JP2003167850A - Terminal monitoring and controlling system and method, and program for executing method in computer - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To efficiently prevent the illegal access demand and to actively institute sanctions to an illegal access demander as the case may be. <P>SOLUTION: When the access demand is performed to a server 10 from an access demander node 20, the server 10 sends an agent 24 to the access demander node 20, so that the agent 23 acquires the access demander node information, transmits the same to the server 10, and performs the authentication on the basis of the information, and the sanctions are given to the access demander node 20 through the agent 24. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a terminal monitoring control system, a terminal monitoring control method, and a terminal monitoring control system for monitoring and controlling a terminal device that is connected to a server device that provides a service via a network and requests a service to the server device. Regarding a program that causes a computer to execute the method, in particular, a terminal monitoring control system and a terminal monitoring control that can efficiently prevent unauthorized access requests and, in some cases, actively impose sanctions on unauthorized access requesters The present invention relates to a method and a program that causes a computer to execute the method.

[0002]

2. Description of the Related Art With the recent development of network technology, the WWW (World Wide Web) of the Internet has become widespread, and various sites have been established on the Internet. In addition to the sites that can request access, there are sites where only pre-registered members can request access.

In such member-type sites, it is often the case that a user account and password are given to the member in advance, and whether or not the user is a legitimate member is authenticated by this user account and password.

[0004]

However, even if the authentication technique using the user account and password is used, if these are illegally stolen by sniffing or password analysis, it is determined whether the member is a valid member. There is a problem that it cannot be determined.

Further, at these sites, the access request is permitted without knowing what kind of terminal device is used and in what route the access request is made.
Unauthorized access requests keep up. In particular, even if it is determined that the request is an unauthorized access request, since the other party cannot be identified in many cases, it is the current situation that appropriate countermeasures for fundamentally blocking the unauthorized access request and attack cannot be taken.

It is also possible to use a firewall or intrusion detection software to take passive countermeasures such as stopping access requests to unauthorized access requesters and sending warning messages. Even if the above measures are taken, it is not possible to impose sanctions on an unauthorized access requester, so there is a high possibility that a new unauthorized access request will be made thereafter, and this is not a fundamental solution.

The present invention has been made in order to solve the above-mentioned problems of the prior art, can effectively prevent an unauthorized access request, and in some cases actively sanctions an unauthorized access requester. It is an object of the present invention to provide a terminal monitoring control system, a terminal monitoring control method, and a program that causes a computer to execute the method.

[0008]

[Means for Solving the Problems]
In order to achieve the object, the terminal monitoring control system according to the invention of claim 1 has a network (corresponding to the network 50 shown in FIG. 2) in a server device (corresponding to the server 10 shown in FIG. 2) that provides a service. A terminal monitoring control system for monitoring and controlling a terminal device (corresponding to the access requester nodes 20 to 40 shown in FIG. 2) connected via the server and requesting a service to the server device,
When the server device receives an access request from the terminal device, the server device transmits an agent that at least acquires information about the terminal device and transmits the acquired information to the server device (see FIG. 2). (Corresponding to the agent transmitting unit 14) and a determining unit (corresponding to the authentication processing unit 16 shown in FIG. 2) for determining whether or not to permit the service provision to the user based on the information on the terminal device received from the agent. And are provided.

According to the invention of claim 1, when the server device receives an access request from the terminal device, an agent that at least performs acquisition of information related to the terminal device and transmission of the acquired information to the server device. Since it is decided to permit or prohibit the service provision to the user based on the information about the terminal device received from the agent executed on the terminal device, it is possible to efficiently prevent the unauthorized access request.

Further, in the terminal monitoring control system according to the invention of claim 2, in the invention of claim 1, the agent transmitting means transmits an agent which is a program executable on the terminal device, Executes the agent received from the server device.

According to the second aspect of the present invention, an agent consisting of a program executable on the terminal device is transmitted, and this terminal device executes the agent accepted from the server device. Agents can be realized by

Further, a terminal monitoring control system according to a third aspect of the present invention is characterized in that, in the first aspect of the invention, the agent transmitting means transmits an agent capable of executing autonomously on the terminal device. To do.

According to the third aspect of the present invention, the agent which can be executed autonomously is transmitted on the terminal device. Therefore, if the agent is realized by an agent-oriented programming language such as Telescript, the terminal device can be realized. The agent can function without performing the execution operation in.

