2707 according to the control of the CPU 2701. The optical disc 2707 stores data written under the control of the optical disc drive 2706, and causes the computer to read data stored on the optical disc 2707.

  A display 2708 displays data such as a document, an image, and function information as well as a cursor, an icon, or a tool box. As the display 2708, for example, a CRT, a TFT liquid crystal display, a plasma display, or the like can be adopted.

  The I / F 2709 is connected to a network 2610 such as a LAN, a WAN, or the Internet through a communication line, and is connected to another device via the network 2610. The I / F 2709 controls an internal interface with the network 2610 and controls input / output of data from an external device. For example, a modem or a LAN adapter may be employed as the I / F 2709.

  The keyboard 2710 includes keys for inputting characters, numbers, various instructions, and the like, and inputs data. Moreover, a touch panel type input pad or a numeric keypad may be used. The mouse 2711 performs cursor movement, range selection, window movement, size change, and the like. A trackball or a joystick may be used as long as they have the same function as a pointing device.

  The scanner 2712 optically reads an image and takes in the image data into the access point management device 2500. Note that the scanner 2712 may have an OCR (Optical Character Reader) function. The printer 2713 prints image data and document data. As the printer 2713, for example, a laser printer or an inkjet printer can be employed.

(Storage contents of various DBs)
Next, contents stored in various DBs (databases) used in the access point management apparatus 2500 will be described. Various DBs and the like are stored in a storage device such as the RAM 2703, the magnetic disk 2705, and the optical disk 2707 shown in FIG.

<Quarantine log DB>
FIG. 28 is an explanatory diagram of an example of the contents stored in the quarantine log DB. In FIG. 28, the quarantine log DB 2800 has fields of inspection date / time, access point ID, user ID, authentication result, OS / terminal type, identification type, identification ID, quarantine result, and comment. By setting information in each field, the quarantine logs L1 to Lk are stored as records.

  Here, the inspection date and time is the date and time when the communication security inspection was performed. The access point ID is an identifier for identifying the access point APi. The user ID is an identifier for identifying a user who uses the wireless terminal Tp. The authentication result is an authentication result (OK / NG) of the wireless terminal Tp.

  The OS / terminal type is information for identifying the OS or the terminal type. The identification type is an identifier type for identifying the wireless terminal Tp. The identification ID is an identifier for identifying the wireless terminal Tp. The quarantine result is a quarantine result (OK / NG) of the wireless terminal Tp. A comment is an arbitrary comment given to an authentication result or a quarantine result.

<Access point management table>
FIG. 29 is an explanatory diagram of an example of the contents stored in the access point management table. In FIG. 29, the access point management table 2900 has fields of access point ID, connection information, connection medium, location information, group ID, adjacent group ID, policy countermeasure status, and patch countermeasure status. By setting information in each field, the management information 2900-1 to 2900-n of the access points AP1 to APn is stored as a record.

  Here, the access point ID is an identifier for identifying the access point APi. The connection information is connection information for connecting to the access point APi. The connection medium is a wireless medium used for wireless communication between the access point APi and the wireless terminal Tp. The location information is information for specifying the location where the access point APi is installed.

  The group ID is an identifier for identifying a group to which the access point APi belongs. The adjacent group ID is an identifier for identifying a group adjacent to each of the groups G1 to Gs. The policy countermeasure status is a policy countermeasure status at the access point APi. The patch countermeasure status is a patch countermeasure status at the access point APi.

<Individual forced sealing table>
FIG. 30 is an explanatory diagram of an example of the contents stored in the individual compulsory blocking table. In FIG. 30, the individual compulsory blocking table 3000 has fields for an access point ID, a blocking condition, and a release condition. By setting information in each field, the blocking conditions 3000-1 to 3000-n for each of the access points AP1 to APn are stored as records.

  Here, the access point ID is an identifier for identifying the access point APi. The blocking condition is a condition to be satisfied when blocking each access point AP1 to APn. Here, an increase rate of authentication NG, quarantine NG, etc. at each of the access points AP1 to APn is defined as a blocking condition.

  The increase rate is the number of occurrences per unit time of a quarantine log indicating that there is a problem with communication security such as authentication NG and quarantine NG. The release condition is a condition to be satisfied when releasing the forced blockade of each access point AP1 to APn. Here, policies and patches to be taken by each of the access points AP1 to APn are defined as release conditions.

<Forced Blocking Table by Group>
FIG. 31 is an explanatory diagram showing an example of the stored contents of the group-by-group forced blockage table (normal state). In FIG. 31, a group-by-group forced blockage table (normal state) 3100 has fields for group ID, blockage condition, and release condition. By setting information in each field, the blocking conditions 3100-1 to 3100-s for the groups G1 to Gs in the normal state are stored as records.

  Here, the group ID is an identifier for identifying the group Gt (where t = 1, 2,..., S). The blocking condition is a condition that should be satisfied when the groups G1 to Gs are blocked. Here, the increasing rate and increasing density of authentication NG, quarantine NG, etc. at access points AP1 to APn belonging to the groups G1 to Gs are defined as blocking conditions. The increase density is an increase rate per unit area.

  The release condition is a condition that should be satisfied when the forcible blockade of each of the groups G1 to Gs is released. Here, policies and patches to be taken by the access points AP1 to APn belonging to the groups G1 to Gs are defined as release conditions. The normal state indicates that the monitoring level for the threat in the mobile space is a normal level.

  FIG. 32 is an explanatory diagram of an example of the contents stored in the group-by-group forced blockage table (warning state). In FIG. 32, a group-by-group forced blockage table (warning state) 3200 has fields of group ID, blockage condition, and release condition. By setting information in each field, the blocking conditions 3200-1 to 3200-s for the groups G1 to Gs in the alert state are stored as records.

  Here, the group ID is an identifier for identifying the group Gt. The blocking condition is a condition that should be satisfied when the groups G1 to Gs are blocked. Here, the increasing rate and increasing density of authentication NG, quarantine NG, etc. at access points AP1 to APn belonging to the groups G1 to Gs are defined as blocking conditions.

  The release condition is a condition that should be satisfied when the forcible blockade of each of the groups G1 to Gs is released. Here, policies and patches to be taken by the access points AP1 to APn belonging to the groups G1 to Gs are defined as release conditions. The alert state indicates that the monitor level for the threat in the mobile space is the alert level.

  The contents stored in the various tables shown in FIGS. 29 to 32 can be arbitrarily changed by user operation input using the keyboard 2710 and the mouse 2711 shown in FIG. Specifically, for example, addition / deletion of access points and groups, classification of each group, adjacent groups, and blocking conditions can be arbitrarily changed.

(Functional configuration of access point management device 2500)
Next, an example of a functional configuration of the access point management device 2500 will be described. FIG. 33 is a block diagram showing a functional configuration of the access point management apparatus. In FIG. 33, the access point management device 2500 includes a receiving unit 3301, a determining unit 3302, a transmitting unit 3303, and an acquiring unit 3304.

