JP2006268544A - Network connection control system, network connection control method, and network connection control program - Google Patents

Abstract

[PROBLEMS] To prevent the occurrence of damage caused by connection of a low security level user's information terminal or service provider's server to a network.
A network connection control system 1 is provided so as to be connectable to a user information terminal 2 and a service provider server 3 via a network 4, and the vulnerability management unit 11 in the network connection control system 1 uses the information terminal 2 and the server. 3 is managed, the risk level calculation unit 12 calculates the risk level based on the vulnerability level for the information terminal 2 and the server 3, and the connection determination unit 13 requires the risk level and connection to the system 1. The information terminal 2 and the server 3 are judged to be connectable to the system 1 by comparing with a first threshold indicating a simple connection policy. Further, the connection determination unit 13 compares the risk level of the information terminal 2 with a second threshold value indicating a connection policy necessary for connection to the server 3 to determine whether the information terminal 2 can connect to the server 3.
[Selection] Figure 1

Description

  The present invention relates to a technique for controlling connection of a user information terminal or a service provider server to a network according to a security state.

  2. Description of the Related Art Conventionally, in a narrow area network for in-house use or the like, a system that diagnoses the security status of a client terminal by a server and manages the security status of the entire network has been used (see, for example, Patent Document 1).

However, when using a wide area network such as the Internet, each user grasps and deals with the security status of an information terminal such as a personal computer. Specifically, each user installs software for vulnerability inspection, anti-virus software, personal firewall for preventing unauthorized entry, etc. on the information terminal, and manages the security status using these software .
JP 2004-289260 A

  However, with the rapid spread of the Internet in recent years, not all users are familiar with security management, as all users are familiar with security management. It is difficult to deal with.

  On the other hand, even a service provider who intends to provide some service to the user through the Internet has the same problem because he / she performs security management of the server and the like himself.

  For this reason, when a low security information terminal accesses the server itself, the service provider may be damaged by unauthorized access by a third party or impersonation. Also, for the user, if the security of the server of the service provider accessed by his / her information terminal is low, there is a risk that the third party may suffer damage such as unauthorized access and communication abnormality.

  The present invention has been made in view of the above, and an object of the present invention is to prevent the occurrence of damage caused by connection of a low-security user information terminal or a service provider server to a network. is there.

  The network connection control system according to the first aspect of the present invention is a network connection control system connected to a user information terminal and a service provider server via a network, and is necessary for connection to the system. A database that stores a first threshold value indicating a policy, a vulnerability level of the information terminal is received from the information terminal, a vulnerability level of the server is received from the server, and the information terminal and the server are vulnerable. Vulnerability management means for associating and storing the security level in the database, and risk level calculation for reading the vulnerability level from the database, calculating the risk level for each information terminal and server based on the vulnerability level, and storing it in the memory Means and read the risk level from memory and data It reads the first threshold from the base, the risk level and the connection determining means for determining whether to connect to the system by comparing the first threshold value for each of the information terminal and a server, characterized by having a.

  In the present invention, the risk level is calculated based on the vulnerability level for each of the user information terminal and the service provider server, and the risk level and the first connection policy necessary for connection to the system are shown. By comparing the threshold value and determining whether or not connection to the system is possible, the information terminal or server whose risk level does not satisfy the condition of the first threshold value is refused to connect to the system, and the information terminal or the security level is low Prevents damage caused by connecting servers.

  The network connection control system stores a second threshold value indicating a connection policy necessary for connection to a server that is permitted to connect to the system, reads out the risk level of the information terminal from the memory, and reads the risk level from the database. 2 threshold values are read, the risk level is compared with the second threshold value to determine whether or not the information terminal can connect to the server, and a notification means for notifying the information terminal whether or not connection is possible; It is characterized by having.

  In the present invention, a second threshold value indicating a connection policy necessary for connection to the service provider's server is registered in the system, and the risk level of the user's information terminal is compared with the second threshold value. It can occur when an information terminal whose risk level does not satisfy the condition of the second threshold is refused to connect to the server by determining whether or not connection to the server is possible, and an information terminal with a low security level connects to the server Prevent the occurrence of damage such as unauthorized access and spoofing.