Further, in the terminal monitoring control system according to the invention of claim 4, in the invention of claim 1, 2 or 3, the agent transmitting means obtains information relating to a user of the terminal device and the obtained information. Is transmitted to the server device and an agent for disconnecting the communication is transmitted in response to an instruction from the server.

According to the fourth aspect of the present invention, the agent for disconnecting communication in response to an instruction from the server to obtain information about the user of the terminal device, to transmit the obtained information to the server device, and to send the information is transmitted. Since it is decided to do so, the unauthorized access request can be forcibly disconnected.

Further, a terminal monitoring control system according to a fifth aspect of the present invention is the terminal monitoring control system according to the first, second or third aspect of the invention, wherein the agent transmitting means obtains information relating to the terminal device and a server device of the obtained information. To an agent for controlling the operation of the terminal device in response to a transmission to the terminal and an instruction from the server.

According to the invention of claim 5, the agent for controlling the operation of the terminal device is transmitted in response to the acquisition of the information related to the terminal device, the transmission of the acquired information to the server device and the instruction from the server. As a result, it is possible to actively impose sanctions on an unauthorized access requester.

Further, in the terminal monitoring control system according to the invention of claim 6, in the invention of claims 1 to 5, the agent transmitting means selects a new agent key each time an access request is made from the terminal device. The agent having the agent key is transmitted, and the determining means
It is characterized in that whether or not to permit service provision to the user is determined based on the agent key received from the agent.

According to the invention of claim 6, a new agent key is selected each time an access request is issued from the terminal device, an agent having the agent key is transmitted, and the agent key is accepted based on the agent key received from the agent. Since it is determined whether or not to provide the service to the user, it is possible to efficiently prevent the abuse due to the modification of the agent.

According to a seventh aspect of the present invention, there is provided a terminal monitoring control method for monitoring and controlling a terminal device which is connected to a server device which provides a service via a network and requests a service to the server device. A method for transmitting an agent for at least acquiring information about the terminal device and transmitting the acquired information to the server device when the server device receives an access request from the terminal device, ,
A determination step of determining whether or not to permit service provision to the user based on the information on the terminal device received from the agent.

According to the invention of claim 7, when the server device receives an access request from the terminal device, the agent at least performs acquisition of information related to the terminal device and transmission of the acquired information to the server device. Since it is decided to permit or prohibit the service provision to the user based on the information about the terminal device received from the agent executed on the terminal device, it is possible to efficiently prevent the unauthorized access request.

Further, in the terminal monitoring control method according to the invention of claim 8, in the invention of claim 7, the agent transmitting step acquires the information related to the user of the terminal device, and sends the acquired information to the server device. Is transmitted and an agent for disconnecting the communication is transmitted in response to an instruction from the server.

According to the invention of claim 8, the agent for disconnecting the communication in response to an instruction from the server and the acquisition of the information related to the user of the terminal device is transmitted to the server device. Since it is decided to do so, the unauthorized access request can be forcibly disconnected.

Further, in the terminal monitoring control method according to the invention of claim 9, in the invention of claim 7 or 8, the agent transmitting step selects a new agent key each time an access request is made from the terminal device. The agent having the agent key is transmitted, and the determination step includes
It is characterized in that whether or not to permit service provision to the user is determined based on the agent key received from the agent.

According to the invention of claim 9, a new agent key is selected each time an access request is made from the terminal device, an agent having the agent key is transmitted, and the agent key is accepted based on the agent key received from the agent. Since it is determined whether or not to provide the service to the user, it is possible to efficiently prevent the abuse due to the modification of the agent.

The terminal monitoring control method according to the invention of claim 10 is a terminal monitoring control for monitoring and controlling a terminal device which is connected to a server device which provides a service via a network and requests a service from the server device. A program for causing a computer to execute the method, comprising: an agent that, when the server device receives an access request from the terminal device, acquires at least information related to the terminal device and transmits the acquired information to the server device. It is characterized in that the computer is made to execute an agent sending step of sending and a judging step of judging whether or not to permit the service provision to the user based on the information related to the terminal device received from the agent.

According to the tenth aspect of the invention, when the server device receives the access request from the terminal device, the agent at least performs the acquisition of the information related to the terminal device and the transmission of the acquired information to the server device. Since it is decided to permit or prohibit the service provision to the user based on the information about the terminal device received from the agent executed on the terminal device, it is possible to efficiently prevent the unauthorized access request.