  Specifically, the functions (reception unit 3301 to acquisition unit 3304) serving as the control unit are, for example, programs stored in a storage device such as the ROM 2702, RAM 2703, magnetic disk 2705, and optical disk 2707 shown in FIG. The function is realized by executing the function or by the I / F 2709. Further, the processing results of the respective functional units are stored in a storage device such as the RAM 2703, the magnetic disk 2705, and the optical disk 2707, for example.

  First, the receiving unit 3301 has a function of receiving a communication security inspection result from the access point APi. Specifically, for example, the reception unit 3301 receives the inspection result from the access point AP1 via the network 2610.

  Here, the inspection result is a quarantine log indicating a communication security inspection result. This quarantine log includes, for example, inspection date / time, access point ID, user ID, authentication result, OS / terminal type, identification type, identification ID, quarantine result, and comment. The received quarantine log is stored in the quarantine log DB 2800 shown in FIG.

  The determination unit 3302 has a function of determining an access point APi to be forcibly blocked from the access points AP1 to APn based on the received inspection result. Here, the forcible blockage is to prohibit establishment of a communication path between the access point APi and the wireless terminal Tp. The specific processing content of the determination processing by the determination unit 3302 will be described later.

  The transmission unit 3303 has a function of transmitting a forced block request to the access point APi determined to be forcibly blocked. Specifically, for example, the transmission unit 3303 transmits a forced blocking request prohibiting establishment of a communication path with the wireless terminal Tp to the access point APi via the network 2610. Note that the forced block request may include information for identifying whether the access block is forcibly blocked or forcibly blocked for each group.

  Further, the determination unit 3302 has a function of determining whether or not to cancel the forcible blockade of the access point APi. Here, the release of the compulsory blockade is to return the access point APi from the forcible blockage state to a state in which a communication path can be established with the wireless terminal Tp. Specifically, for example, the determination unit 3302 determines to release the forcible blockade of the access point APi after a predetermined time T has elapsed since the forcible blockade was performed.

  The predetermined time T is arbitrarily set in advance and stored in a storage device such as the RAM 2703, the magnetic disk 2705, and the optical disk 2707, for example. As the fixed time T, for example, a time that can sufficiently take measures against threats in the mobile space may be set.

  Further, the determination unit 3302 may release the forced blockage when the access point APi satisfies the release conditions defined in the various forced blockage tables 3000, 3100, and 3200. Further, the determination unit 3302 may determine to cancel the forcible blockade of the access point APi designated by the user's operation input using the keyboard 2710 or the mouse 2711.

  The transmission unit 3303 has a function of transmitting a forced block release request to the access point APi that has been determined to release the forced block. Specifically, for example, the transmission unit 3303 transmits, via the network 2610, a forced blocking release request for releasing the forced blocking that prohibits establishment of a communication path with the wireless terminal Tp to the access point APi.

  The acquisition unit 3304 has a function of acquiring policy information and patch information. Here, the policy information is a quarantine policy used for the quarantine process of the wireless terminal Tp at the access point APi. The patch information is correction information (patch, antivirus software, etc.) for correcting various software provided from the access point APi to the wireless terminal Tp.

  Specifically, for example, the acquisition unit 3304 acquires policy information and patch information from an external computer (such as a patch distribution server) via the network 2610. In addition, the acquisition unit 3304 may acquire policy information and patch information by a user operation input using the keyboard 2710 and the mouse 2711. Specifically, for example, the user may add / delete policies / patches while confirming a policy / patch list displayed on the display 2708.

  The acquired policy information is stored in the quarantine policy management table 3400 shown in FIG. The acquired patch information is stored in the patch information management table 3500 shown in FIG. The quarantine policy management table 3400 and the patch information management table 3500 are stored in a storage device such as the RAM 2703, the magnetic disk 2705, and the optical disk 2707, for example.

  FIG. 34 is an explanatory diagram of an example of the contents stored in the quarantine policy management table. In FIG. 34, the quarantine policy management table 3400 has fields of policy ID, OS / terminal type, patch application status / virus countermeasure status / setting status, and application conditions. By setting information in each field item, policy information (for example, policy information 3400-1 to 3400-6) is stored as a record.

  FIG. 35 is an explanatory diagram of an example of the contents stored in the patch information management table. In FIG. 35, the patch information management table 3500 has fields of patch ID, OS / terminal type, patch name, and patch file. By setting information in each field, patch information (for example, patch information 3500-1 to 3500-3) is stored as a record.

  The reception unit 3301 has a function of receiving a policy information transmission request and a patch information transmission request from the access point APi. The transmission unit 3303 has a function of transmitting policy information and patch information to the access point APi. Specifically, for example, when there is a request for transmitting policy information from the access point APi, the acquiring unit 3304 acquires the policy information from the quarantine policy management table 3400. Then, the transmitting unit 3303 transmits the acquired policy information to the requesting access point APi.

  Similarly, when there is a patch information transmission request from the access point APi, the acquisition unit 3304 acquires the patch information from the patch information management table 3500. Then, the transmitting unit 3303 transmits the acquired patch information to the requesting access point APi. Note that the transmission unit 3303 may transmit the policy information and the patch information to the access point APi in accordance with a user transmission instruction.

  The receiving unit 3301 has a function of receiving the policy countermeasure status and the patch countermeasure status from the access point APi. Here, the policy countermeasure status is, for example, the registration status of policy information registered in the quarantine policy table 700 of the access point APi. The patch countermeasure status is, for example, the registration status of patch information registered in the patch information table 800 of the access point APi.

  Note that the received policy countermeasure status and patch countermeasure status are registered in the access point management table 2900 shown in FIG. 29, for example. Thereby, it is possible to collectively manage the policy countermeasure status and the patch countermeasure status of each access point APi.

<Functional Configuration of Determination Unit 3302>
Next, a functional configuration of the determination unit 3302 will be described. Here, a case where forced blockade is performed in units of access points APi will be described first. FIG. 36 is a block diagram illustrating an example of a functional configuration of the determination unit 3302. 36, the determination unit 3302 includes a selection unit 3601, a specification unit 3602, an extraction unit 3603, and a calculation unit 3604.

  First, the selection unit 3601 has a function of selecting an arbitrary access point APi from the access point groups AP1 to APn to be managed. Specifically, for example, the selection unit 3601 selects an arbitrary access point APi from the access point management table 2900.

  The specifying unit 3602 has a function of specifying a blocking condition corresponding to the selected access point APi. Specifically, for example, the specifying unit 3602 specifies the blocking condition corresponding to the selected access point APi with reference to the individual forced blocking table 3000 shown in FIG.

  The extraction unit 3603 has a function of extracting the inspection result of the access point APi for a certain period from the received inspection result group. Here, the predetermined period is preset and stored in a storage device such as the RAM 2703, the magnetic disk 2705, and the optical disk 2707. For example, a certain period is set by designating a time (0.5 hours, 1 hour, etc.) going back from the current time. Specifically, for example, the extraction unit 3603 extracts the quarantine log of the access point APi for a certain period from the quarantine log DB 2800 illustrated in FIG.

