JP2004094723A - Firewall operation system, firewall operation method, and firewall operation program - Google Patents

Abstract

An object of the present invention is to allow a user system administrator to easily use a firewall.
A program manufacturing company system (30) publishes on a network (500) a revised firewall program including revised content and virus pattern data corresponding to a new computer virus. The service providing company system 10 transmits the content change data based on the setting change request from the user system 20, the revised firewall program downloaded from the program manufacturer system 30, and the virus pattern data to the user system 20 via the network 500, An instruction to apply to the firewall device of the user system 20 is transmitted, and the user system 20 implements the application according to the instruction.
[Selection diagram] Fig. 1

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a firewall operation system, a firewall operation method, and a firewall operation program, and more particularly, to a firewall operation system, a firewall operation method, and a firewall operation program that are operated by a service provider.
[0002]
[Prior art]
With the recent explosive spread of the Internet, the number of cases in which users connect the system to the Internet and provide services using the system has been increasing. The Internet can be used by an unspecified number of people, some of whom have malicious intent, such as attacking vulnerable servers, such as attempting to illegally invade a specific Internet connection site. Acts are often seen. In addition, activities such as trying attack tools available on sites on the Internet are usually performed as amusing criminal activities.
[0003]
As a means to prevent such unauthorized communication, there is introduction of a firewall. The main function of a firewall is a device that is installed at an internal or external connection point and controls communication passing therethrough. A function is provided in which permission and non-permission of communication are defined in advance, and only permitted communication from outside is passed inside. As a result, the user system can be operated safely by introducing a firewall.
[0004]
The communication passing through the firewall needs to be defined in advance, but when the system changes, such as when the number of services provided by the user using the Internet increases, it is necessary to review the definition. This work requires a lot of time and skill, such as reviewing communications that occur due to system changes and defining the review results in the firewall.
[0005]
A firewall is processed by a firewall program inside the device, but a defect may be found in the firewall program. New features may also be added to the firewall. These can be solved by revising the internal program. However, to perform this, the following operations occur.
[0006]
-Check with the firewall program manufacturer for the revision information.
[0007]
・ Obtain a revised program.
[0008]
-Apply the revised firewall program to the installed firewall.
[0009]
Some communications, such as an attack that checks the provided service, among communications that are not allowed to pass through the firewall, have a function of detecting the attack by the firewall. These help the vehicle in subsequent attacks. These need to be constantly monitored by the system administrator.
[0010]
Computer viruses are a typical example of unauthorized communications that invade users. When a computer virus invades a user system, it brings great disadvantages to the user, such as down of a server or a network or infection of the entire system. Recently, as a computer virus intrusion route, infection via the Internet using e-mail is common. It is very effective to protect this with a firewall, which is the connection point between the user system and the Internet.
[0011]
In order to detect a computer virus, it is necessary to store a known computer virus pattern in a firewall. The update interval of the new computer virus pattern is very short, and if the update operation is neglected, a new computer virus cannot be detected. Therefore, the system administrator needs to take prompt action.
[0012]
In order to handle these tasks by the user himself, a heavy burden is imposed on the user, such as securing working time and acquiring necessary skills.
[0013]
Also, for example, the technology described in Patent Document 1 discloses that "a network user transmits a communication request to a management device such as a network device via a network, the communication request is received by the management device, and the network request is transmitted based on the received communication request. When the management device changes the settings of the network device software and the like necessary to satisfy the communication request, performs the communication request reflection processing based on the user ID or group ID assigned to the communication request, and uses the metered system Is a network device that needs to change the settings to satisfy the communication request from the network configuration information when the communication request conforms to the security policy or when the security policy is not checked, Licensing, software, etc., and change settings to applicable network devices, software, etc. Shows give, after these series of processes, when the user who has transmitted the communication request has selected metered billing is the management method such as a network device that performs a charging process. "
[0014]
[Patent Document 1]
JP 2001-358717 A
[0015]
[Problems to be solved by the invention]
The problem with the technology described in Patent Document 1 is that a great deal of time and cost are required for the administrator of the user system to have the necessary knowledge and technology to operate the firewall. . In addition, a lot of work time is required for actual operation.
[0016]
The reason for this is that the user system (client side) has to perform the work of updating the firewall program, changing the configuration of the user system, and performing a new computer virus.
[0017]
An object of the present invention is to provide a program manufacturer system operated by a program manufacturer that develops and publishes a firewall program, a service provider company system operated by a service provider that manages application and operation of a firewall, and a user system that implements a firewall. An object of the present invention is to enable an administrator who connects to a network and manages a user system to easily implement a firewall.
[0018]
[Means for Solving the Problems]
A first firewall operation system according to the present invention includes at least one user system equipped with a firewall program that receives change content data via a network, implements a firewall by referring to the change content data, and the input user system The change content data corresponding to is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user system via the network, and a change instruction for setting change is transmitted via the network, Upon receiving a notification from the user system indicating that the setting change process has been completed normally, the service providing company system that displays the normal completion of the setting change process is provided.
[0019]
A second firewall operation system according to the present invention includes a program maker system that publishes a revised firewall program with modified contents to a network, and one or more programs that receive the revised firewall program via the network and execute the revised firewall program. If the version number of the revised firewall program released by the user system and the program manufacturer system is newer than the version number of the internal firewall program, the revised firewall program is downloaded from the program manufacturer system via the network, and the revised version is downloaded. A firewall program is transmitted to the user system via the network, and a revision instruction for applying the revision firewall program is transmitted to the network. And sending said the revision process from the user system receives a notification indicating that the operation was successful, and having a service provider system for displaying a success revision process.