[0028]

BEST MODE FOR CARRYING OUT THE INVENTION Preferred embodiments of a terminal monitoring control system, a terminal monitoring control method, and a program for causing a computer to execute the method will be described in detail below with reference to the accompanying drawings.

(Embodiment 1) First, the concept of the terminal supervisory control system according to Embodiment 1 will be described. FIG. 1 is an explanatory diagram for explaining the concept of the terminal monitoring control system according to the first embodiment.

As shown in the figure, in this terminal monitoring control system, when performing the authentication process between the server 10 and the access requester node 20 which is a terminal device requesting access to the server 10 via the network. , Server 1
The agent 24 is installed (sent) from 0 to the access requester node 20.

Upon receiving the agent 24 from the server 10, the access requester node 20 executes the agent 24 as a process.

Thereafter, the agent 24 operates the operating system (O) of the access requester node 20.
S) performs inter-process communication to collect information related to the access requester node 20 and transmits the information to the server 10. As a result, the server 10 causes the server 10 to access the access requester node 2
It is possible to acquire information related to 0.

Here, since the information relating to the access requester node 20 includes the serial number and the IP address given by the access requester node 20 when the system is registered, the server 10 determines that the access requester node 20 is the access requester node 20. Authentication processing is performed using the information related to the node 20.

The agent 24 always monitors the access requester node 20 even after the completion of this authentication process, and confirms whether the access requester behaves in violation of the established rules. Then, when the access requester takes an action that violates the regulations, sanctions such as disconnection of communication and remote control of the access requester node are performed.

Next, the system configuration of the terminal monitoring control system according to the first embodiment will be described. FIG. 2 is a functional block diagram showing the system configuration of the terminal monitoring control system according to the first embodiment. As shown in the figure, this terminal monitoring control system has a configuration in which the server 10 and the access requester nodes 20 to 40 are connected via the Internet 50.

The server 10 is a member-only server 10 that provides homepages via the WWW, which is a distributed system on the Internet, and does not permit access requests other than those of members. When the user becomes a member, the MAC address, OS, domain name, IP address, etc. of the device are registered.

This server 10 has an interface section 11
The storage unit 12, the HTTP server processing unit 13, the agent transmission unit 14, the agent control unit 15, and the authentication processing unit 16 are included.

The interface unit 11 is a network interface for performing data communication with each of the access requester nodes 20 to 40, and the storage unit 12
Is data such as hypertext necessary for functioning as an HTTP server, each access requester node 2
It is a storage unit that stores registration information of 0 to 40, an agent key given to the agent, and the like.

The HTTP server processing unit 13 includes a storage unit 12
Each access requester node 20 using the data stored in
Is a processing unit that performs the original processing of the server that provides services to the websites through the homepage.

The agent transmitting unit 14 is a processing unit for transmitting the agent 24 to which the agent key is added when receiving an access request from the access requester nodes 20 to 40. Even if the access request is received from the same access requester node, a different one is added to this agent key for each access request.

The agent control unit 15 is a control unit for controlling the agent 24 via communication with the agent 24 executed on the access requester nodes 20 to 40. Specifically, the access requester node information is provided. Request to collect the agent, delete its own agent, etc.

The authentication processing unit 16 is a processing unit for performing an authentication process based on the access requester node information or the like acquired from the access requester nodes 20 to 40. The authentication processing unit 16 performs a two-step authentication process. ing. Specifically, when the access requester node information is acquired from the access requester nodes 20 to 40, the first step is whether the agent key is correct based on the data stored in the storage unit 12, or the access requester node information. Check if is correct. That is, if a part of the access requester node information cannot be acquired or if the collected information includes an illegal element, the authentication is rejected.

If these are correct, the user account and password are acquired from the access requester nodes 20-40 as the second step, and it is confirmed whether these are correct. As a result, if both are correct,
Valid access requester Authenticates as a valid access request from the node.

Next, the configuration of the access requester nodes 20-40 will be described. Since all of the access requester nodes 20 to 40 have the same configuration,
Here, the access requester node 20 will be described as an example.

The access requester nodes 20 to 40 are terminal devices that request access to the server 10 via the Internet 50 and are provided with a service, and have an interface unit 21, a storage unit 22, and a browser 23.
Note that the agent 2 is sent from the server 10
4 functions as one functional unit.