  The calculation unit 3604 has a function of calculating the number of occurrences of the inspection result corresponding to the specified blocking condition based on the extracted inspection result. Specifically, for example, when the blocking condition is “authentication NG is 200 times / minute or more”, the calculation unit 3604 first generates a quarantine log of authentication NG from the extracted quarantine log group for a certain period of time. Calculate the number of times. Thereafter, the calculation unit 3604 calculates the number of occurrences of the quarantine log per minute corresponding to the blocking condition based on the calculated number of occurrences of the quarantine log of the authentication NG.

  The determination unit 3302 determines whether to forcibly block the access point APi based on the calculated result and the blocking condition. Specifically, for example, in the example of the blocking condition described above, when the determination unit 3302 forcibly blocks the access point APi when the number of occurrences of the quarantine log per minute of the authentication NG is “200 times / minute” or more. decide. Note that the determined determination result is registered in, for example, the individual forced blocking state table 3700 shown in FIG.

  FIG. 37 is an explanatory diagram of an example of the contents stored in the individual forced blocking state table. In FIG. 37, the individual forced blocking state table 3700 has fields of access point ID, forced blocking state, and implementation date / time. By setting information in each field, blockade information 3700-1 to 3700-n is stored as a record.

  The access point ID is an identifier for identifying the access point APi. The compulsory blockage state is information indicating whether or not compulsory blockade is being performed. Here, “forcibly blocked” is set in the case of a forced blockage state, and “normal” is set if it is not in a forced blockage state. In the initial state, “normal” is set. The implementation date and time is the date and time when forcible blockade was implemented.

  According to the individual forced blocking state table 3700, the forced blocking state of each access point AP1 to APn can be recognized. The individual forcible blocking state table 3700 is stored in a storage device such as the RAM 2703, the magnetic disk 2705, and the optical disk 2707, for example.

  Next, a case where the access point APi is forcibly blocked in units of groups will be described. In this case, first, the selection unit 3601 selects an arbitrary group Gt from the access point management table 2900. Thereafter, the specifying unit 3602 specifies the blocking condition corresponding to the selected group Gt with reference to the group-specific forced blocking table (normal state) 3100 shown in FIG. Here, it is assumed that the blocking condition corresponding to the group G1 is specified.

  Then, the extraction unit 3603 extracts a quarantine log group of access points APi belonging to the group G1 for a certain period from the quarantine log DB 2800. Here, it is assumed that the fixed period is 10 minutes and the access points AP1 to AP10 (10 [units]) belong to the group G1. Next, the calculation unit 3604 calculates the number of occurrences of the quarantine log of the authentication NG among the quarantine log group for a certain period. Here, the number of occurrences of the quarantine log of the authentication NG is “12000 [cases]”.

  Thereafter, the calculation unit 3604 calculates the number of times that an authentication NG quarantine log of each access point APi is generated per unit time. Here, the number of occurrences of the NG quarantine log of the authentication NG of each access point APi per unit time is “120 [case / minute] = 12000 [case] ÷ 10 [minute] ÷ 10 [unit]”. In this case, the determination unit 3302 determines to forcibly block the access points AP1 to AP10 belonging to the group G1 in order to satisfy the increase rate blocking condition “authentication NG is 100 [number / min] or more”.

Furthermore, the determination unit 3302 may determine whether or not the blocking condition of the increase density “authentication NG is 10 [number of cases / minute] within 100 [m ² ]” is satisfied. That is, the calculation unit 3604 calculates the number of quarantine logs of authentication NG within 100 [m ² ] per unit time. Then, when the determining unit 3302 satisfies the increase density blocking condition, the determining unit 3302 determines to forcibly block the access points AP1 to AP10 belonging to the group G1.

Here, when the area of the group Gt is 10000 [m ² ], the increase density is “12 [cases / minute” = 1100 [cases] ÷ 10000 [m ² ] ÷ 10 [minutes] × 100 [m ² ] × 100 [m ² ] ”. In this case, the determination unit 3302 determines to forcibly block the access points AP1 to AP10 belonging to the group G1 in order to satisfy the increasing density blocking condition “authentication NG is 10 cases / minute or more within 100 m ² ”.

Access points APi belonging to each group Gt (hereinafter referred to as “access point group APt”) can be identified by referring to the access point management table 2900. The area [m ² ] of the group Gt is stored in a storage device such as the RAM 2703, the magnetic disk 2705, and the optical disk 2707, for example.

  Further, the determination unit 3302 may determine an adjacent group of the group Gt determined to be forcibly blocked (hereinafter referred to as “adjacent group Gx”) to be in a warning state. Here, the alert state is a state in which the monitoring level for threats in the mobile space is higher than in the normal state. For the adjacent group Gx in the alert state, the determination unit 3302 determines whether or not to forcibly block it under a blocking condition that is stricter than the normal state.

  Specifically, when determining whether to forcibly block the guarded group Gt, the specifying unit 3602 replaces the group-specific forced blockage table (normal state) 3100 with the group-specific forcing shown in FIG. The blocking condition is specified with reference to the blocking table (warning state) 3200. Note that the determined determination result is registered in, for example, the group-by-group forced blockage state table 3800 shown in FIG.

  FIG. 38 is an explanatory diagram showing an example of the contents stored in the group-specific forced blockage state table. In FIG. 38, a group-by-group forced blockage state table 3800 has fields of group ID, forced blockage state, and execution date / time. By setting information in each field, blockade information 3800-1 to 3800-s is stored as a record.

  The group ID is an identifier that identifies the group Gt. The compulsory blockage state is information indicating whether or not compulsory blockade is being performed. Here, “forced blockage” is set in the case of forced blockage, “warning” is set in the alert state, and “normal” is set in other cases. In the initial state, “normal” is set. The implementation date and time is the date and time when forcible blockade was implemented.

  According to the group-specific forced blockage state table 3800, the forced blockage states of the groups G1 to Gs can be recognized. The group-by-group forced blockage state table 3800 is stored in a storage device such as the RAM 2703, the magnetic disk 2705, and the optical disk 2707, for example.

  Although the case where the access point APi and the group Gt to be forcibly blocked are automatically determined has been described here, the present invention is not limited to this. For example, the determination unit 3302 may determine to forcibly block the access point APi and the group Gt designated by the user's operation input using the keyboard 2710 and the mouse 2711.

(Functional configuration of access point APi)
Next, each functional unit of the access point APi according to the second embodiment will be described.

  First, the first transmission unit 1002 has a function of transmitting a communication security inspection result of the wireless terminal Tp to the access point management device 2500. Specifically, for example, the first transmission unit 1002 transmits a quarantine log indicating the inspection result of the wireless terminal Tp to the access point management apparatus 2500 via the network 2610.