[0020]
A third firewall operation system of the present invention implements a firewall by receiving a virus pattern data via the network and a program maker system for exposing virus pattern data to a network and referring to the virus pattern data. Downloading one or more user systems loaded with a firewall program and a revised firewall program via the network made public by the program manufacturer system, transmitting virus pattern data to the user system via the network, When an application instruction for applying the pattern data is transmitted via the network and a notification indicating that the application processing has been normally completed is received from the user system, the normal end of the application processing is displayed. And characterized in that it has and that the service provider system.
[0021]
A fourth firewall operation system according to the present invention includes a revised firewall program having a modified content, a program manufacturer system for publishing virus pattern data to a network, and receiving the changed content data and virus pattern data via the network. A firewall program for implementing a firewall with reference to the change data and virus pattern data, receiving the revised firewall program via the network, and executing one or more user systems executing the revised firewall program; Change content data corresponding to the user system is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user system via the network to change the setting, and the change instruction is issued. When transmitted via the network and receives a notification from the user system indicating that the setting change process has been normally completed, the display indicates that the setting change process has been completed normally, and displays the version of the revised firewall program published by the program manufacturer system. If the version is newer than the version of the internal firewall program, a revised firewall program is downloaded from the program manufacturer system via the network, and the revised firewall program is transmitted to the user system via the network. Is transmitted via the network, and upon receiving from the user system a notification indicating that the revision processing has been completed normally, displaying the normal end of the revision processing and displaying the program production Downloading the revised firewall program via the network published by the company system, transmitting virus pattern data to the user system via the network, transmitting an application instruction for applying the virus pattern data via the network, And a service provider system that displays a normal end of the application process when receiving a notification indicating that the application process has been normally completed from the user system.
[0022]
A fifth firewall operation system according to the present invention includes a revised firewall program having a modified content, a program manufacturer system for publishing virus pattern data to a network, and receiving changed content data and virus pattern data via the network. A firewall program that implements a firewall by referring to the modified data and the virus pattern data, receives the revised firewall program via the network, executes the revised firewall program, and sends an e-mail when an unauthorized communication is detected. At least one user system to be transmitted and change data corresponding to the input user system are stored therein, and when a setting change instruction is input, the change data is transmitted to the user system via the network. Transmitting to the system, transmitting a change instruction to change the setting via the network, and receiving a notification indicating that the setting change process has been normally completed from the user system, displaying a normal end of the setting change process, If the version of the revised firewall program published by the program manufacturer system is newer than the version of the internal firewall program, download the revised firewall program from the program manufacturer system via the network, and update the revised firewall program to the network. And transmits a revision instruction for applying a revision firewall program via the network, and upon receiving a notification from the user system indicating that the revision process has been completed normally, Display the normal end of the process, download the revised firewall program via the network disclosed by the program manufacturer system, transmit the virus pattern data to the user system via the network, and apply the virus pattern data And a service provider system for displaying a normal end of the application process upon receiving a notification from the user system indicating that the application process has been normally completed. .
[0023]
A first firewall operation method according to the present invention is characterized in that one or more user procedures for receiving a change content data via a network, processing a firewall program for implementing a firewall by referring to the change content data, and the input user procedure The change content data corresponding to is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for setting change is transmitted via the network, Upon receiving a notification from the user procedure indicating that the setting change processing has been normally completed, the service providing company procedure for displaying the normal completion of the setting change processing is included.
[0024]
A second firewall operation method according to the present invention includes a program maker procedure for publishing a revised firewall program with modified contents to a network, and one or more of receiving the revised firewall program via the network and executing the revised firewall program. If the version of the revised firewall program released by the user procedure and the program manufacturer procedure is newer than the version of the internal firewall program, the revised firewall program is downloaded from the program manufacturer procedure via the network, and the revised version is downloaded. A firewall program is transmitted to the user procedure via the network, and a revision instruction for applying the revision firewall program is transmitted via the network, and the user If revision process to receive a notification indicating that the operation was successful from, characterized in that it comprises a procedure service provider for displaying the normal end of the revision process.
[0025]
According to a third firewall operation method of the present invention, a procedure of a program maker for exposing virus pattern data to a network, receiving the virus pattern data via the network, and implementing the firewall with reference to the virus pattern data. Downloading one or more user procedures for processing a firewall program and a revised firewall program via the network disclosed by the program manufacturer procedure, transmitting virus pattern data to the user procedure via the network, A service providing company procedure for transmitting, via the network, an application instruction for applying the pattern data and receiving a notification from the user procedure indicating that the application processing has been normally completed, and displaying a normal end of the application processing; Characterized in that it comprises a.
[0026]
A fourth firewall operation method according to the present invention comprises the steps of: a revised firewall program whose contents have been modified; a procedure of a program manufacturer that publishes virus pattern data to a network; One or more user procedures for processing a firewall program that implements a firewall with reference to the change content data and the virus pattern data, receiving the revised firewall program via the network, and executing the revised firewall program; The change content data corresponding to the user procedure is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for changing the setting is transmitted to the network. When the notification indicating that the setting change process has been normally completed is received from the user procedure, the normal completion of the setting change process is displayed, and the version number of the revised firewall program published by the program manufacturer procedure is displayed. If it is newer than the version of the internal firewall program, download the revised firewall program from the program manufacturer procedure via the network, send the revised firewall program to the user procedure via the network, and apply the revised firewall program When a revision instruction is transmitted via the network and a notification indicating that the revision processing has been normally completed is received from the user procedure, the normal completion of the revision processing is displayed, and the network published by the program manufacturer procedure is displayed. Via the network, and transmits an application instruction for applying the virus pattern data through the network, and the application process is normally performed from the user procedure. A service provider procedure for displaying a normal end of the application process upon receiving a notification indicating that the application process has been completed.
