Patent ID: 8732469
Filing Date: 2014-05-20
Classification: G06F,H04L

Abstract:
1. A communication cutoff device comprising: a communication cutoff unit to cut off at least a part of communications performed by an information processing device; a redirect unit to make said information processing device establish a logical connection, to a server device, for a determining process of determining whether an environment of said information processing device satisfies predetermined conditions or not; a cancel permission detecting unit to, when said information processing device receives from said server device a piece of cutoff cancel permission information indicating that the environment of said information processing device satisfies the predetermined conditions as a result of the determining process via the logical connection which is established between the server device and the information processing device for the determining process, detect that said information processing device receives the piece of cutoff cancel permission information through the part of communications with said information processing device; a cutoff canceling unit to, when said cancel permission detecting unit detects that said information processing device receives the piece of cutoff cancel permission information, cancel the cutoff by said communication cutoff unit; an authentication information receiving unit to receive, from said information processing device, authentication information transmitted from said server device to said information processing device via the logical connection for the determining process; an authenticating unit to authenticate said server device based on information contained in the authentication information received by said authentication information receiving unit; and a challenge transmitting unit to transmit challenge information for authenticating said server device to said information processing device to thereby forward the challenge information to said server device from said information processing device, wherein said cutoff canceling unit determines, when said authenticating unit authenticates said server device, that said information processing device receives the piece of cutoff cancel permission information from a valid server device, and thus cancels the cutoff, said authentication information receiving unit receives, from said information processing device, the authentication information generated based on the challenge information by said server device in a way that uses a predetermined encryption key and transmitted to said information processing device via the logical connection for the determining process, and said authenticating unit collates the challenge information extracted from the received authentication information by use of a decryption key corresponding to the predetermined encryption key with the challenge information transmitted by said challenge transmitting unit and, if coincident with each other, authenticates said server device as the valid server device.