  The quarantine log includes, for example, inspection date / time, access point ID, user ID, authentication result, OS / terminal type, identification type, identification ID, and quarantine result. In addition, for example, an arbitrary comment text for specifying the factor that has become the authentication NG or the quarantine NG can be given to the quarantine log.

  For example, the first transmission unit 1002 may transmit a quarantine log each time after the inspection of the wireless terminal Tp ends, or may transmit a quarantine log for a certain period in a lump. Connection information for connecting to the access point management device 2500 is stored in a storage device such as the RAM 303, the magnetic disk 305, and the optical disk 307 shown in FIG.

  The first receiving unit 1001 has a function of receiving, from the access point management apparatus 2500, a forced blockage request that prohibits establishment of a communication path with the wireless terminal Tp. The received forced block request is stored in the forced block table 3900 shown in FIG.

  FIG. 39 is an explanatory diagram of an example of the content stored in the forced blocking table. In FIG. 39, the compulsory blockage table 3900 has information related to the compulsory blockage type and the forced blockage state. Here, the forced blockage type is a type of forced blockage (access point unit or group unit). The forcibly blocked state is a state of the wireless terminal Tp. Here, “forcibly blocked” is set in the case of a forced blockage state, and “normal” is set if it is not in a forced blockage state. According to the forced blocking table 3900, the forced blocking state of the wireless terminal Tp can be recognized.

  Moreover, the communication control part 1006 has a function which cut | disconnects the communication path currently established between radio | wireless terminals Tp, when a forced blockage request | requirement is received. Further, the communication control unit 1006 has a function of controlling not to establish a communication path with the wireless terminal Tp when a forced block request is received.

  Specifically, for example, when there are various requests from the wireless terminal Tp, the determination unit 1005 refers to the forced blocking table 3900 and determines whether the forced blocking state is “forcibly blocked”. Here, when the forcibly blocked state is “being forcibly blocked”, the communication control unit 1006 controls the second transmission unit 1004 to send various responses indicating that a communication path cannot be established for various requests to the wireless terminal Tp. Send to.

  The first receiving unit 1001 has a function of receiving, from the access point management apparatus 2500, a forced blockage release request for releasing a forced blockage that prohibits establishment of a communication path with a wireless terminal. When the forced block release request is received, “normal” is set as the forced block state in the forced block table 3900. As a result, the forcible blockade of the wireless terminal Tp is released, and the communication control process in the normal state is executed.

  Further, the first transmission unit 1002 has a function of transmitting a transmission request for policy information or / and patch information to the access point management apparatus 2500. This transmission request is for updating the storage contents of the quarantine policy table 700 and / or the patch information table 800.

  The first receiving unit 1001 has a function of receiving policy information or / and patch information from the access point management apparatus 2500. The received policy information or / and patch information is stored in the quarantine policy table 700 or / and the patch information table 800.

  Policy information and patch information may be received by the first receiving unit 1001 from an external computer (such as a patch distribution server) via the network 2610. Further, the user may operate the operation panel 309 shown in FIG. 3 to input the policy information and the patch information to the access point APi.

(Management procedure of access point management device 2500)
Hereinafter, various management processing procedures of the access point management apparatus 2500 will be described.

<Individual forced blockage processing procedure>
First, the individual forced blocking process procedure of the access point management device 2500 will be described. This individual forcible blocking process is a process for forcibly blocking the access point APi in units of access points. FIG. 40 is a flowchart illustrating an example of an individual forcible blocking process procedure of the access point management apparatus.

  In the flowchart of FIG. 40, first, the selection unit 3601 sets “i = 1” (step S4001), and selects an access point APi from the access point management table 2900 (step S4002). Then, the specifying unit 3602 specifies the blocking condition of the access point APi with reference to the individual forced blocking table 3000 (step S4003).

  Thereafter, the extraction unit 3603 extracts a quarantine log group for a certain period of the access point APi from the quarantine log DB 2800 (step S4004). Next, the calculation unit 3604 calculates the number of occurrences of the quarantine log corresponding to the identified blocking condition based on the extracted quarantine log group (step S4005).

  Then, the determining unit 3302 determines whether the calculated result satisfies the blocking condition (step S4006). Here, when the blocking condition is not satisfied (step S4006: No), the process proceeds to step S4010.

  On the other hand, when the blocking condition is satisfied (step S4006: Yes), the determination unit 3302 determines to forcibly block the access point APi (step S4007). Then, the transmission unit 3303 transmits a forced blocking request to the access point APi (step S4008).

  Next, the determination unit 3302 changes the forcibly blocked state of the access point APi in the individual forcibly blocked state table 3700 from “normal” to “forcibly blocked” (step S4009). At this time, the determination unit 3302 sets the transmission time of the forced block request to the execution date and time of the access point APi in the individual forced block state table 3700.

  Thereafter, the selection unit 3601 increments i (step S4010), and determines whether or not “i> n” (step S4011). Here, if “i ≦ n” (step S4011: No), the process returns to step S4002. On the other hand, in the case of “i> n” (step S4011: Yes), the series of processes according to this flowchart is ended.

  As a result, by determining the access point APi to be forcibly blocked based on the blocking condition unique to the access point APi, it is possible to forcibly block in units of access points. In addition, this individual forcible blocking process may be automatically executed repeatedly at a preset time interval, or may be executed by accepting a user's execution instruction.

<Individual forced blockage release procedure>
Next, the individual forced blockage release processing procedure of the access point management device 2500 will be described. This individual forcible blockage release process is a process for releasing the forcible blockade of the access point APi in units of access points. FIG. 41 is a flowchart illustrating an example of a procedure for individually forcibly releasing the access point management apparatus.

  In the flowchart of FIG. 41, first, the selection unit 3601 sets “i = 1” (step S4101), and selects an access point APi from the access point management table 2900 (step S4102). Then, the specifying unit 3602 specifies the forcibly blocked state of the access point APi with reference to the individual forcibly blocked state table 3700 (step S4103).

  Thereafter, the determining unit 3302 determines whether or not the specified forced blocking state is “being forced blocked” (step S4104). Here, when the forcibly blocked state is “normal” (step S4104: No), the process proceeds to step S4110.

  On the other hand, in the case of “forcibly blocked” (step S4104: Yes), the determination unit 3302 determines whether or not the elapsed time since the forcible blockade is equal to or longer than a predetermined time T (step S4105). The elapsed time is calculated from the execution date and time and the current date and time of the access point APi in the individual forced blocking state table 3700.

  Here, when it is less than the predetermined time T (step S4105: No), the process proceeds to step S4110. On the other hand, if it is equal to or longer than the predetermined time T (step S4105: Yes), the specifying unit 3602 refers to the individual compulsory blocking table 3000 and specifies the release condition for the access point APi (step S4106).

  Then, the determining unit 3302 refers to the access point management table 2900 to determine whether or not the access point APi has taken measures against the policies and patches defined in the specified release condition (step S4107). If no countermeasure is taken (step S4107: NO), the process proceeds to step S4110.