The interface unit 21 is a network interface for performing data communication with the access requester nodes 20 to 40, and the storage unit 22.
Stores information unique to the access requester node, which is the source of the access requester node information. Browser 23
Is a WWW browser for browsing a home page provided by the server 10.

The agent 24 is a program sent from the server 10 when an access request is made to the server 10, and is specifically downloaded from the server 10. Then, it is realized by executing this as a process on the side of the access requester node 20.
The agent 24 performs acquisition and transmission of access requester node information, disconnection of communication, operation control of the access requester node 20, and the like according to an instruction from the server 10.

The access requester node 20 may refuse the installation of the agent 24, but in that case, it cannot receive the subsequent authentication. Further, the agent 24 is valid immediately after execution until completion of all access requests to the server 10.

In order to prevent misuse by modifying the agent 24, a different agent key such as a one-time password is embedded in each agent 24 for each authentication request. It cannot be diverted.

The access requester node information collected by the agent 24 includes (1) a serial number indicating that the access request is permitted, and (2)
Device-specific information such as MAC address, (3) OS type and version, (4) System configuration such as directories and files, (5) Network setting information such as domain name and IP address, (6) traceroute command, etc. Access requestor node 20 obtained by executing
To the server 10 are included.

Next, the processing procedure of the terminal monitoring control system shown in FIG. 2 will be described. 3 and 4 are similar to FIG.
5 is a flowchart showing a processing procedure of the terminal monitoring control system shown in FIG. Here, for convenience of explanation, a case where the access requester node 20 makes an access request to the server 10 will be shown.

As shown in the figure, when the access requester node 20 makes an access request while the server 10 is waiting for the connection from the access requester node (step S3).
01 to S302), after confirming the IP address of the access requester node 20 in the server 10 (step S30).
3), the authentication acceptance screen is transmitted (step S304).

Then, the access requester node 20 that has received this authentication reception screen displays this authentication reception screen on the display section (step S305), and when the access requester clicks the icon on this authentication reception screen. ,
An authentication request is issued to the server 10 (step S
306).

When the server 10 receives the authentication request (step S307), the agent key is embedded in the agent (step S308), and then the agent is transmitted to the access requester node 20 (step S309). Then, the server 10 activates the communication program with the agent 24 (step S
310), the access requestor node 20 activates the agent 24 (step S311).

After that, when the server 10 makes an information collection request (step S312), the agent 24 collects information of the access requester node (step S31).
3), the collected information is transmitted to the server 10 (step S314).

The server 10 receiving this access requester node information checks whether the agent key is correct, that is, whether the old agent has been modified (step S315), and if the agent key is incorrect (step S315). When the agent 24 is deleted (step S324), the agent 24 is deleted (step S325), and the process ends.

On the other hand, when the agent key is correct (Yes at step S315), it is confirmed whether the information of the access requester node is correct (step S31).
6). As a result, when the information of the access requester node is not correct (No at step S316), a deletion request is issued to the agent 24 (step S32).
4) After deleting the agent 24 (step S3)
25), the process ends.

On the other hand, when the information of the access requester node is correct (Yes at step S316), the user account and password are requested to the access requester node 20 (step S317). Upon receiving this request, the access requester node 20 displays a user account / password input screen (step S318), and transmits the user account / password entered on this input screen to the server 10 (step S319).

Then, the server 10 checks whether the user account and password are correct (step S3).
20) If it is not correct (No at Step S320), it is further checked whether or not the authentication has failed n times (Step S321), and if not failed n times (No at Step S321), the process proceeds to Step S317. If it fails n times (Yes at Step S321), the agent 24 is requested to delete (Step S32).
4) After deleting the agent 24 (step S3)
25), the process ends.

On the other hand, if the user account and password are correct (Yes at step S320), the service is started (steps S322 to S323). When the service is completed, a deletion request is issued to the agent 24 (step S324), the agent 24 is deleted (step S325), and then the process is completed.

As described above, in the first embodiment, when the access requester node 20 makes an access request to the server 10, the server 10 sends the agent 24 to the access requester node 20, and the agent 24 Is configured to acquire the access requester node information, transmit it to the server 10, perform authentication based on this information, and give sanctions to the access requester node 20 via this agent 24. It can be efficiently prevented, and in some cases, the sanction can be actively imposed on the unauthorized access requester.

