Patent ID: 7761542

Claim:
A network access control method for a network system comprising: network apparatuses having packet filtering functions; a service server connected with an IP network via the network apparatus, providing contents on the service server to a user; a user terminal connected with the IP network via the network apparatus, for the user to utilize the contents on the service server; a reception server connected with the IP network via the network apparatus, receiving an access request to the contents on the service server from the user on behalf of the service server; and an access control server controlling the network apparatus for a limitation of the access request to the contents on the service server, said method comprising the steps of: a) said access control server first denying all the access requests directed to the contents on the service server via the network apparatus; b) said reception server receiving access request information to the contents on the service server from said user terminals, and registering the received access request information in an access list; and c) said access control server extracting such an amount of the received access request information from said access list, based on a processing capability of the service server and a traffic amount for the service server, as that said service server can optimally deal with, and performing traffic control to the network apparatus connected with the user terminals so as to allow the user terminals to directly access the contents on the service server in the other of access requests, wherein said access control server comprises: an access information database holding information concerning the processing capability of the service server and a maximum permissible access number calculated based on the processing capability of the service server; a traffic control part controlling the network apparatus; a static permissible access number calculating part calculating the maximum permissible access number based on the information concerning the processing capability of the service server; a filtering optimizing part reading such an amount of the access request information from the access list holding the access request information from the user terminals in the reception server, from the top, as that for the maximum permissible access number, producing packet filtering setting information for the users making access requests to be able to access to the service server, and setting the produced information in the network apparatus via said traffic control part; an effective timer setting part setting an effective timer for the access request information when the packet filtering setting information is produced; and a filtering canceling part canceling the packet filtering control set in the network apparatus, when the effective timer has expired.