Source: http://www.google.com/patents/US7761542?dq=6377161
Timestamp: 2015-05-04 02:44:54
Document Index: 801216147

Matched Legal Cases: ['art 110', 'art 103', 'art 110', 'art 103', 'art 210', 'art 210', 'art 203', 'art 203', 'art 210', 'art 210', 'art 210', 'art 210', 'art 201', 'art 210', 'art 210']

Patent US7761542 - Network access control method, network system using the method and ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inAdvanced Patent SearchPatentsA network access control method for a network system comprising network apparatuses having a packet filtering function, a service server connected with an IP network via the network apparatus, providing a service to a user, a user terminal connected with the IP network via the network apparatus, for...http://www.google.com/patents/US7761542?utm_source=gb-gplus-sharePatent US7761542 - Network access control method, network system using the method and apparatuses configuring the systemAdvanced Patent SearchPublication numberUS7761542 B2Publication typeGrantApplication numberUS 09/817,303Publication dateJul 20, 2010Filing dateMar 26, 2001Priority dateOct 30, 2000Fee statusPaidAlso published asUS20020053029Publication number09817303, 817303, US 7761542 B2, US 7761542B2, US-B2-7761542, US7761542 B2, US7761542B2InventorsKatsuichi Nakamura, Shinya Yamamura, Yoshiharu SatoOriginal AssigneeFujitsu LimitedExport CitationBiBTeX, EndNote, RefManPatent Citations (6), Referenced by (4), Classifications (11), Legal Events (3) External Links: USPTO, USPTO Assignment, EspacenetNetwork access control method, network system using the method and apparatuses configuring the system
The processing capability data is of a form of a data table (for example, including data of CPU type, loaded memory size, and so forth) indicating the processing capability of the service server 300, and each data is expressed by percentage. For example, in a case of high-speed CPU, data �150� is set, and, an initial permissible access number is multiplied by 1.5, and thus, the maximum permissible access number to be set is obtained. In a case of low-speed CPU, data �50� is set, and, the initial permissible access number is multiplied by 0.5, and thus, the maximum permissible access number to be set is obtained.
The service provider registers the information thus informed by the site in the access information DB 209 shown in FIG. 12, and, then, issues a URL such as �http://service. request. com� to the site. The site having had the URL issued publishes this URL together with an effective period of this URL (period of the contract for the reception proxy service) to general users.
Thereby, after the time of beginning of the reception proxy service, users cannot directly access �http://service. com�, and, only access via �http://service. request. com� is effective for this site.
The user inputs �http://service. request. com� via the user terminal 51 or 52 using an Internet browser, and accesses the reception proxy center. The reception proxy center transfers the request to any server of the load distributing servers 120 using a conventional system for server load distribution.
The reception server 100 receives the http protocol via the access receiving part 110, and transfers the information to the access registering part 103. The access receiving part 110 is specifically a server application prepared only for reception, and is described by a script language such as html, Java, or the like. Through this application, the access request information such as that shown in FIG. 16 is extracted, and the information is transferred to the access registering part 103 via inter-process communication. At a time of initial access, that is, at a time of access to �http://service. request. com�, an access request is set by request type.
FIG. 22 shows a message structure of the above-mentioned filtering command execution request. The filtering command execution request includes the IP address of the network apparatus which executes the filtering and a filtering command field. In the filtering command field, a command in executable level is set such as �ipchains-s 100. 100. 200. 10-d 100. 100. 400. 100.-p http-j DENY� when unallowance is set for access from the user terminal 51 (100. 100. 200. 10) to the service server 300 (100. 100. 400. 100) through WWW (http).
FIG. 23 shows a flow chart for illustrating processing performed by the traffic control part 210 in detail. The traffic control part 210 first opens a communication port by using Telnet or the like for the IP address of the input filtering command execution request, in a step S2101. Then, in a step S2102, through the thus-opened communication port, the filtering command of the input filtering command execution request is executed. In this case, as a result of the filtering command being executed, the user can directly access �http://service com�.
An example of processing of canceling access allowance for the user to access �http://service. com� will now be described.
FIG. 24 shows a flow chart for illustrating processing performed by the effective timer setting part 203 in detail. The effective timer setting part 203 extracts the effective timer value for the destination IP address and destination port number of the input effective timer setting request, from the access information DB 209, in a step S2031. Then, in a step S2032, it is determined whether the request type of the input effective timer setting request is �priority control ON (existence)� or �priority control OFF (absence)�. In this case, it is assumed that �priority control OFF� is set, then, a step S2033 is performed.
Then, in a step S2025, the filtering command for canceling the access allowance corresponding to the packet filtering function type is produced. In a step S2026, the thus-produced filtering command and the IP address of the network extracted in the step S2023 are set into the filtering command execution request shown in FIG. 22. Then, control by the traffic control part 210 is performed. Then, as a result of the traffic control part 210 executing the filtering command canceling the access allowance, the user comes to not be able to access �http://service. com� directly.
Then, in a step S2083, the filtering command corresponding to the packet filtering function type for canceling the access allowance is produced. Then, in a step S2084, the produced canceling filtering command and the IP address of the network apparatus extracted in the step S2081 are set in the filtering command execution request shown in FIG. 22, and, then, control by the traffic control part 210 is performed. Thereby, as a result of the traffic control part 210 executing the filtering command canceling the access allowance, the user comes to not be able to access �http://service. com� directly.
In the step S2053, from the control information DB 211, the reading ratio for the destination IP address and destination port number of the input filtering request is extracted. For example, when the reading ratio is �3:2:1�, the access request information is read from the high-priority list at a ratio of 1/2, from the medium-priority list at a ratio of 1/3 and from the low-priority list at a ratio of 1/6, from the access list 109.