  In the network connection control system, the risk level calculation means calculates the risk level by taking the sum of the number of vulnerabilities for the product of the vulnerability level and the elapsed time that has passed the vulnerability level. It is characterized by.

  In the present invention, it can be said that the security level is lower as the state of large vulnerability continues for a long time. Therefore, by defining the risk level by the sum of products of the vulnerability level and the elapsed time, it is possible to determine whether or not connection is possible. To be more accurate.

  A network connection control system according to a second aspect of the present invention is a network connection control system that is connected to a user information terminal and a service provider server via a network, and is necessary for connection to the server. A database for storing a second threshold value indicating a policy, a vulnerability management means for receiving the vulnerability level of the information terminal from the information terminal, associating the information terminal with the vulnerability level, and storing the information in the database; A risk level calculating means for calculating a risk level of the information terminal based on the vulnerability level and storing the risk level in the memory, reading the risk level from the memory and reading the second threshold value from the database, Compare with the second threshold to determine whether the information terminal can be connected to the server And having a that connection determining means, and notifying means for notifying whether the connection to the information terminal.

  A network connection control method according to a third aspect of the present invention is a network connection control method performed using a system connected to a user information terminal and a server of a service provider via a network. Storing a first threshold value indicating a connection policy necessary for connection in a database; receiving the vulnerability level of the information terminal from the information terminal; receiving the vulnerability level of the server from the server; A step of associating a vulnerability level for each of the servers and storing it in the database; a step of reading the vulnerability level from the database; calculating a risk level for each of the information terminal and the server based on the vulnerability level; Read the risk level from memory and It reads the first threshold value from the scan, and having the steps of: determining whether to connect to the system by comparing the risk level and the first threshold value for each of the information terminal and the server.

  A network connection control method according to a fourth aspect of the present invention is a network connection control method performed using a system connected to a user's information terminal and a service provider's server via a network. Storing a second threshold value indicating a connection policy necessary for connection in the database; receiving a vulnerability level of the information terminal from the information terminal; storing the information terminal and the vulnerability level in association with each other; and database The vulnerability level is read from the vulnerability level, the risk level of the information terminal is calculated based on the vulnerability level and stored in the memory, the risk level is read from the memory and the second threshold value is read from the database. Compare the two thresholds to determine whether the information terminal can be connected to the server And having a step, the step of notifying whether the connection to the information terminal.

  A network connection control program according to a fifth aspect of the present invention shows a connection policy necessary for connection to a computer system connected to a user information terminal and a service provider server via a network. The process of storing the first threshold value in the database, the vulnerability level of the information terminal is received from the information terminal, the vulnerability level of the server is received from the server, and the vulnerability level is set for each of the information terminal and the server. Processing to store in association with the database, read the vulnerability level from the database, calculate the risk level for each information terminal and server based on the vulnerability level, store the risk level in the memory, and read the risk level from the memory Along with the first threshold from the database and information Wherein the end and the process of determining whether to connect to the system by comparing the risk level and the first threshold value for each of the server, that is the execution.

  A network connection control program according to a sixth aspect of the present invention shows a connection policy required for connection to a server for a computer system connected to a user information terminal and a service provider server via a network. Processing for storing the second threshold value in the database, processing for receiving the vulnerability level of the information terminal from the information terminal, storing the information terminal in association with the vulnerability level in the database, reading the vulnerability level from the database, and The process of calculating the risk level of the information terminal based on the vulnerability level and storing it in the memory, reading the risk level from the memory, reading the second threshold from the database, comparing the risk level with the second threshold, and information A process for determining whether or not a terminal can be connected to a server, and connection to an information terminal is allowed , A process of notifying the characterized thereby running.

  ADVANTAGE OF THE INVENTION According to this invention, generation | occurrence | production of the damage by the information terminal of a user with a low security level or a server of a service provider connecting to a network can be prevented.