(Second Embodiment) By the way, the present invention is not limited to the above-mentioned first embodiment, but can be applied to a case where an so-called agent-oriented autonomous agent is used.

Therefore, in the second embodiment, when the agent according to the present invention is an autonomous agent using Telescript, which is a communication language developed by General Magic Company of the United States, etc. Will be described.

The agent used in the second embodiment is
It discovers the access requester node that should make an access request, executes the program autonomously inside this access requester node, and returns to the server after the processing is completed. For example, in the case of Telescript, when the server sends an agent to the access requester node with the command "go", the agent issues a "meet" command, which is called a place in the access requester node. Perform processing in place. Also, when the server interacts with the agent, it will issue a "connection" command.

Also in this case, the basic system configuration is the same as that shown in FIG. 2, and therefore the processing procedure will be mainly described here. 5 and 6 are flowcharts showing the processing procedure of the terminal monitoring control system according to the second embodiment. Here, for convenience of explanation, a case where the access requester node 20 makes an access request to the server 10 will be shown.

As shown in the figure, when the access requester node 20 makes an access request while the server 10 is waiting for the connection from the access requester node (step S5).
01 to S502), after confirming the IP address of the access requester node 20 in the server 10 (step S50).
3), the authentication acceptance screen is transmitted (step S504).

Then, the access requester node 20 that has received this authentication reception screen displays this authentication reception screen on the display section (step S505), and when the access requester clicks the icon on this authentication reception screen. ,
An authentication request is issued to the server 10 (step S
506).

When the server 10 receives the authentication request (step S507), the agent key is embedded in the agent (step S508), and then the agent is executed (step S509). Then, the agent 24 determines that the access requester node 2
0, the agent 24 automatically executes on the place of the access requester node 20 (step S
510). After that, the agent 24 collects the information of the access requester node (step S511) and transmits the collected information to the server 10 (step S512).

The server 10 receiving this access requester node information checks whether the agent key is correct, that is, whether the old agent has been modified (step S513). If the agent key is not correct (step S513). (No), the process ends.

On the other hand, if the agent key is correct (Yes at step S513), it is confirmed whether the information of the access requester node is correct (step S51).
4). As a result, if the information of the access requester node is not correct (No at step S514), the process is ended, and if the information of the access requester node is correct (Yes at step S514), the access requester node 20 sends the information. Wait for user account and password.

Then, the agent 24 displays a user account and password input screen (step S5).
15) When the user account and password entered on this input screen are sent to the server 10 (step S
516), the server 10 checks whether or not this user account and password are correct (step S517), and if they are not correct (No at step S517), ends the process, and if the user account and password are correct ( If step S517 is positive, the service is started (steps S518 to S520). If the service is not accepted within the predetermined period (No at step S519),
The agent 24 returns to the server 10 (step S
521).

As described above, in the second embodiment, the autonomous agent described in telescript or the like is used, so that the agent can be made to function without executing the access requester node 20. it can.

In the above first and second embodiments, the case where the WWW server on the Internet provides the service has been described, but the present invention is not limited to this, and the service is provided on the closed network. It can also be applied to the case.