As described in the item (1) of clause A above, the service provider issues the URL such as �http://service. request. com� for the service server 300 which provides services, to the site. Then, the site which has had the URL issued publishes this URL to general users together with the effective period (contract period of the reception proxy service).
In FIG. 39, the access unallowance filtering setting part 201 extracts, from the access information DB 209, the IP address and packet filtering function type of the network apparatus for the destination IP address of the thus-input filtering request, in a step S2011. Then, in a step S2012, the unallowance filtering command corresponding to the packet filtering function type is produced. In a step S2013, the produced unallowance filtering command and the IP address of the network apparatus extracted in the step S2011 are set in the filtering command execution request shown in FIG. 22, and, then, control by the traffic control part 210 is performed therefor. As a result of the traffic control part 210 executing the unallowance filtering command, the user comes to not be able to access �http://service. com� directly.
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS5941947 *Aug 18, 1995Aug 24, 1999Microsoft CorporationSystem and method for controlling access to data entities in a computer networkUS20020188720 *Dec 28, 1998Dec 12, 2002William F. TerrellMethod and apparatus for dynamically controlling the provision of differentiated servicesEP0393293A1Apr 21, 1989Oct 24, 1990International Business Machines CorporationMethod and apparatus for cyclic reservation multiple access in a communications systemJPH0716200A Title not availableJPH05316115A Title not availableJPH06152615A Title not available* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS8387858 *May 18, 2010Mar 5, 2013Synderesis Technologies, Inc.Consumer rewards systems and methodsUS8930491 *Jan 18, 2012Jan 6, 2015Echostar Technologies L.L.C.Apparatus, systems and methods for providing edge cached media content to media devices based on user historyUS20100301113 *May 18, 2010Dec 2, 2010Robert William BohnConsumer rewards systems and methodsUS20130185382 *Jan 18, 2012Jul 18, 2013Echostar Technologies L.L.C.Apparatus, systems and methods for providing edge cached media content to media devices based on user history* Cited by examinerClassifications U.S. Classification709/223, 705/16, 709/225, 709/224International ClassificationG06F15/173, H04L29/06, G06F15/00Cooperative ClassificationH04L29/0602, G06Q20/20European ClassificationG06Q20/20, H04L29/06CLegal EventsDateCodeEventDescriptionDec 27, 2013FPAYFee paymentYear of fee payment: 4Aug 3, 2001ASAssignmentOwner name: FUJITSU LIMITED, JAPANFree format text: CORRECTIVE ASSIGNMENT TO CORRECT THE NAME OF THE ASSIGNOR, FILED ON 3-26-2001 RECORDED ON REEL 011654 FRAME 0878;ASSIGNORS:NAKAMURA, KATSUICHI;YAMAMURA, SHINYA;SATO, YOSHIHARU;REEL/FRAME:011883/0001Effective date: 20010315Owner name: FUJITSU LIMITED,JAPANFree format text: CORRECTIVE ASSIGNMENT TO CORRECT THE NAME OF THE ASSIGNOR, FILED ON 3-26-2001 RECORDED ON REEL 011654 FRAME 0878 ASSIGNOR HEREBY CONFIRMS THE ASSIGNMENT OF THE ENTIRE INTEREST;ASSIGNORS:NAKAMURA, KATSUICHI;YAMAMURA, SHINYA;SATO, YOSHIHARU;REEL/FRAME:11883/1Free format text: CORRECTIVE ASSIGNMENT TO CORRECT THE NAME OF THE ASSIGNOR, FILED ON 3-26-2001 RECORDED ON REEL 011654 FRAME 0878 ASSIGNOR HEREBY CONFIRMS THE ASSIGNMENT OF THE ENTIRE INTEREST;ASSIGNORS:NAKAMURA, KATSUICHI;YAMAMURA, SHINYA;SATO, YOSHIHARU;REEL/FRAME:011883/0001Owner name: FUJITSU LIMITED,JAPANFree format text: CORRECTIVE ASSIGNMENT TO CORRECT THE NAME OF THE ASSIGNOR, FILED ON 3-26-2001 RECORDED ON REEL 011654 FRAME 0878 ASSIGNOR HEREBY CONFIRMS THE ASSIGNMENT OF THE ENTIRE INTEREST;ASSIGNORS:NAKAMURA, KATSUICHI;YAMAMURA, SHINYA;SATO, YOSHIHARU;REEL/FRAME:11883/1Effective date: 20010315Owner name: FUJITSU LIMITED, JAPANFree format text: CORRECTIVE ASSIGNMENT TO CORRECT THE NAME OF THE ASSIGNOR, FILED ON 3-26-2001 RECORDED ON REEL 011654 FRAME 0878 ASSIGNOR HEREBY CONFIRMS THE ASSIGNMENT OF THE ENTIRE INTEREST;ASSIGNORS:NAKAMURA, KATSUICHI;YAMAMURA, SHINYA;SATO, YOSHIHARU;REEL/FRAME:011883/0001Effective date: 20010315Mar 26, 2001ASAssignmentOwner name: FUJITSU LIMITED, JAPANFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:NAKAMURA, KATSUICHI;ASADA, KANO;SATO, YOSHIHARU;REEL/FRAME:011654/0878Effective date: 20010315Owner name: FUJITSU LIMITED,JAPANFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:NAKAMURA, KATSUICHI;ASADA, KANO;SATO, YOSHIHARU;REEL/FRAME:11654/878Owner name: FUJITSU LIMITED,JAPANFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:NAKAMURA, KATSUICHI;ASADA, KANO;SATO, YOSHIHARU;REEL/FRAME:11654/878Effective date: 20010315RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services