  Hereinafter, the best mode will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a network connection control system in the present embodiment. The network connection control system 1 is a computer system that can be connected to a user information terminal 2 and a service provider server 3 via a network 4.

  As shown in the figure, the network connection control system 1 includes a vulnerability management unit 11, a risk level calculation unit 12, a connection determination unit 13, a connection control unit 14, a security management database 15, and a connection policy database 16. The processing of each unit is executed by a program installed in the network connection control system 1. Details of each process will be described later.

  The user information terminal 2 corresponds to a personal computer, a portable terminal, or the like. Vulnerability inspection software for inspecting the vulnerability of the information terminal 2 is installed in the information terminal 2 in advance.

  The server 3 of the service provider is also configured by a computer system and has a function of providing services such as information provision to the information terminal 2 via the network 4.

  The network 4 is a wide area network represented by the Internet. In the figure, for convenience of explanation, one information terminal 2 and one server 3 are shown, but the present system can also be applied when there are a plurality of information terminals 2 and servers 3 respectively.

  Next, an outline of processing in each part of the network connection control system 1 will be described.

  The vulnerability management unit 11 receives information indicating the vulnerability level of the information terminal 2 from the information terminal 2 and also receives information indicating the vulnerability level of the server 3 from the server 3. Are associated with the vulnerability level and stored in the security management database 15.

  The risk level calculation unit 12 reads the vulnerability level from the security management database 15, calculates the risk level based on the vulnerability level for each of the information terminal 2 and the server 3, and stores the risk level in the internal memory.

  The connection policy database 16 stores in advance a first threshold value indicating a connection policy necessary for connection to the system 1 and a second threshold value indicating a connection policy necessary for connection to the server 3. Here, the connection policy corresponding to the first threshold means a policy at a level at which the operator of the system 1 can permit the information terminal 2 or the server 3 to connect to the system 1. The connection policy corresponding to the threshold refers to a policy at a level at which the service provider can permit the information terminal 2 to connect to its own server 3.

  The connection determination unit 13 reads the risk level calculated by the risk level calculation unit 12 from the memory, reads the first threshold value from the connection policy database 16, and sets the risk level and the first threshold value for each of the information terminal 2 and the server 3. In comparison, it is determined whether connection to the system 1 is possible. In addition, the connection determination unit 13 reads the risk level of the information terminal 2 from the memory, reads the second threshold value from the connection policy database 16, compares the risk level of the information terminal 2 with the second threshold value, and It is determined whether or not connection to the server 3 is possible. The connection control unit 14 notifies the information terminal 2 or the server 3 of the result of whether or not the connection to the system 1 is possible, and permits the connection of the information terminal 2 or the server 3 permitted to connect to the system 1. In addition, the information terminal 2 is notified of the result of whether or not the connection to the server 3 is possible, and the server 3 is instructed to accept the connection of the information terminal 2 that is permitted to connect.

  Next, the processing of each unit will be described in more detail while showing the overall processing flow in the system 1. The processing in this embodiment has two stages: (1) connection of the information terminal 2 and the server 3 to the system 1 and (2) connection between the information terminal 2 and the server 3. Hereinafter, it demonstrates in order.

[Connection to this system]
First, information indicating the level of vulnerability is generated by executing vulnerability inspection software in the information terminal 2 and the server 3, respectively. The information indicating the vulnerability level may indicate the vulnerability level itself, or may be a vulnerability ID as will be described later. The information terminal 2 and the server 3 store vulnerability information including information indicating the level of the vulnerability, the inspection date and time, and the countermeasure date and time.

  Then, as shown in (i) of FIG. 2, the information terminal 2 or the server 3 trying to connect to the system 1 transmits a system connection request including vulnerability information to the system 1. This system connection request includes information terminal ID for information terminal identification or server ID for server identification in addition to vulnerability information.

  The vulnerability management unit 11 in the system 1 receives this system connection request and associates the vulnerability level with each of the information terminal 2 and the server 3 and registers them in the security management database 15. If there are multiple vulnerabilities in one information terminal or server, each vulnerability is registered.

