Apparatus and method to control transfer apparatuses depending on a type of an unauthorized communication occurring in a network

Patent metadata

Field	Value
Publication number	US-2017237733-A1
Application number	US-201715421703-A
Country	US
Kind code	A1
Filing date	Feb 1, 2017
Priority date	Feb 16, 2016
Publication date	Aug 17, 2017
Grant date	—

Abstract

An apparatus controls transfer apparatuses that transfer a packet transmitted and received by terminals in a network. Upon receiving detection information notified from a server that detects unauthorized communication of a terminal by using the packet, the apparatus identifies the terminal and a type of the unauthorized communication, based on the detection information. The apparatus determines a transfer apparatus to be controlled, by referencing first information that stores information identifying the transfer apparatus in association with the terminal, and determines a control to be performed on the transfer apparatus by referencing second information that stores information on the control in association with the type of the unauthorized communication. The apparatus reads a control command corresponding to the control from third information that stores the control command in association with a type of the transfer apparatus, and transmits a control packet including the control command to the transfer apparatus.

First claim

What is claimed is:

1 . A non-transitory, computer-readable recording medium having stored therein a program for causing a computer included in a control apparatus to execute a process, the control apparatus being configured to control transfer apparatuses that transfer a packet transmitted and received by a plurality of communication terminals in a communication network, the process comprising:
receiving detection information notified from a detection server that detects unauthorized communication of a communication terminal by using the packet; identifying the communication terminal and a type of the unauthorized communication, based on the detection information; determining at least one transfer apparatus to be controlled, by referencing first information that stores information identifying the at least one transfer apparatus in association with the first communication terminal; determining a control to be performed on the at least one transfer apparatus by referencing second information that stores information on the control in association with the type of the unauthorized communication; and reading a first control command corresponding to the control from third information that stores the first control command in association with each type of the at least one transfer apparatus, and transmitting a control packet including the first control command to each of the at least one transfer apparatus.

2 . The non-transitory, computer-readable recording medium of claim 1 , the process further comprising:
upon receiving a release request for requesting release of the control for the first communication terminal, generating a second control command that is to be applied to each of the at least one transfer apparatus when the control is released, by referencing the third information, and transmitting a control packet including the second control command to each of the at least one transfer apparatus.

3 . The non-transitory, computer-readable recording medium of claim 1 , wherein
the detection information is selected as one of a notification e-mail that notifies information on the communication terminal and the type of the unauthorized communication, history information indicating a history of communication performed by the communication terminal, and control information that notifies information on the communication terminal and the type of the unauthorized communication.

4 . The non-transitory, computer-readable recording medium of claim 3 , the process further comprising:
providing a first template that specifies an area used for notifying the type of the unauthorized communication and the communication terminal from a character string included in the notification e-mail, a second template that specifies an area used for notifying the type of the unauthorized communication and the communication terminal from the history information, and a third template that specifies an area used for notifying the type of the unauthorized communication and the communication terminal from the control information; upon receiving the notification e-mail, extracting, from the received notification e-mail, the type of the unauthorized communication and information on the communication terminal by using the first template; upon receiving the history information, extracting, from the received history information, the type of the unauthorized communication and information on the communication terminal by using the second template; and upon receiving the control information, extracting, from the received control information, the type of the unauthorized communication and information on the communication terminal by using the third template.

5 . The non-transitory, computer-readable recording medium of claim 1 , the process further comprising:
providing, as the first information and the second information, an execution table that specifies information to be referenced by the program, wherein the execution table stores, in association with a combination of a communication terminal in the plurality of communication terminals and the type of the unauthorized communication, information on the at least one transfer apparatus that is to be controlled when the combination is notified from the detection server, and information on the control to be performed on the at least one transfer apparatus.

6 . An apparatus to control transfer apparatuses that transfer packets transmitted and received by a plurality of communication terminals in a communication network, the apparatus comprising:
a processor configured to:
receive detection information notified from a detection server that detects unauthorized communication of a communication terminal by using the packets,
identify the communication terminal and a type of the unauthorized communication, based on the detection information,
determine at least one transfer apparatus to be controlled, by referencing first information that stores information identifying the at least one transfer apparatus in association with the communication terminal,
determine a control to be performed on the at least one transfer apparatus by referencing second information that stores information on the control in association with the type of the unauthorized communication, and
read a first control command corresponding to the control from third information that stores the first control command in association with each type of the at least one transfer apparatus, and transmit a control packet including the first control command to each of the at least one transfer apparatus; and
a memory coupled to the processor and configured to store the first information, the second information, and the third information.

7 . The apparatus of claim 6 , wherein
the processor is further configured to, upon receiving a release request for requesting release of the control for the communication terminal, generate a second control command that is to be applied to each of the at least one transfer apparatus when the control is released, by referencing the third information, and transmit a control packet including the second control command to each of the at least one transfer apparatus.

8 . The apparatus of claim 6 , wherein
the processor is configured to receive the detection information in a form selected as one of a notification e-mail that notifies information on the communication terminal and the type of the unauthorized communication, history information indicating a history of communication performed by the communication terminal, and control information that notifies information on the communication terminal and the type of the unauthorized communication.

9 . The apparatus of claim 8 , wherein
the memory is configured to store a first template that specifies an area used for notifying the type of the unauthorized communication and the communication terminal from a character string included in the notification e-mail, a second template that specifies an area used for notifying the type of the unauthorized communication and the communication terminal from the history information, and a third template that specifies an area used for notifying the type of the unauthorized communication and the communication terminal from the control information; and the processor is configured to:
upon receiving the notification e-mail, extract, from the received notification e-mail, the type of the unauthorized communication and information on the communication terminal by using the first template,
upon receiving the history information, extract, from the received history information, the type of the unauthorized communication and information on the communication terminal by using the second template, and
upon receiving the control informatio

Assignees

• Fujitsu Ltd

Inventors

• Osaki Hiroyasu
• Shimazaki Takahiro
• Mayumi Hidehiko
• Matsuoka Shu
• Okamura Takashi
• Okajima Mitsuru

Classifications

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• H04L51/24

  Electricity · mapped topic

• H04L51/216 Primary

  Handling conversation history, e.g. grouping of messages in sessions or threads · CPC title