  On the other hand, if the countermeasure has been taken (step S4107: Yes), the transmitting unit 3303 transmits a forced blockage release request to the access point APi (step S4108). Then, the determining unit 3302 changes the forcibly blocked state of the access point APi in the individual forcibly blocked state table 3700 from “forcibly blocked” to “normal” (step S4109). At this time, the determination unit 3302 clears the execution date and time of the access point APi in the individual forced blocking state table 3700.

  Thereafter, the selection unit 3601 increments i (step S4110), and determines whether or not “i> n” (step S4111). Here, if “i ≦ n” (step S4111: NO), the process returns to step S4102. On the other hand, in the case of “i> n” (step S4111: Yes), a series of processing according to this flowchart is ended.

  As a result, the access point APi can be forcibly blocked when a predetermined time T has elapsed since the forcible blockade was implemented and a policy / patch countermeasure that can avoid a new threat has been taken. This individual forced blockage release process may be automatically executed repeatedly at a preset time interval, or may be executed by accepting a user's execution instruction.

<Procedures for forced blockage by group>
First, the group-specific forced blockage processing procedure of the access point management device 2500 will be described. This group-by-group forcible blocking process is a process for forcibly blocking the access point APi in units of groups. FIG. 42 and FIG. 43 are flowcharts showing an example of a group-by-group forced blockage processing procedure of the access point management apparatus.

  In the flowchart of FIG. 42, first, the selection unit 3601 sets “t = 1” (step S4201), and selects the group Gt from the access point management table 2900 (step S4202). Then, the specifying unit 3602 specifies the forced blocking state of the group Gt with reference to the group-specific forced blocking state table 3800 (step S4203).

  Thereafter, the identifying unit 3602 determines whether or not the forcibly blocked state of the group Gt is in the forcibly blocked state (step S4204). Here, in the case of being forcibly blocked (step S4204: Yes), the process proceeds to step S4310 shown in FIG. On the other hand, if it is not in the forced blockade (step S4204: No), it is determined whether or not the forced blockage state of the group Gt is in alert (step S4205).

  Here, when the alert is not in progress (step S4205: No), the group Gt blocking condition is specified with reference to the group-specific forced blocking table (normal state) 3100 (step S4206). On the other hand, when being alert (step S4205: Yes), the group Gt blockage condition is specified with reference to the group-specific forced blockage table (warning state) 3200 (step S4207).

  Thereafter, the identifying unit 3602 identifies the access point group APt belonging to the group Gt with reference to the access point management table 2900 (step S4208). Then, the extraction unit 3603 extracts a quarantine log group for a certain period of the access point group APt from the quarantine log DB 2800 (step S4209). Next, the calculating unit 3604 calculates an increase rate of the quarantine log corresponding to the specified blocking condition based on the extracted quarantine log group (step S4210), and the process proceeds to 4301 shown in FIG.

  In the flowchart of FIG. 43, first, the determining unit 3302 determines whether or not the calculated increase rate satisfies the blocking condition (step S4301). Here, when the blocking condition is not satisfied (step S4301: NO), the process proceeds to step S4310.

  On the other hand, when the blocking condition is satisfied (step S4301: YES), the calculating unit 3604 calculates the increase density of the quarantine log corresponding to the specified blocking condition based on the extracted quarantine log group (step S4302). Then, the determining unit 3302 determines whether or not the calculated increase density satisfies the blocking condition (step S4303).

  If the blocking condition is not satisfied (step S4303: NO), the process proceeds to step S4310. On the other hand, when the blocking condition is satisfied (step S4303: YES), the determination unit 3302 determines to forcibly block the group Gt (step S4304). Then, the transmission unit 3303 transmits a forcible blockage request to the access point group APt belonging to the group Gt (step S4305).

  Next, the determination unit 3302 changes the forcibly blocked state of the access point group APt in the group-by-group forcibly blocked state table 3800 from “normal or alert” to “forcibly blocked” (step S4306). At this time, the determination unit 3302 sets the transmission time of the forced block request to the execution date and time of the access point group APt in the group-specific forced block state table 3800.

  Thereafter, the specifying unit 3602 specifies the adjacent group Gx of the group Gt with reference to the access point management table 2900 (step S4307). Next, the determining unit 3302 determines the specified adjacent group Gx to be in a warning state (step S4308). Then, the determination unit 3302 changes the forcibly blocked state of the access point group APx belonging to the adjacent group Gx in the group-by-group forced blocking state table 3800 from “normal” to “warning” (step S4309). At this time, the determination unit 3302 sets the transmission time of the forced block request to the implementation date of the access point group APx in the group-specific forced block state table 3800.

  Next, the selection unit 3601 increments t (step S4310), and determines whether or not “t> s” (step S4311). If “t ≦ s” is satisfied (step S4311: NO), the process returns to step S4202 shown in FIG. On the other hand, in the case of “t> s” (step S4311: Yes), the series of processes according to this flowchart is ended.

  As a result, by determining the access point group APt to be forcibly blocked based on the blocking condition unique to the group Gt, the group can be forcibly blocked. Note that this group-specific forced blockage process may be automatically executed repeatedly at a preset time interval, or may be executed by accepting a user's execution instruction.

<Forcible blockage release procedure by group>
Next, the group-specific forced block release process procedure of the access point management device 2500 will be described. This group-specific forced block release process is a process of releasing the forced block of the access point APi in units of groups. FIG. 44 is a flowchart illustrating an example of a group-specific forced block release process procedure of the access point management apparatus.

  In the flowchart of FIG. 44, first, the selection unit 3601 sets “t = 1” (step S4401), and selects the group Gt from the access point management table 2900 (step S4402). Then, the specifying unit 3602 specifies the forced blocking state of the group Gt with reference to the group-specific forced blocking state table 3800 (step S4403).

  Thereafter, the determining unit 3302 determines whether or not the specified forced blocking state is “being forced blocked” (step S4404). Here, when the forcibly blocked state is “normal or alert” (step S4404: NO), the process proceeds to step S4412.

  On the other hand, in the case of “forcibly blocked” (step S4404: Yes), the determination unit 3302 determines whether or not the elapsed time since the forced blocking is performed is equal to or longer than a predetermined time T (step S4405). The elapsed time is calculated from the execution date and time and the current date and time of the group Gt in the group-by-group forced blockage state table 3800.

  Here, when it is less than the predetermined time T (step S4405: No), the process proceeds to step S4412. On the other hand, if it is equal to or longer than the predetermined time T (step S4405: Yes), the specifying unit 3602 refers to the access point management table 2900 to specify the access point group APt belonging to the group Gt (step S4406).

  Then, the specifying unit 3602 specifies the group Gt release condition with reference to the group-by-group forced blockage table (normal state) 3100 (step S4407). Then, the determining unit 3302 refers to the access point management table 2900 to determine whether or not the access point group APt has taken measures against the policy and patch defined in the specified release condition (step S4408).