  In this registration, a vulnerability management table and a vulnerability master table stored in the security management database are used.

  As shown in FIG. 3, the vulnerability management table is for managing the correspondence relationship between the information terminal ID / server ID, vulnerability ID, inspection date / time, and countermeasure date / time. As shown in FIG. 4, the vulnerability master table is for managing the correspondence relationship between the vulnerability ID, the vulnerability name, and the vulnerability level. In this vulnerability master table, the vulnerability level is defined to be lower as the security is stronger and higher as the security is weaker. By using these tables, both when the vulnerability level itself is used as information to be included in the vulnerability information transmitted by the information terminal 2 or the server 3, or when a vulnerability ID is used instead. It becomes possible to respond.

  Next, as shown in (ii) of FIG. 2, whether the connection to the system 1 is possible is determined by processing in the risk level calculation unit 12 and the connection determination unit 13. In this determination, whether or not the risk level calculation unit 12 first reads the vulnerability level for the information terminal 2 or the server 3 using the vulnerability management table and the vulnerability master table, and the inspection date and time corresponding to the vulnerability level. And read the coping date. Then, by calculating the difference between the inspection date and time and the countermeasure date and time, the elapsed time that the state of the vulnerability level has been left is calculated. When a state with a high vulnerability level is left unattended for a long time, it is considered that the risk level is high. Therefore, the risk level calculation unit 12 calculates the risk level RL according to the following equation (1).

RL = Σ (vulnerability level x elapsed time) (1)
Here, the integral symbol Σ is the total for the information terminal 2 or server 3 by summing up the risk levels for each vulnerability when there is a plurality of vulnerabilities in one information terminal 2 or server 3. This means that the risk level is determined.

  When calculating the formula (1), for example, “high” is determined to be 10 points, “medium” is determined to be 5 points, “low” is determined to be 1 point, and the elapsed time is determined to be, for example, 3 days. Less than 0.1 points, 3 days or more and less than 1 week is set to 0.5 points, 1 week or more and less than 1 month is set to 0.8 points, and 1 month or more is set to 1.0 points.

  Then, the connection determination unit 13 determines whether or not connection is possible using the first threshold management table stored in the connection policy database 16. As shown in FIG. 5, the first threshold value management table associates the connection policy with the first threshold value for each of the information terminal and the server. The connection determination unit 13 reads the first threshold value corresponding to the information terminal 2 when determining whether or not the information terminal 2 can be connected, and when determining whether or not connection is possible for the server 3, the connection determination unit 13 sets the first threshold value corresponding to the server 3. read out. Then, the connection determination unit 13 compares the risk level RL calculated by the risk level calculation unit 12 with the first threshold value, determines that the connection is permitted if the connection condition is satisfied, and determines that the condition is not satisfied. Judge that connection is refused.

  Next, as shown in (iii) of FIG. 2, the connection control unit 14 notifies the information terminal 2 or the server 3 of the result of the connection possibility. Thereafter, the connection control unit 14 performs control to permit connection to the system 1 only to the information terminal 2 or the server 3 permitted to connect by this notification. The system 1 registers the information terminal ID or server ID and the connection date and time in the system connection state management table shown in FIG. 6 for the information terminal 2 or server 3 connected to the system 1. This system connection state management table is stored in the security management database 15, for example.

[Connection between information terminal and server]
Next, connection processing between the information terminal 2 permitted to connect to the system 1 and the server 3 will be described. First, as shown in (i) of FIG. 7, the information terminal 2 transmits to the system 1 a server connection request indicating that a connection to the server 3 to receive service provision is requested. This server connection request includes a service ID assigned to each service.

  Then, as shown in (ii) of the figure, the system 1 that has received this server connection request determines whether or not the information terminal 2 can be connected to the server 3 by the connection determination unit 13. In this determination, the connection policy management table and the second threshold management table stored in the connection policy database 16 are used.