[0027]
A fifth firewall operation method according to the present invention comprises the steps of: a revised firewall program having modified contents; a procedure of a program manufacturer for publishing virus pattern data to a network; and receiving the changed content data and virus pattern data via the network. Processing the firewall program that implements the firewall by referring to the change content data and the virus pattern data, receives the revised firewall program via the network, executes the revised firewall program, and sends an e-mail when an unauthorized communication is detected. At least one user procedure to be transmitted and change data corresponding to the input user procedure are stored therein, and when a setting change instruction is input, the change data is transmitted to the user procedure via the network. When a change instruction to change the setting is transmitted via the network and a notification indicating that the setting change processing has been normally completed is received from the user procedure, the normal completion of the setting change processing is displayed and released by the program manufacturer procedure. If the version of the revised firewall program is newer than the version of the internal firewall program, the revised firewall program is downloaded from the program manufacturer procedure via the network, and the revised firewall program is transmitted to the user procedure via the network. Transmitting, via the network, a revision instruction for applying the revision firewall program, and upon receiving a notification from the user procedure indicating that the revision processing has been completed normally, displaying the normal end of the revision processing, and displaying the program Downloading the revised firewall program via the network published by the company procedure, transmitting the virus pattern data to the user procedure via the network, transmitting an application instruction to apply the virus pattern data via the network, Upon receiving a notification from the user procedure indicating that the application processing has been completed normally, a service provider company procedure for displaying the normal completion of the application processing is included.
[0028]
A first firewall operation program according to the present invention includes one or more user procedures for receiving a change content data via a network, processing a firewall program for implementing a firewall with reference to the change content data, and the input user procedure. The change content data corresponding to is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for setting change is transmitted via the network, Upon receiving a notification from the user procedure indicating that the setting change processing has been completed normally, the computer is caused to execute a service provider company procedure for displaying the normal completion of the setting change processing.
[0029]
A second firewall operation program according to the present invention includes a program maker procedure for publishing a revised firewall program with modified contents to a network, and one or more programs for receiving the revised firewall program via the network and executing the revised firewall program. If the version of the revised firewall program released by the user procedure and the program manufacturer procedure is newer than the version of the internal firewall program, the revised firewall program is downloaded from the program manufacturer procedure via the network, and the revised version is downloaded. Transmitting a firewall program to the user procedure via the network, transmitting a revision command for applying the revision firewall program via the network, If revision process to The procedure to receive a notification indicating that the operation was successful, characterized in that to perform the steps service provider for displaying the normal end of the revision process on the computer.
[0030]
A third firewall operation program according to the present invention includes a procedure of a program maker for exposing virus pattern data to a network, receiving the virus pattern data via the network, and implementing a firewall with reference to the virus pattern data. Downloading one or more user procedures for processing a firewall program and a revised firewall program via the network disclosed by the program manufacturer procedure, transmitting virus pattern data to the user procedure via the network, A service provider that transmits an application instruction to apply pattern data via the network and that receives a notification from the user procedure indicating that the application processing has been normally completed, and that displays a normal end of the application processing. Characterized in that to execute the steps in the computer.
[0031]
A fourth firewall operation program according to the present invention includes a revised firewall program whose contents have been modified, a program manufacturer procedure for publishing virus pattern data to a network, and receiving changed content data and virus pattern data via the network. One or more user procedures for processing a firewall program that implements a firewall with reference to the change content data and the virus pattern data, receiving the revised firewall program via the network, and executing the revised firewall program; The change content data corresponding to the user procedure is stored therein, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for setting change is transmitted to the network. Transmitted from the user procedure, and receives a notification from the user procedure indicating that the setting change processing has been completed normally, indicates that the setting change processing has been normally completed, and displays the version of the revised firewall program published by the program manufacturer procedure. If the number is newer than the version of the internal firewall program, download the revised firewall program from the program manufacturer procedure via the network, send the revised firewall program to the user procedure via the network, and update the revised firewall program. A version change instruction to be applied is transmitted through the network, and upon receiving a notification from the user procedure indicating that the version change process has been completed normally, the normal completion of the version change process is displayed, and the program manufacturer's procedure published by the procedure is displayed. Net Downloading the revised firewall program via the network, transmitting the virus pattern data to the user procedure via the network, transmitting an application instruction for applying the virus pattern data via the network, and applying the application processing from the user procedure. Receiving a notification indicating that the application processing has been completed normally, the computer is caused to execute a service provider company procedure for displaying the normal end of the application processing.
[0032]
A fifth firewall operation program according to the present invention includes a revised firewall program with modified contents, a procedure of a program manufacturer for publishing virus pattern data to a network, and receiving changed content data and virus pattern data via the network. Processing the firewall program that implements the firewall by referring to the change content data and the virus pattern data, receives the revised firewall program via the network, executes the revised firewall program, and sends an e-mail when an unauthorized communication is detected. At least one user procedure to be transmitted and change data corresponding to the input user procedure are stored therein, and when a setting change instruction is input, the change data is transmitted to the user procedure via the network. Transmitting a change instruction to change the setting via the network, and receiving a notification from the user procedure indicating that the setting change processing has been normally completed, displaying the normal completion of the setting change processing, and displaying the program manufacturer If the version of the revised firewall program published by the procedure is newer than the version of the internal firewall program, download the revised firewall program from the program manufacturer procedure via the network, and update the revised firewall program via the network. Transmitting to the user procedure, transmitting a revision instruction to apply the revision firewall program via the network, and receiving a notification indicating that the revision processing has been normally completed from the user procedure, displaying a normal end of the revision processing, The blog Download the revised firewall program via the network disclosed by the software manufacturer procedure, transmit the virus pattern data to the user procedure via the network, and transmit an application instruction for applying the virus pattern data via the network. Then, upon receiving from the user procedure a notification indicating that the application processing has been completed normally, the computer is made to execute a service provider company procedure for displaying the normal completion of the application processing.