  If no countermeasure has been taken (step S4408: No), the process proceeds to step S4412. On the other hand, if a countermeasure has been taken (step S4408: Yes), the transmitting unit 3303 transmits a forced deblocking release request to the access point group APt (step S4409). Then, the determination unit 3302 changes the forced blocking state of the access point group APt in the group-specific forced blocking state table 3800 from “forcibly blocked” to “normal” (step S4410). At this time, the determination unit 3302 clears the execution date and time of the access point group APt in the group-by-group forced blocking state table 3800.

  Further, the determination unit 3302 changes the forcibly blocked state of the access point group APx belonging to the adjacent group Gx in the group-by-group forcibly blocked state table 3800 from “warning” to “normal” (step S4411). At this time, the determination unit 3302 clears the execution date and time of the access point group APx in the group-by-group forced blocking state table 3800.

  Thereafter, the selection unit 3601 increments t (step S4412), and determines whether or not “t> s” (step S4413). Here, in the case of “t ≦ s” (step S4413: No), the process returns to step S4402. On the other hand, in the case of “t> s” (step S4413: Yes), the series of processes according to this flowchart is ended.

  As a result, the forcible blockade of the access point group APt can be released when a fixed time T has elapsed since the forcible blockade was implemented and a policy / patch countermeasure capable of avoiding a new threat has been taken. The group-by-group forced blockage release processing may be automatically executed repeatedly at a preset time interval, or may be executed by accepting a user's execution instruction.

  In addition, although detailed description is abbreviate | omitted, you may decide to perform the alert cancellation process according to group which cancels the alert state of the group Gt. In this case, the warning condition release condition is specified with reference to the group-specific forced blockage table (warning state) 3200.

<Policy delivery processing procedure>
Next, the policy distribution processing procedure of the access point management device 2500 will be described. This policy distribution process is a process executed in response to a transmission instruction from the access point APi. FIG. 45 is a flowchart illustrating an example of a policy distribution processing procedure of the access point management apparatus.

  In the flowchart of FIG. 45, first, the reception unit 3301 determines whether or not a policy information transmission request is received from the access point APi (step S4501). Here, it waits to receive a transmission request for policy information (step S4501: No).

  Thereafter, when the reception unit 3301 receives a policy information transmission request (step S4501: Yes), the acquisition unit 3304 acquires the policy information from the quarantine policy management table 3400 (step S4502). Then, the transmission unit 3303 transmits the acquired policy information to the requesting access point APi (step S4503), and the series of processing according to this flowchart ends.

  Accordingly, it is possible to provide policy information for avoiding daily threats to the access point APi.

<Patch distribution processing procedure>
Next, the patch distribution processing procedure of the access point management device 2500 will be described. This patch distribution process is a process executed in response to a transmission instruction from the access point APi. FIG. 46 is a flowchart illustrating an example of the patch distribution processing procedure of the access point management apparatus.

  In the flowchart of FIG. 46, first, the receiving unit 3301 determines whether or not a patch information transmission request is received from the access point APi (step S4601). Here, it waits to receive a patch information transmission request (step S4601: No).

  Thereafter, when the reception unit 3301 receives a patch information transmission request (step S4601: YES), the acquisition unit 3304 acquires the patch information from the patch information management table 3500 (step S4602). Then, the transmission unit 3303 transmits the acquired patch information to the requesting access point APi (step S4603), and the series of processes according to this flowchart ends.

  As a result, patch information for avoiding daily threats can be provided to the access point APi.

(Communication control processing procedure of access point APi)
Next, various communication control processing procedures of the access point APi will be described.

<Policy request processing procedure>
Next, the policy request processing procedure of the access point APi will be described. This policy request process is a process for receiving provision of policy information from the access point management apparatus 2500. FIG. 47 is a flowchart showing an example of the policy request processing procedure of the access point.

  In the flowchart of FIG. 47, first, the first transmission unit 1002 transmits a policy information transmission request to the access point management apparatus 2500 (step S4701). Thereafter, the first reception unit 1001 waits for reception of policy information from the access point management device 2500 (step S4702: No).

  When the policy information is received by the first receiving unit 1001 (step S4702: Yes), the received policy information is registered in the quarantine policy table 700 by the first receiving unit 1001 (step S4703). Finally, the first transmission unit 1002 transmits the current policy countermeasure status to the access point management apparatus 2500 (step S4704), and the series of processing according to this flowchart ends.

  As a result, policy information for avoiding daily threats can be applied to the access point APi. This policy request process may be automatically executed repeatedly at a preset time interval, or may be executed by accepting a user's execution instruction.

<Patch request processing procedure>
Next, the patch request processing procedure of the access point APi will be described. This patch request process is a process for receiving provision of patch information from the access point management apparatus 2500. FIG. 48 is a flowchart illustrating an example of the patch request processing procedure of the access point.

  In the flowchart of FIG. 48, first, the first transmission unit 1002 transmits a patch information transmission request to the access point management apparatus 2500 (step S4801). Thereafter, the first reception unit 1001 waits to receive patch information from the access point management apparatus 2500 (step S4802: No).

  When patch information is received by the first receiving unit 1001 (step S4802: Yes), the received patch information is registered in the patch information table 800 by the first receiving unit 1001 (step S4803). Finally, the first transmission unit 1002 transmits the current patch countermeasure status to the access point management apparatus 2500 (step S4804), and the series of processes in this flowchart ends.

  As a result, patch information for avoiding daily threats can be applied to the access point APi. This patch request process may be automatically executed repeatedly at a preset time interval, or may be executed by accepting a user's execution instruction.

  As described above, according to the access point management apparatus 2500 according to the second embodiment, the access point APi to be forcibly blocked can be determined based on the quarantine log group received from the access point groups AP1 to APn. As a result, it is possible to forcibly block the access point APi where there is a high possibility that an unknown virus has spread, and to suppress the spread of damage.

  Further, according to this access point management apparatus 2500, it is possible to forcibly block by access point unit by determining the access point APi to be forcibly blocked based on the blocking condition specific to the access point APi. Thereby, it is possible to respond quickly and accurately to a locally generated threat, and to suppress the spread of damage.

  In addition, according to this access point management device 2500, when a certain time T has elapsed since the forced blockade was performed and a countermeasure for a policy / patch capable of avoiding a new threat has been taken, the access point APi is compulsory. The blockade can be released. As a result, the access point APi can be returned from the forcibly blocked state to the normal state after sufficient countermeasures against unknown viruses are taken.

  Further, according to this access point management device 2500, it is possible to forcibly block by group by determining the access point group APt to be forcibly blocked based on the blocking condition specific to the group Gt. As a result, it is possible to respond quickly and accurately to a wide range of threats, and to suppress the spread of damage.

