Patent ID: 8359464
Filing Date: 2013-01-22
Classification: G06F,H04L

Abstract:
1. A quarantine method for allowing a client terminal to connect to a user network, said method comprising: an authentication apparatus recognizing that a communication means of the client terminal has been activated, wherein the authentication apparatus is directly connected to a quarantine network, to the user network, and to the client terminal; responsive to said recognizing, said authentication apparatus confirming a common certificate for the client terminal; after said confirming the common certificate, a Dynamic Host Configuration Protocol (DHCP) server providing an Internet Protocol (IP) address to the client terminal to enable the client terminal to log in to the quarantine network; after said providing the IP address, connecting the client terminal to the quarantine network; responsive to the client terminal having connected to the quarantine network, a first authentication server security checking the client terminal to determine whether each check item of a plurality of check items has a violation; if said security checking determines that at least one check item of the plurality of check items has a violation then for each check item having a violation as determined via said security checking, said security checking further comprising a security measure server performing a security measure to improve the check item with respect to the violation; and after said security checking the client terminal, allowing the client terminal to connect to the user network, said allowing comprising a second authentication server confirming a user certificate for the client terminal followed by said second authentication server storing the user certificate in the client terminal; wherein a quarantine apparatus comprises the quarantine network, the user network, the security measure server, the first authentication server, the DHCP server, and the second authentication server; wherein the security measure server, the DHCP server, and the first authentication server are each directly connected to the quarantine network; wherein the second authentication server and the DHCP server are each directly connected to the user network; wherein the user network is disposed between the DHCP server and the authentication apparatus on a connection path that connects the DHCP server to the authentication apparatus; and wherein the security measure server, the DHCP server, the first authentication server, and the second authentication server are physically distinct hardware servers.