  As shown in FIG. 8, the connection policy management table is for managing service IDs, connection policies, service URLs, firewall addresses, and service protocols in association with each other. The connection policy is an item that is set as a connection permission level for the information terminal by a service provider that provides the service. The service URL is an address for designating the service. The firewall address is an address of the firewall 32 in the server 3 that provides the service, and the service protocol is a protocol used when providing the service. As shown in FIG. 9, the second threshold management table associates the connection policy with the second threshold.

  The connection determination unit 13 reads out the second threshold value corresponding to the service ID included in the server connection information transmitted by the information terminal 2 using these tables, and calculates from the internal memory of the risk level calculation unit 12 first. The risk level RL of the information terminal 2 that has been read out is read and compared, and if the connection condition is satisfied, it is determined that the connection is permitted, and if the condition is not satisfied, it is determined that the connection is rejected.

  Next, as illustrated in (iii) of FIG. 7, the connection control unit 14 notifies the information terminal 2 and the server 3 of the result of whether connection is possible. At this time, an instruction is transmitted to the server 3 that is determined to be permitted to permit connection of the information terminal 2 toward the firewall 32. Thereafter, the information terminal 2 can communicate with the server 3. In this communication, the information terminal 2 may communicate directly with the server 3 via the network 4 or may communicate via the system 1. Further, communication between the information terminal 2 and the server 3 may be performed by redirection, or some token may be distributed to the information terminal 2.

  As described above, according to the present embodiment, the risk level is calculated based on the vulnerability level for each of the information terminal 2 of the user and the server 3 of the service provider. The information terminal 2 or the server 3 whose risk level does not satisfy the condition based on the first threshold value by comparing the first threshold value indicating the connection policy necessary for connection to the server to determine whether or not the connection to the system 1 is possible Rejects the connection to the system 1, thereby preventing the occurrence of damage due to the connection of the information terminal 2 or the server 3 having a low security level.

  According to the present embodiment, a second threshold value indicating a connection policy necessary for connection to the server 3 of the service provider is registered in the system 1, and the risk level and the second threshold value of the user information terminal 2 are registered. Are compared to determine whether the connection to the server 3 is possible or not, the information terminal 2 whose risk level does not satisfy the condition of the second threshold is rejected to connect to the server 3, and thereby information with a low security level It is possible to prevent damages such as unauthorized access and spoofing that can occur when the terminal 2 is connected to the server 3.

  According to the present embodiment, the longer the state where the vulnerability level is large, the lower the security level, so the risk level is defined by the sum of products of the vulnerability level and the elapsed time. The determination of availability can be made more accurate. If accuracy is not required for the risk level, the vulnerability level itself may be used instead of the product of the vulnerability level and the elapsed time.

It is a block diagram which shows the structure of the network connection control system in one Embodiment. It is a figure which shows the flow of the connection process to the network connection control system about an information terminal or a server. It is a figure which shows a vulnerability management table. It is a figure which shows a vulnerability master table. It is a figure which shows a 1st threshold value management table. It is a figure which shows a system connection state management table. It is a figure which shows the flow of the connection process between an information terminal and a server. It is a figure which shows a connection policy management table. It is a figure which shows a 2nd threshold value management table.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Network connection control system 2 ... Information terminal 3 ... Server 4 ... Network 11 ... Vulnerability management part 12 ... Risk level calculation part 13 ... Connection judgment part 14 ... Connection control part 15 ... Security management database 16 ... Connection policy database 32 ... Firewall

Claims (8)