[0033]
BEST MODE FOR CARRYING OUT THE INVENTION
Next, a first embodiment of the present invention will be described in detail with reference to the drawings.
[0034]
According to the first embodiment of the present invention, as a means for preventing unauthorized communication to an in-company system, a company (hereinafter, referred to as a “user”) that has introduced a firewall performs the following four tasks originally performed by the user himself. This is a system that provides a system in which a service provider automatically and remotely performs work.
[0035]
・ Change firewall settings.
[0036]
・ Fixed bug of firewall.
[0037]
・ Constant monitoring of unauthorized communication to corporate systems.
[0038]
・ Prevent computer viruses from entering corporate systems.
[0039]
Further, it has a function of periodically reporting the contents of the above four tasks performed by the service providing company to the user.
[0040]
FIG. 1 is a block diagram showing a configuration of the first exemplary embodiment of the present invention.
[0041]
Referring to FIG. 1, a first embodiment of the present invention includes a service provider system 10, a user system 20 (one or more), a program manufacturer system 30, and a network 500 such as the Internet for connecting these. Consists of
[0042]
FIG. 2 is a block diagram showing a configuration of the service providing company system 10. As shown in FIG.
[0043]
The service providing company system 10 is a system operated by a company for preliminarily concluding a service contract with a user who uses the user system 20 and performing the operation management of the user system 20 on behalf of the user. Referring to FIG. , A firewall device 101 connected via a local area network or the like, an operation terminal 102, and a user database device 103.
[0044]
The firewall device 101 is configured by a computer, is connected to the network 500, and is equipped with a firewall program provided by the program manufacturer system 30. By setting conditions in advance, the firewall device 101 can communicate through itself via the network 500. It has a function to allow / disallow. In addition, the firewall device 101 has a function of encrypting communication between the user system 20 and the firewall device 201, so that all communication between the operation terminal 102 and the management terminal 202 installed in the user system 20 can be performed. Encrypt.
[0045]
The operation terminal 102 is composed of a computer, and has (1) a function of connecting the user system 20 to the management terminal 202, (2) a function of executing a program on the connected management terminal 202, and (3) a program manufacturer system 30. Has a function of connecting to the information transmission server 301 and downloading a modified version program.
[0046]
The user database device 103 is configured by a computer including a storage device, and stores a database that manages the version number of the firewall program used in the firewall device 201 of the user system 20. In addition, this is done by periodically and automatically connecting to the information transmission server 301 installed in the program manufacturer system 30, confirming the version of the released correction program, and downloading the newer version if it is newer. It has a function to do.
[0047]
FIG. 3 is a block diagram showing the configuration of the user system 20.
[0048]
The user system 20 is a system operated by a company. Referring to FIG. 3, the user system 20 includes a firewall device 201 connected via a local area network or the like and a management terminal 202 for the purpose of protecting against computer viruses and unauthorized communication. Is done.
[0049]
The firewall device 201 is configured by a computer, is connected to the network 500, and has a firewall program provided by the program manufacturer system 30 similarly to the firewall device 101 of the service provider system 10, and sets conditions in advance. Accordingly, a function of permitting / prohibiting communication passing therethrough via the network 500 is provided. In addition, the firewall device 201 has a function of encrypting communication with the firewall device 101, and further has a function of detecting a virus attached to an e-mail that passes through itself and enters the user system 20.
[0050]
The management terminal 202 is composed of a computer, and has (1) a function of changing settings of the firewall device 201, and (2) a firewall program installed in the firewall device 201 based on program correction information from the program manufacturer system 30. And (3) a function of detecting information on a computer virus that is widespread on the Internet and setting the latest computer virus pattern in the firewall device 201.
[0051]
The program manufacturer system 30 is a manufacturer (or a distributor) of the firewall device 201 installed in the user system 20.
[0052]
FIG. 4 is a block diagram showing the configuration of the program manufacturing company system 30.
[0053]
Referring to FIG. 4, the information transmission server 301 is configured by a computer and provides a modification program of the firewall device 101 and a firewall program installed in the firewall device 201. When the modification program is published and stored, a service is provided. It has a function of notifying the provider company system 10 by e-mail.
[0054]
Next, the operation of the first exemplary embodiment of the present invention will be described with reference to the drawings.
[0055]
First, a case where a setting change is requested from the user system 20 will be described.
[0056]
FIG. 5 is a flowchart showing the operation of the first embodiment of the present invention.
[0057]
FIG. 6 is an explanatory diagram showing the operation of the first exemplary embodiment of the present invention.
[0058]
Referring to FIG. 5 and FIG. 6, when the system change such as the addition of the server or the review of the communication network occurs and the setting change of the firewall device 201 becomes necessary, the administrator of the user system 20 On the other hand, the user inputs an e-mail for a setting change instruction and instructs transmission. In response to this instruction, the management terminal 202 sends a setting change request e-mail to the operation terminal 102 of the service provider company system 10 via the firewall device 201 and the network 500 (step A0 in FIG. 5). Here, general e-mail software can be used.
[0059]
When the operation terminal 102 of the service provider company system 10 receives the setting change request e-mail via the network 500 and the firewall device 101, the operation terminal 102 displays the received e-mail on a display or the like. In accordance with the contents of the setting change request e-mail, the worker creates change content data for the firewall device 201 and inputs the change content data to the operation terminal 102, and the operation terminal 102 stores the change content data therein (FIG. 5, FIG. 6 step A1). Next, when a setting change instruction is input by the worker, the operation terminal 102 executes the installed setting change processing (step A2 in FIGS. 5 and 6) and performs the setting change work.
