Patent ID: 7681236
Filing Date: 2010-03-16
Classification: H04L

Abstract:
1. An unauthorized access prevention system which resides within a user's communication network the unauthorized access prevention system comprising: a traffic recording unit for recording information on traffic that flows into the user's communication network and arrives in a customer site; a search unit for searching, from the information recorded in the traffic recording unit, the flowing-in path of unauthorized access, which is transmitted from a transmitter and is included in the traffic, to services disclosed from the customer site to other communication networks adjacent to the user's communication network via the user's communication network; a determination unit for determining a plurality of countermeasure implementation planning places from among a plurality of places, which include the other communication networks, edge routers of the user's communication network each of which is arranged on each border of the other communication networks, and POP (point of presence) edge routers within the user's communication network, the plurality of places being for protecting the services from the unauthorized access based on a result of the search; and a notification unit for notifying at least one or more notified parties, which include other unauthorized access prevention systems each of which resides within the other communication networks, the edge routers of the user's communication network, and the POP edge routers within the user's communication network, of the determination of the countermeasure implementation planning places, when the determination unit determines the notified parties as the countermeasure implementation planning places for a reason that the unauthorized access was flowed into the user's communication network, wherein: the notification unit notifies the other unauthorized access prevention systems of the determination when the determination unit determines the other communication networks as the countermeasure implementation planning places, and the notification unit notifies the edge routers or the POP edge routers of the determination when the other communication networks do not have a reliable relationship with the users' communication network even if the determination unit determines the other communication networks as the countermeasure implementation planning places.