  Also, according to this access point management device 2500, when a fixed time T has elapsed since the forcible blockade was implemented and a policy / patch countermeasure capable of avoiding a new threat has been taken, the access point group APt Forced blockage can be released. Thereby, after sufficient countermeasures against unknown viruses and the like are taken, the access point group APt can be collectively returned from the forcibly blocked state to the normal state.

  Further, according to the access point APi according to the second embodiment, when a forced block request is received from the access point management device 2500, it is possible to control so as not to establish a communication path with the wireless terminal Tp. This makes it possible to disable data communication in the vicinity where there is a high possibility that an unknown virus is prevalent, and to suppress the spread of damage.

  As described above, according to the communication control program, the communication control device, and the network system, it is possible to ensure security in the mobile space and provide a highly secure environment to the user.

  The communication control method described in this embodiment can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. The communication control program is recorded on a computer-readable recording medium such as a hard disk, a flexible disk, a CD-ROM, an MO, and a DVD, and is executed by being read from the recording medium by the computer. The communication control program may be distributed via a network such as the Internet.

  The following additional notes are disclosed with respect to the embodiment described above.

(Supplementary Note 1) A computer that controls any relay device in the relay device group that connects the wireless terminal and the network,
A determination step of determining whether or not a communication path is established between another wireless terminal different from the wireless terminal and the relay device when there is a communication safety inspection request from the wireless terminal;
A communication control step of establishing a communication path between the wireless terminal and the relay device for checking the safety of communication of the wireless terminal when it is determined by the determining step that a communication path is not established; ,
The communication control program characterized by performing this.

(Supplementary note 2)
When there is no problem in the safety of communication of the wireless terminal in which a communication path is established with the relay device by the communication control step (hereinafter referred to as “first communication control step”), the wireless terminal A first transmission step of transmitting permission information permitting connection to a network to another relay device different from the relay device;
If there is no problem in the safety of communication of the wireless terminal, a second transmission step of transmitting connection information for connecting to the other relay device to the wireless terminal;
The communication control program according to appendix 1, wherein the communication control program is executed.

(Supplementary note 3)
If there is no problem with the safety of communication of the wireless terminal, a search step for searching for another relay apparatus capable of establishing a communication path with the wireless terminal from the relay apparatus group is executed,
The first transmission step includes:
Transmitting the permission information to another relay device searched by the search step;
The second transmission step includes
The communication control program according to appendix 2, wherein connection information for connecting to another relay device searched in the search step is transmitted to the wireless terminal.

(Supplementary note 4)
A third transmission step of transmitting connection information for connecting to the relay device to the wireless terminal when the other relay device is not searched in the search step;
As a result of transmitting the connection information in the third transmission step, when there is a connection request from the wireless terminal to the network, a second connection for connecting the wireless terminal and the network via the relay device The communication control program according to appendix 3, wherein the communication control step is executed.

(Supplementary note 5)
A quarantine step of executing a quarantine process of the wireless terminal based on software information relating to software installed in the wireless terminal included in the inspection request;
Based on the quarantine result quarantined by the quarantine step, a determination step for determining safety of communication of the wireless terminal is performed, and
The second transmission step includes
The communication control program according to any one of appendices 1 to 4, wherein the determination result determined in the determination step is transmitted to the wireless terminal.

(Appendix 6)
When there is a problem with the quarantine result quarantined by the quarantine step, the extraction step for extracting the correction information regarding the software installed in the wireless terminal is executed from the database storing the correction information regarding a plurality of software,
The second transmission step includes
The communication control program according to appendix 5, wherein the correction information extracted by the extraction step is transmitted to the wireless terminal.

(Appendix 7)
Based on the identification information unique to the wireless terminal included in the inspection request, to execute an authentication step of performing authentication processing of the wireless terminal,
The determination step includes
The communication control according to appendix 5 or 6, wherein the communication safety of the wireless terminal is determined based on the authentication result authenticated in the authentication step and the quarantine result quarantined in the quarantine step. program.

(Supplementary note 8)
A first receiving step of receiving permission information permitting connection of the wireless terminal to the network from the other relay device;
A second receiving step of receiving a connection request to the network from the wireless terminal;
A connection for determining whether to permit connection of the wireless terminal to the network based on the permission information received in the first reception step when the connection request is received in the second reception step; A permission determination step;
A third communication control step of connecting the wireless terminal and the network via the relay device when the connection permission / rejection determination step determines that the connection to the network is permitted; The communication control program according to any one of supplementary notes 1 to 7.

(Supplementary note 9)
A fourth transmission step of transmitting, when there is a data relay request from the wireless terminal to the other wireless terminal, a request for checking the communication safety of the other wireless terminal to the other wireless terminal;
A third reception step of receiving a communication safety inspection confirmation response from the other wireless terminal as a result of the inspection confirmation request being transmitted in the fourth transmission step;
The connection permission / rejection determination step includes:
Determining whether to allow data relay from the wireless terminal to the other wireless terminal based on the inspection confirmation response received in the third receiving step;
The third communication control step includes:
9. The communication control program according to appendix 8, wherein the wireless terminal is connected to the other relay device via the relay device when it is determined that the data relay is permitted in the connection permission determination step.

(Supplementary Note 10) In the computer,
A fifth transmission step of transmitting a determination result of the safety of communication of the wireless terminal determined by the determination step to a management device accessible to the relay device group;
A fourth reception step of receiving a prohibition request for prohibiting establishment of a communication path with the wireless terminal as a result of the determination result being transmitted in the fifth transmission step;
When the prohibition request is received in the fourth reception step, a fourth communication control step for controlling so as not to establish a communication path with the wireless terminal is executed. The communication control program according to any one of 9.

(Supplementary Note 11) The fourth communication control step includes:
The communication control program according to appendix 10, wherein when the prohibition request is received, a communication path established with the wireless terminal is disconnected.

(Supplementary note 12) A communication control device for controlling any relay device in a relay device group connecting a wireless terminal and a network,
When there is a communication safety inspection request from the wireless terminal, a determination unit that determines whether a communication path has been established between another wireless terminal different from the wireless terminal and the relay device;
A communication control means for establishing a communication path between the wireless terminal and the relay device for inspecting safety of communication of the wireless terminal when the determining means determines that a communication path is not established; ,
A communication control apparatus comprising:

(Supplementary note 13) A wireless terminal connected to a network via any relay device in a group of relay devices scattered in various places,
Prior to a connection request to the network for the relay device, a determination unit that determines a communication safety inspection status of the wireless terminal;
When the determination means determines that the communication safety is not inspected, a transmission means for transmitting a communication safety inspection request of the wireless terminal to the relay device;
A wireless terminal comprising:

(Supplementary note 14)
When the communication safety of the wireless terminal has been inspected, it is further determined whether the elapsed time from the communication safety inspection date of the wireless terminal is within a preset allowable time,
The transmission means includes
14. The wireless terminal according to appendix 13, wherein when the determination unit determines that the allowable time is exceeded, the wireless terminal communication safety inspection request is transmitted to the relay device.