[0060]
The setting change processing is as follows.
[0061]
First, a connection is made to the management terminal 202 of the user system 20 via the firewall device 101 and the network 500 (step A3 in FIGS. 5 and 6). Next, the stored change content data is transmitted from the operation terminal 102 to the management terminal 202 via the firewall device 101 and the network 500 (step A4 in FIG. 5). Next, a change instruction to change the setting of the firewall device 201 is transmitted to the management terminal 202 (step A5 in FIG. 5), and the transmitted change content data is applied to the firewall device 201. Next, when a notification indicating that the setting change processing of the firewall device 201 has been normally completed is received from the user system 20, the normal completion of the setting change processing is displayed on a display or the like to notify the worker (step A7 in FIG. 5). ).
[0062]
When confirming the notification of the normal end of the setting change process, the worker notifies the administrator of the user system 20 of the normal end of the setting change process by using e-mail software installed in the operation terminal 102 (see FIG. 5 steps A8).
[0063]
In the user system 20, the change content data received by the management terminal 202 is stored (step A4 in FIG. 6), and then the management terminal 202 stores it in the firewall device 201 (step A5 in FIG. 6). The firewall program of the firewall device 201 performs a firewall process using the change content data. Further, the management terminal 202 transmits a notification of the normal end of the setting change process to the management terminal 202 via the firewall device 201 and the network 500 (step A6 in FIG. 5).
[0064]
Next, a case where the service provider system 10 applies the modified firewall program will be described.
[0065]
FIG. 7 is a flowchart showing the operation of the first embodiment of the present invention.
[0066]
FIG. 8 is an explanatory diagram showing the operation of the first exemplary embodiment of the present invention.
[0067]
When a revised firewall program (the revised program of the changed part is also possible) is created with its contents modified, stored in the information transmission server 301 of the program manufacturer system 30, and published on the network 500 or the like on a homepage or the like (FIG. 7, In FIG. 8, step B0), the user database device 103 of the service providing company system 10 automatically and periodically connects to the information transmission server 301 via the network 500, and updates the version number of the published revised firewall program and its own Is compared with the version number information of the firewall program (step B1 in FIG. 7). If the version number of the revised firewall program is increased, the revised firewall program is downloaded via the network 500 (step B2 in FIGS. 7 and 8). .
[0068]
When the download of the revised firewall program ends normally, the user database device 103 displays the execution of the download on a display or the like (step B3 in FIG. 7) and notifies the worker in charge of the service providing company system 10.
[0069]
The worker in charge of the service providing company system 10 uses the operation terminal 102 to notify the administrator of the user system 20 of the release of the revised firewall program and the date and time of application to the firewall device 201 (date and time of application) to the administrator of the user system 20 by this notification. (Step B4 in FIG. 7). When the date and time when the administrator of the user system 20 is contacted (the application date and time is input to the operational terminal 102 in advance), the operation terminal 102 executes a revision process (step B5 in FIGS. 7 and 8).
[0070]
The revision processing executed here is as follows.
[0071]
The operation terminal 102 first connects to the management terminal 202 of the user system 20 via the firewall device 101 and the network 500 (step B6 in FIGS. 7 and 8). Next, the user database device 103 transmits the revised firewall program downloaded from the information transmission server 301 of the program manufacturer system 30 to the management terminal 202 of the user system 20 (step B7 in FIG. 7).
[0072]
Next, the operation terminal 102 transmits a revision instruction for applying the revision firewall program to the firewall device 201 to the management terminal 202 (step B8 in FIG. 7), and applies the transmitted change content data to the firewall device 201.
[0073]
Next, upon receiving from the user system 20 a notification indicating that the revision processing of the firewall device 201 has been completed normally, the normal completion of the revision processing is displayed on a display or the like to notify the worker (step B9 in FIG. 7).
[0074]
After confirming the notification of the normal end of the revision processing, the worker notifies the administrator of the user system 20 of the normal end of the revision processing using the e-mail software installed in the operation terminal 102 (step in FIG. 7). B10).
[0075]
In the user system 20, the revised firewall program received by the management terminal 202 is stored (step B7 in FIG. 8), and then the management terminal 202 stores it in the firewall device 201 (step B8 in FIG. 8). Thereafter, the revised firewall program of the firewall device 201 performs the processing of the firewall. Further, the management terminal 202 transmits a notification of the normal end of the revision processing to the management terminal 202 via the firewall device 201 and the network 500 (step B9 in FIG. 7).
[0076]
Next, a case where an unauthorized communication is detected in the user system 20 will be described.
[0077]
FIG. 9 is a flowchart showing the operation of the first embodiment of the present invention.
[0078]
Referring to FIG. 9, when the firewall device 201 of the user system 20 detects a communication that attempts to intrude illegally from the network 500 (step C0 in FIG. 9), the firewall device 201 provides an e-mail indicating that the illegal communication exists. The information is transmitted to a worker who uses the operation terminal 102 of the company system 10 (step C1 in FIG. 9).
[0079]
The operation terminal 102 of the service providing company system 10 receives the e-mail (step C2 in FIG. 9), and the worker checks the contents of the e-mail received by the operation terminal 102 (step C2 in FIG. 9). A notification is made to the administrator of No. 20 by telephone or e-mail (step C3 in FIG. 9).
[0080]
Next, a case will be described in which a new computer virus is found and virus pattern data corresponding to it is applied.
