Patent ID: 8082579
Filing Date: 2011-12-20
Classification: H04L

Abstract:
1. An access server in a network system including an authentication server, a first server or a first communication apparatus to perform a first access restriction or not to perform the access restriction to an access from a user terminal to a site, a second server or a second communication apparatus to perform a second access restriction which is different from the first access restriction to the access from the user terminal to the site, and the access server, the access server comprising: a plurality of ports for connection with the user terminal, the authentication server, the first server and/or the first communication apparatus, and the second server and/or the second communication apparatus; a port conversion unit to change, according to time information which are set in advance in the authentication server and which are received from the authentication server when performing a user authentication with the authentication server, an output destination port of a packet from the user terminal to one of the port to which the first server or the first communication apparatus is connected and the port to which the second server or the second communication apparatus is connected; a filtering unit to perform filtering on the port to which the user terminal is connected; an authentication processing unit to perform a process for authentication of the user terminal by communicating with the authentication server; and a memory to store port change setting information to indicate whether port change is performed for the user terminal, one or plural port change times for changing the output destination port of the packet, filtering setting information to indicate whether filtering is performed for the user terminal, a filtering start time and a filtering end time correspondingly to a user identifier, wherein the authentication processing unit transmits an authentication request to the authentication server when an access is made from the user terminal, receives an authentication packet including an authentication result, the port change setting information, the port change time for changing the output destination port of the packet, the filtering setting information and a filtering time from the authentication server, the authentication processing unit stores the port change setting information, the port change time for changing the output destination port of the packet, the filtering setting information, the filtering start time and the filtering end time included in the authentication packet into the memory correspondingly to the user identifier, the port conversion unit refers to the memory, and in a case where the port change setting information is set to perform the port change on an arbitrary user identifier, when it becomes the corresponding port change time, the port conversion unit changes an output destination of a packet from the user terminal of the user identifier, and the filtering unit refers to the memory, and in a case where the filtering setting information for an arbitrary user identifier is set to perform the filtering, when it becomes the corresponding filtering start time, the filtering unit performs the filtering on the port to which the user identifier is connected.