A network connection control system connectable to a user information terminal and a service provider server via a network,
A database for storing a first threshold value indicating a connection policy necessary for connection to the system;
The information indicating the vulnerability level of the information terminal is received from the information terminal, the information indicating the vulnerability level of the server is received from the server, and the ID and the vulnerability level of the information terminal and the server are associated with each other. Vulnerability management means stored in the database;
A risk level calculation means for reading out the vulnerability level from the database, calculating the risk level based on the vulnerability level for each information terminal and server, and storing the risk level in a memory;
A connection determination unit that reads the risk level from the memory and reads the first threshold value from the database, compares the risk level with the first threshold value for each of the information terminal and the server, and determines whether or not connection to the system is possible;
A network connection control system comprising: A database for storing a second threshold indicating a connection policy necessary for connection to a server permitted to connect to the system;
A connection determination means for reading the risk level of the information terminal from the memory and reading the second threshold value from the database, comparing the risk level and the second threshold value to determine whether the information terminal can be connected to the server;
A notification means for notifying the information terminal of the connection possibility;
The network connection control system according to claim 1, further comprising: A network connection control system connectable to a user information terminal and a service provider server via a network,
A database for storing a second threshold value indicating a connection policy necessary for connection to the server;
Vulnerability management means for receiving information indicating the vulnerability level of the information terminal from the information terminal and associating the information terminal with the vulnerability level and storing the information in a database;
A risk level calculation means for reading the vulnerability level from the database, calculating the risk level of the information terminal based on the vulnerability level, and storing the risk level in a memory;
A connection determination means for reading the risk level from the memory and reading the second threshold value from the database and comparing the risk level with the second threshold value to determine whether the information terminal can be connected to the server;
A notification means for notifying the information terminal of the connection possibility;
A network connection control system comprising:   The risk level calculation means calculates the risk level by taking the sum of the number of vulnerabilities for the product of the vulnerability level and the elapsed time in the state of the vulnerability level. The network connection control system according to any one of 1 to 3. A network connection control method performed using a system connectable to a user information terminal and a service provider server via a network,
Storing a first threshold value indicating a connection policy necessary for connection to the system in a database;
The information indicating the vulnerability level of the information terminal is received from the information terminal, the information indicating the vulnerability level of the server is received from the server, and the vulnerability level is associated with each of the information terminal and the server and stored in the database. And steps to
Reading the vulnerability level from the database, calculating the risk level based on the vulnerability level for each information terminal and server, and storing the risk level in a memory;
Reading the risk level from the memory and reading the first threshold value from the database, comparing the risk level with the first threshold value for each of the information terminal and the server, and determining whether to connect to the system;
A network connection control method comprising: A network connection control method performed using a system connectable to a user information terminal and a service provider server via a network,
Storing a second threshold value indicating a connection policy required for connection to the server in a database;
Receiving information indicating the vulnerability level of the information terminal from the information terminal, associating the information terminal with the vulnerability level and storing the information in a database;
Reading the vulnerability level from the database, calculating the risk level of the information terminal based on the vulnerability level, and storing it in a memory;
Reading the risk level from the memory and reading the second threshold value from the database, comparing the risk level and the second threshold value to determine whether the information terminal can be connected to the server;
A step of notifying the information terminal of the connection possibility;
A network connection control method comprising: For a computer system that can be connected to a user information terminal and a service provider server via a network,
A process of storing in a database a first threshold value indicating a connection policy necessary for connection to the system;
Processing that receives information indicating the vulnerability level of the information terminal from the information terminal, receives information indicating the vulnerability level of the server from the server, and associates the vulnerability level with each of the information terminal and the server and stores them in the database When,
A process of reading the vulnerability level from the database, calculating the risk level based on the vulnerability level for each information terminal and server, and storing it in the memory,
A process of reading the risk level from the memory and reading the first threshold value from the database, comparing the risk level with the first threshold value for each of the information terminal and the server, and determining whether to connect to the system;
A network connection control program characterized in that For a computer system that can be connected to a user information terminal and a service provider server via a network,
Storing a second threshold value indicating a connection policy necessary for connection to the server in a database;
Receiving information indicating the vulnerability level of the information terminal from the information terminal, associating the information terminal with the vulnerability level, and storing the information in a database;
Processing for reading the vulnerability level from the database, calculating the risk level of the information terminal based on the vulnerability level, and storing it in the memory;
A process of reading the risk level from the memory and reading the second threshold value from the database, comparing the risk level with the second threshold value, and determining whether the information terminal can be connected to the server;
A process of notifying the information terminal of the possibility of connection;
A network connection control program characterized in that

Images