[0081]
FIG. 10 is a flowchart showing the operation of the first exemplary embodiment of the present invention.
[0082]
FIG. 11 is an explanatory diagram showing the operation of the first exemplary embodiment of the present invention.
[0083]
Virus pattern data for detecting a new computer virus (referred to by a firewall program and used for detecting a computer virus) is created, stored in the information transmission server 301 of the program manufacturer system 30, and stored on a homepage or the like. 500 (step D0 in FIGS. 10 and 11), the information transmission server 301 of the program manufacturing company system 30 discloses the virus pattern data to the person in charge of the service provider system 10 by e-mail. (Step D1 in FIG. 10).
[0084]
The worker in charge of the service providing company system 10 receives the e-mail using the operation terminal 102 and knows that the virus pattern data has been released. The date and time of application of the virus pattern data to the firewall device 201 is notified by e-mail using the operation terminal 102 (step D2 in FIG. 10).
[0085]
The operation terminal 102 executes the virus pattern data application processing when the date and time when the administrator of the user system 20 is contacted (the application date and time is input to the operation terminal 102 in advance) (FIG. 10, FIG. 11, step D3). ).
[0086]
The virus pattern data application processing executed here is as follows.
[0087]
First, virus pattern data is downloaded from the information transmission server 301 of the program manufacturer system 30 via the network 500 and stored in the operation terminal 102 (step D4 in FIGS. 10 and 11). Next, it connects to the management terminal 202 of the user system 20 (step D5 in FIG. 10). Next, the virus pattern data downloaded from the information transmission server 301 of the program manufacturer system 30 is transmitted to the management terminal 202 of the user system 20 (step D6 in FIGS. 10 and 11). Next, an application instruction for applying the new virus pattern data to the firewall device 201 is transmitted to the management terminal 202 (step D7 in FIG. 10), and a notification indicating that the application processing of the virus pattern data has been normally completed is sent from the user system 20. Is received and displayed on a display or the like (step D10 in FIG. 10), and the worker is notified.
[0088]
After confirming the notification of the normal end of the application processing of the virus pattern data, the worker contacts the administrator of the user system 20 by e-mail, telephone, or the like (step D11 in FIG. 10).
[0089]
Upon receiving the virus pattern data from the service providing company system 10, the management terminal 202 of the user system 20 stores the virus pattern data therein (step D6 in FIG. 11), and upon receiving an application instruction for applying the virus pattern data, the firewall device 201. (Step D8 in FIGS. 10 and 11), and thereafter, virus detection is performed with reference to the virus pattern data in which the firewall program of the firewall device 201 is stored.
[0090]
Next, a second embodiment of the present invention will be described in detail with reference to the drawings.
[0091]
Next, a second embodiment of the present invention is a method including the steps of FIG. 5, FIG. 6, FIG. 7, FIG. 8, FIG. 9, FIG.
[0092]
Next, a third embodiment of the present invention will be described in detail with reference to the drawings.
[0093]
Next, in a third embodiment of the present invention, each step of FIGS. 5, 6, 7, 8, 9, 10, and 11 is performed by a computer (for example, a service providing company system 10, a user system 20, a program to be executed by the program manufacturer system 30).
[0094]
【The invention's effect】
A first advantage of the present invention is that a firewall can be used even if an administrator of a user system does not have expertise in firewalls.
[0095]
The reason is that the service provider system automatically updates the firewall program.
[0096]
The second effect is that when a system change such as addition of a server of the user system or a review of the communication network occurs, and a setting change of the firewall device becomes necessary, the man-hour of the user system administrator can be reduced.
[0097]
The reason is that the service provider system creates change content data due to the setting change.
[0098]
A third effect is that a new type of computer virus can be easily dealt with.
[0099]
The reason is that the virus pattern data disclosed by the program manufacturer system is downloaded by the service resistance company system and applied to the user system.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a first exemplary embodiment of the present invention.
FIG. 2 is a block diagram showing a configuration of a service providing company system.
FIG. 3 is a block diagram illustrating a configuration of a user system.
FIG. 4 is a block diagram showing a configuration of a program manufacturing company system.
FIG. 5 is a flowchart showing an operation of the first exemplary embodiment of the present invention.
FIG. 6 is an explanatory diagram showing an operation of the first exemplary embodiment of the present invention.
FIG. 7 is a flowchart showing an operation of the first exemplary embodiment of the present invention.
FIG. 8 is an explanatory diagram showing the operation of the first exemplary embodiment of the present invention.
FIG. 9 is a flowchart showing an operation of the first exemplary embodiment of the present invention.
FIG. 10 is a flowchart showing the operation of the first exemplary embodiment of the present invention.
FIG. 11 is an explanatory diagram showing an operation of the first exemplary embodiment of the present invention.
