Patent ID: 9319429
Filing Date: 2016-04-19
CPC Classification: H04L

Claim Text:
1. A network quarantine system, comprising: a quarantine agent mounted to a terminal comprising a normal operation implementation unit that performs operation processing by using an operation network, which judges whether or not the normal operation implementation unit satisfies a policy that is a security basis restricted in advance in the operation network; a relay device connected between the terminal and the operation network, which allows the terminal to connect to the operation network based on a result of judgment when the quarantine agent judges that the terminal satisfies the policy; and a quarantine server which controls actions of the relay device, wherein: the quarantine server comprises a quarantine server control unit which functions when judged by the quarantine agent that the normal operation implementation unit of the terminal satisfies the policy to transmit a connection permission notification containing a connection identifier for the operation network to the terminal and gives an instruction to the relay device to destroy information to which the connection identifier is not added as unrelated information; the quarantine agent of the terminal comprises a VLAN tag operation unit which gives an instruction regarding an adding action of the normal operation implementation unit of the terminal to add the connection identifier every time when transmitting transmission information based on the connection permission notification transmitted from the quarantine server; and the relay device and the quarantine server cooperate to destroy the information and immediately block the terminal from the operation network without keeping the terminal in a state of being connected to the operation network, even when the terminal is judged to satisfy the policy by the quarantine agent and is connected to the operation network, and then the quarantine agent is uninstalled in an unauthorized manner.