(Supplementary note 15) A management device capable of accessing a relay device group connecting a wireless terminal and a network,
Receiving means for receiving a test result of communication safety of the wireless terminal from the relay device;
Determining means for deciding whether to prohibit establishment of a communication path between the relay device and the wireless terminal based on the inspection result received by the receiving means;
A transmission unit that transmits a prohibition request for prohibiting establishment of a communication path with the wireless terminal to the relay device when it is determined to be prohibited by the determination unit;
A management apparatus comprising:

(Supplementary Note 16) The determining means includes
A supplementary note for determining whether to prohibit establishment of a communication path between the relay device and the wireless terminal based on the prohibition condition specific to the relay device and the inspection result defined in advance. 15. The management device according to 15.

(Supplementary note 17)
Based on the elapsed time from prohibiting establishment of a communication path between the relay device and the wireless terminal, determine whether to cancel the prohibition of establishment of the communication path,
The transmission means includes
17. The management apparatus according to appendix 15 or 16, wherein when the determination unit determines to cancel, the cancellation request for canceling the prohibition of establishment of the communication path is transmitted to the relay apparatus.

(Appendix 18) The relay device group is classified into a plurality of groups,
The determining means includes
Determine whether to prohibit establishment of communication paths between a plurality of relay devices belonging to the group and the wireless terminal based on the group-specific prohibition condition and the inspection result defined in advance,
The transmission means includes
The management apparatus according to any one of appendices 15 to 17, wherein when it is determined to prohibit the establishment of the communication path, the prohibition request is transmitted to the plurality of relay apparatus groups.

(Supplementary note 19)
Based on the elapsed time from prohibiting establishment of a communication path between the plurality of relay devices and the wireless terminal, determine whether to cancel the prohibition of establishment of the communication path,
The transmission means includes
19. The management apparatus according to appendix 18, wherein when the determination unit determines to cancel, the cancellation request for canceling the prohibition of establishment of the communication path is transmitted to the plurality of relay apparatuses.

(Supplementary Note 20) In a network system having a relay device group that connects a wireless terminal and a network, and a communication control device that controls any relay device of the relay device group,
The communication control device is
When there is a communication safety inspection request from the wireless terminal, a determination unit that determines whether a communication path has been established between another wireless terminal different from the wireless terminal and the relay device;
A communication control means for establishing a communication path between the wireless terminal and the relay device for inspecting safety of communication of the wireless terminal when the determining means determines that a communication path is not established; A network system comprising:

(Supplementary Note 21) The communication control device is
When there is no problem in the safety of communication of the wireless terminal in which a communication path is established with the relay apparatus by the communication control means, permission information for permitting connection of the wireless terminal to the network is transmitted to the relay apparatus. First transmission means for transmitting to another relay device different from
When there is no problem in the safety of communication of the wireless terminal, the second transmission means for transmitting connection information for connecting to the other relay device to the wireless terminal,
The relay device is
The network system according to appendix 20, wherein a communication path is established with the wireless terminal based on permission information from the communication control device.

(Appendix 22) The communication control device
Quarantine means for executing a quarantine process of the wireless terminal based on software information installed in the wireless terminal included in the inspection request;
Determination means for determining safety of communication of the wireless terminal based on a quarantine result quarantined by the quarantine means,
The second transmission means includes
The network system according to appendix 20 or 21, wherein the determination result determined by the determining means is transmitted to the wireless terminal.

DESCRIPTION OF SYMBOLS 110 Wireless network 120 Wired network 200,2600 Network system 500 Access point table 600 Authentication table 700 Quarantine policy table 800 Patch information table 900 Permit information table 1001 1st receiving part 1002 1st sending part 1003 2nd receiving part 1004 2nd 2 transmission unit 1005 judgment unit 1006 communication control unit 1007 security judgment unit 1008 authentication unit 1009 quarantine unit 1010, 3603 extraction unit 1011 search unit 1100 communication state management table 1601, 3303 transmission unit 1602, 3301 reception unit 1603 inspection status judgment unit 1604 Correction unit 2500 Access point management device 2800 Quarantine log DB
2900 Access Point Management Table 3000 Individual Forced Blocking Table 3100 Grouped Forced Blocking Table (Normal State)
3200 Forced Blocking Table by Group (Warning)
3302 Determining unit 3304 Acquisition unit 3400 Quarantine policy management table 3500 Patch information management table 3601 Selection unit 3602 Identification unit 3604 Calculation unit 3700 Individual forced blocking state table 3800 Forced blocking state table by group

Claims (6)

To a computer that controls any relay device in the relay device group that connects the wireless terminal and the network,
A determination step of determining whether or not a communication path is established between another wireless terminal different from the wireless terminal and the relay device when there is a communication safety inspection request from the wireless terminal;
A communication control step of establishing a communication path between the wireless terminal and the relay device for checking the safety of communication of the wireless terminal when it is determined by the determining step that a communication path is not established; ,
The communication control program characterized by performing this. In the computer,
When there is no problem in the safety of communication of the wireless terminal in which a communication path is established with the relay apparatus by the communication control step, permission information for permitting connection of the wireless terminal to the network is transmitted to the relay apparatus. A first transmission step of transmitting to another different relay device;
If there is no problem in the safety of communication of the wireless terminal, a second transmission step of transmitting connection information for connecting to the other relay device to the wireless terminal;
The communication control program according to claim 1, wherein the communication control program is executed. In the computer,
A quarantine step of executing a quarantine process of the wireless terminal based on software information relating to software installed in the wireless terminal included in the inspection request;
Based on the quarantine result quarantined by the quarantine step, a determination step for determining safety of communication of the wireless terminal is performed, and
The second transmission step includes
The communication control program according to claim 2, wherein the determination result determined in the determination step is transmitted to the wireless terminal. In the computer,
When there is a problem with the quarantine result quarantined by the quarantine step, the extraction step for extracting the correction information regarding the software installed in the wireless terminal is executed from the database storing the correction information regarding a plurality of software,
The second transmission step includes
The communication control program according to claim 3, wherein the correction information extracted in the extraction step is transmitted to the wireless terminal. A communication control device that controls any relay device in a relay device group that connects a wireless terminal and a network,
When there is a communication safety inspection request from the wireless terminal, a determination unit that determines whether a communication path has been established between another wireless terminal different from the wireless terminal and the relay device;
A communication control means for establishing a communication path between the wireless terminal and the relay device for inspecting safety of communication of the wireless terminal when the determining means determines that a communication path is not established; ,
A communication control apparatus comprising: In a network system having a relay device group that connects a wireless terminal and a network, and a communication control device that controls any relay device of the relay device group,
The communication control device is
When there is a communication safety inspection request from the wireless terminal, a determination unit that determines whether a communication path has been established between another wireless terminal different from the wireless terminal and the relay device;
A communication control means for establishing a communication path between the wireless terminal and the relay device for inspecting safety of communication of the wireless terminal when the determining means determines that a communication path is not established; A network system comprising:

Images