[Explanation of symbols]
10. Service provider system
20 User system
30 Program Manufacturing Company System
101 Firewall device
102 Operation terminal
103 User database device
201 Firewall device
202 Management terminal
301 Information transmission server
500 networks

Claims (15)

One or more user systems having a firewall program that receives change content data via a network and implements a firewall by referring to the change content data;
The content of the change corresponding to the input user system is stored therein, and when a setting change instruction is input, the change data is transmitted to the user system via the network, and the change instruction to change the setting is transmitted to the network. And a service provider system that, upon receiving a notification from the user system indicating that the setting change process has been normally completed, displays the normal completion of the setting change process. A program manufacturer system that publishes the revised firewall program with the modified content to the network,
One or more user systems that receive the revised firewall program over the network and execute the revised firewall program;
If the version of the revised firewall program released by the program manufacturer system is newer than the version of the internal firewall program, the revised firewall program is downloaded from the program manufacturer system via the network, and the revised firewall program is downloaded. Transmitting the revision instruction for applying the revision firewall program via the network to the user system via the network, and receiving a notification from the user system indicating that the revision processing has been completed normally, And a service providing company system for displaying a message. A program maker system for exposing virus pattern data to a network;
One or more user systems having a firewall program for receiving virus pattern data via the network and implementing a firewall with reference to the virus pattern data;
Download the revised firewall program via the network released by the program manufacturer system, transmit virus pattern data to the user system via the network, and issue an application instruction to apply the virus pattern data via the network. A service providing company system for transmitting and receiving a notification from the user system indicating that the application processing has been normally completed, and displaying a normal end of the application processing. A revised firewall program with modified contents, a program manufacturer system that publishes virus pattern data to the network, and receives the modified data and virus pattern data via the network and refers to the modified data and virus pattern data One or more user systems that are equipped with a firewall program that implements a firewall and receives the revised firewall program via the network and executes the revised firewall program;
The content of the change corresponding to the input user system is stored therein, and when a setting change instruction is input, the change data is transmitted to the user system via the network, and the change instruction to change the setting is transmitted to the network. When the notification indicating that the setting change processing has been normally completed is received from the user system, the normal completion of the setting change processing is displayed, and the version number of the revised firewall program published by the program manufacturer system. If the firmware version is newer than the version of the internal firewall program, a revised firewall program is downloaded from the program manufacturer system via the network, the revised firewall program is transmitted to the user system via the network, and the revised firewall program is executed. A revision instruction for applying the program is transmitted via the network, and upon receiving a notification from the user system indicating that the revision processing has been completed normally, displaying the normal end of the revision processing, and being published by the program manufacturer system. Downloading the revised firewall program via the network, transmitting the virus pattern data to the user system via the network, transmitting an application instruction for applying the virus pattern data via the network, and applying the application pattern from the user system. A firewall providing system which, upon receiving a notification indicating that the processing has been completed normally, displays a normal completion of the application processing. A revised firewall program with modified contents, a program manufacturer system that publishes virus pattern data to the network, and receives the modified data and virus pattern data via the network and refers to the modified data and virus pattern data One or more user systems that are equipped with a firewall program that implements a firewall, receives the revised firewall program via the network, executes the revised firewall program, and sends an email when detecting unauthorized communication;
The content of the change corresponding to the input user system is stored therein, and when a setting change instruction is input, the change data is transmitted to the user system via the network, and the change instruction to change the setting is transmitted to the network. When the notification indicating that the setting change processing has been normally completed is received from the user system, the normal completion of the setting change processing is displayed, and the version number of the revised firewall program published by the program manufacturer system. If the firmware version is newer than the version of the internal firewall program, a revised firewall program is downloaded from the program manufacturer system via the network, the revised firewall program is transmitted to the user system via the network, and the revised firewall program is executed. A revision instruction for applying the program is transmitted via the network, and upon receiving a notification from the user system indicating that the revision processing has been completed normally, displaying the normal end of the revision processing, and being published by the program manufacturer system. Downloading the revised firewall program via the network, transmitting the virus pattern data to the user system via the network, transmitting an application instruction for applying the virus pattern data via the network, and applying the application pattern from the user system. A firewall providing system which, upon receiving a notification indicating that the processing has been completed normally, displays a normal completion of the application processing. One or more user procedures for receiving a change data over a network and processing a firewall program that implements a firewall with reference to the change data;
The content of change corresponding to the input user procedure is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for setting change is transmitted to the network. And a service provider procedure for displaying, upon receiving a notification from the user procedure indicating that the setting change processing has been normally completed, indicating that the setting change processing has been normally completed. A program manufacturer's procedure to publish the revised firewall program to the network,
One or more user procedures for receiving the revised firewall program over the network and executing the revised firewall program;
If the version of the revised firewall program published by the program manufacturer procedure is newer than the version of the internal firewall program, the revised firewall program is downloaded from the program manufacturer procedure via the network, and the revised firewall program is downloaded. Transmitting the revision instruction for applying the revision firewall program via the network to the user procedure via the network, and receiving a notification from the user procedure indicating that the revision processing has been normally completed; And a service providing company procedure for displaying a message. A program manufacturer procedure for publishing virus pattern data to the network;
One or more user procedures for receiving a virus pattern data via the network and processing a firewall program for implementing a firewall with reference to the virus pattern data;
Download the revised firewall program via the network released by the program manufacturer procedure, transmit the virus pattern data to the user procedure via the network, and issue an application instruction to apply the virus pattern data via the network. A service provider procedure for transmitting and receiving a notification from the user procedure indicating that the application processing has been normally completed, and displaying a normal end of the application processing. A revised firewall program with revised contents, a program manufacturer procedure to publish virus pattern data to the network,
Receiving the change content data and the virus pattern data via the network, processing the firewall program for implementing the firewall with reference to the change content data and the virus pattern data, receiving the revised firewall program via the network, One or more user procedures for running a firewall program;
The content of change corresponding to the input user procedure is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for setting change is transmitted to the network. When the notification indicating that the setting change processing has been normally completed is received from the user procedure, the normal completion of the setting change processing is displayed, and the version number of the revised firewall program published by the program manufacturer procedure is transmitted. If the version is newer than the version of the internal firewall program, download the revised firewall program from the program manufacturer procedure via the network, send the revised firewall program to the user procedure via the network, and apply the revised firewall program Break An instruction is transmitted over the network, and upon receiving a notification from the user procedure indicating that the revision processing has been completed normally, displaying the normal end of the revision processing, and displaying the completion of the revision processing via the network disclosed by the program manufacturer procedure. Download the revised firewall program, send the virus pattern data to the user procedure through the network, send an application instruction to apply the virus pattern data through the network, and complete the application process from the user procedure normally A service provider procedure for displaying a normal end of the application process upon receiving a notification indicating that the application process has been performed. A revised firewall program with revised contents, a program manufacturer procedure to publish virus pattern data to the network,
Receiving the change content data and the virus pattern data via the network, processing the firewall program for implementing the firewall with reference to the change content data and the virus pattern data, receiving the revised firewall program via the network, One or more user procedures for executing a firewall program and sending an email upon detecting unauthorized communication;
The content of change corresponding to the input user procedure is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for setting change is transmitted to the network. When the notification indicating that the setting change processing has been normally completed is received from the user procedure, the normal completion of the setting change processing is displayed, and the version number of the revised firewall program published by the program manufacturer procedure is transmitted. If the version is newer than the version of the internal firewall program, download the revised firewall program from the program manufacturer procedure via the network, send the revised firewall program to the user procedure via the network, and apply the revised firewall program Break An instruction is transmitted over the network, and upon receiving a notification from the user procedure indicating that the revision processing has been completed normally, displaying the normal end of the revision processing, and displaying the completion of the revision processing via the network disclosed by the program manufacturer procedure. Download the revised firewall program, send the virus pattern data to the user procedure through the network, send an application instruction to apply the virus pattern data through the network, and complete the application process from the user procedure normally A service provider procedure for displaying a normal end of the application process upon receiving a notification indicating that the application process has been performed. One or more user procedures for receiving a change data over a network and processing a firewall program that implements a firewall with reference to the change data;
The content of change corresponding to the input user procedure is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for setting change is transmitted to the network. Transmitting a notification indicating that the setting change process has been normally completed from the user procedure, and causing the computer to execute a service provider company procedure for displaying the normal completion of the setting change process. Operational program. A program manufacturer's procedure to publish the revised firewall program to the network,
One or more user procedures for receiving the revised firewall program over the network and executing the revised firewall program;
If the version of the revised firewall program published by the program manufacturer procedure is newer than the version of the internal firewall program, the revised firewall program is downloaded from the program manufacturer procedure via the network, and the revised firewall program is downloaded. Transmitting the revision instruction for applying the revision firewall program via the network to the user procedure via the network, and receiving a notification from the user procedure indicating that the revision processing has been normally completed; A firewall operation program characterized by causing a computer to execute a service provider procedure for displaying a message. A program manufacturer procedure for publishing virus pattern data to the network;
One or more user procedures for receiving a virus pattern data via the network and processing a firewall program for implementing a firewall with reference to the virus pattern data;
Download the revised firewall program via the network released by the program manufacturer procedure, transmit the virus pattern data to the user procedure via the network, and issue an application instruction to apply the virus pattern data via the network. A firewall operation program which, when transmitted and receives a notification from the user procedure indicating that the application processing has been normally completed, causes a computer to execute a service provider company procedure for displaying a normal end of the application processing. A revised firewall program with revised contents, a program manufacturer procedure to publish virus pattern data to the network,
Receiving the change content data and the virus pattern data via the network, processing the firewall program for implementing the firewall with reference to the change content data and the virus pattern data, receiving the revised firewall program via the network, One or more user procedures for running a firewall program;
The content of change corresponding to the input user procedure is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for setting change is transmitted to the network. When the notification indicating that the setting change processing has been normally completed is received from the user procedure, the normal completion of the setting change processing is displayed, and the version number of the revised firewall program published by the program manufacturer procedure is transmitted. If the version is newer than the version of the internal firewall program, download the revised firewall program from the program manufacturer procedure via the network, send the revised firewall program to the user procedure via the network, and apply the revised firewall program Break An instruction is transmitted over the network, and upon receiving a notification from the user procedure indicating that the revision processing has been completed normally, displaying the normal end of the revision processing, and displaying the completion of the revision processing via the network disclosed by the program manufacturer procedure. Download the revised firewall program, send the virus pattern data to the user procedure through the network, send an application instruction to apply the virus pattern data through the network, and complete the application process from the user procedure normally Receiving a notification indicating that the application processing has been performed, the service operation company procedure for displaying the normal end of the application processing, and causing the computer to execute the procedure. A revised firewall program with revised contents, a program manufacturer procedure to publish virus pattern data to the network,
Receiving the change content data and the virus pattern data via the network, processing the firewall program for implementing the firewall with reference to the change content data and the virus pattern data, receiving the revised firewall program via the network, One or more user procedures for executing a firewall program and sending an email upon detecting unauthorized communication;
The content of change corresponding to the input user procedure is stored internally, and when a setting change instruction is input, the change content data is transmitted to the user procedure via the network, and a change instruction for setting change is transmitted to the network. When the notification indicating that the setting change processing has been normally completed is received from the user procedure, the normal completion of the setting change processing is displayed, and the version number of the revised firewall program published by the program manufacturer procedure is transmitted. If the version is newer than the version of the internal firewall program, download the revised firewall program from the program manufacturer procedure via the network, send the revised firewall program to the user procedure via the network, and apply the revised firewall program Break An instruction is transmitted over the network, and upon receiving a notification from the user procedure indicating that the revision processing has been completed normally, displaying the normal end of the revision processing, and displaying the completion of the revision processing via the network disclosed by the program manufacturer procedure. Download the revised firewall program, send the virus pattern data to the user procedure through the network, send an application instruction to apply the virus pattern data through the network, and complete the application process from the user procedure normally Receiving a notification indicating that the application processing has been performed, the service operation company procedure for displaying the normal end of the application processing, and causing the computer to execute the procedure.

Images