(Supplementary Note 1) A terminal monitoring control system for monitoring and controlling a terminal device that is connected to a server device that provides a service via a network and requests a service to the server device, wherein the server device is the When an access request is received from the terminal device, an agent transmitting unit that transmits an agent that at least acquires information about the terminal device and transmits the acquired information to the server device; and the terminal device that receives the agent from the agent. A terminal monitoring and controlling system, comprising: a determining unit that determines whether or not to permit service provision to the user based on the information. (Supplementary Note 2) The supplementary agent transmitting unit transmits an agent including a program executable on the terminal device, and the terminal device executes the agent received from the server device. Terminal monitoring and control system. (Supplementary Note 3) The terminal monitoring control system according to Supplementary Note 1, wherein the agent transmitting means transmits an agent that can be autonomously executed on the terminal device. (Supplementary Note 4) The agent transmitting means transmits an agent that acquires information related to a user of the terminal device, transmits the acquired information to a server device, and disconnects communication in response to an instruction from the server. 7. The terminal monitoring control system according to appendix 1, 2 or 3. (Supplementary Note 5) The agent transmitting means transmits information about the terminal device, transmits the acquired information to a server device, and transmits an agent for controlling the operation of the terminal device in response to an instruction from the server. 5. The terminal monitoring control system according to appendix 1, 2 or 3. (Supplementary Note 6) The agent transmitting means selects a new agent key each time an access request is made from the terminal device and transmits an agent having the agent key, and the determining means uses the agent key received from the agent. 6. The terminal monitoring control system according to any one of appendices 1 to 5, characterized in that whether or not to permit service provision to the user is determined based on the above. (Supplementary note 7) A terminal monitoring control method for monitoring and controlling a terminal device that is connected to a server device that provides a service via a network and requests a service to the server device, wherein the server device is accessed from the terminal device. When a request is accepted, an agent sending step of sending an agent that at least acquires information related to the terminal device and sends the acquired information to the server device, and based on the information related to the terminal device received from the agent And a determination step of determining whether or not to permit service provision to the user. (Supplementary Note 8) The supplementary agent transmitting step transmits an agent including a program executable on the terminal device, and the terminal device executes the agent received from the server device. Terminal monitoring control method. (Supplementary note 9) The terminal monitoring control method according to Supplementary note 7, wherein the agent transmission step transmits an agent that can be autonomously executed on the terminal device. (Supplementary Note 10) In the agent transmitting step, an agent that obtains information related to a user of the terminal device, transmits the obtained information to a server device, and disconnects communication in response to an instruction from the server is transmitted. 10. The terminal monitoring control method according to supplementary note 7, 8 or 9. (Supplementary note 11) The agent transmitting step includes transmitting information related to the terminal device, transmitting the acquired information to a server device, and transmitting an agent that controls the operation of the terminal device in response to an instruction from the server. 10. The terminal monitoring control method according to supplementary note 7, 8 or 9. (Supplementary Note 12) In the agent transmitting step, a new agent key is selected and an agent having the agent key is transmitted each time an access request is made from the terminal device, and in the determining step, the agent key received from the agent is used. Supplementary notes 7 to 1 characterized by determining whether or not to permit service provision to the user based on
1. The terminal monitoring control method according to any one of 1. (Supplementary Note 13) A program for causing a computer to execute a terminal monitoring control method for monitoring and controlling a terminal device that is connected to a server device that provides a service via a network and requests the server device for a service, the server device When an access request is received from the terminal device, an agent sending step of sending an agent that at least acquires information about the terminal device and sends the acquired information to the server device; and the terminal received from the agent. A program that causes a computer to execute a determination step of determining whether or not to provide a service to the user based on information about the device.

[0075]

As described above, according to the invention of claim 1, when the server device receives an access request from the terminal device, the server device of the information acquired and the information related to the terminal device is acquired. Since it is configured to send an agent that at least sends to the terminal and determine whether to permit the service provision to the user based on the information related to the terminal device received from the agent executing on the terminal device, it is possible to efficiently make an unauthorized access request. This has the effect of providing a terminal monitoring control system that can be well prevented.

According to the second aspect of the present invention, an agent consisting of a program executable on the terminal device is transmitted, and the terminal device is configured to execute the agent received from the server device. This has the effect of providing a terminal monitoring control system capable of implementing an agent using technology or the like.

Further, according to the invention of claim 3, since the agent which can be executed autonomously is transmitted on the terminal device, if the agent is realized by an agent-oriented programming language such as Telescript, the terminal can be realized. It is possible to obtain a terminal monitoring control system capable of operating an agent without performing an execution operation on the device.

According to the fourth aspect of the present invention, there is provided an agent for acquiring information about a user of a terminal device, transmitting the acquired information to a server device, and disconnecting communication in response to an instruction from the server. I configured it to make a call,
This has the effect of providing a terminal monitoring control system capable of forcibly disconnecting an unauthorized access request.

According to the invention of claim 5, the agent for controlling the operation of the terminal device is transmitted in response to the acquisition of the information related to the terminal device, the transmission of the acquired information to the server device and the instruction from the server. With this configuration, it is possible to obtain a terminal monitoring and control system capable of actively imposing sanctions on an unauthorized access requester.

Further, according to the invention of claim 6, a new agent key is selected each time an access request is made from the terminal device, an agent having the agent key is transmitted, and based on the agent key received from the agent, Since it is configured to determine whether or not to provide the service to the user, it is possible to obtain the terminal monitoring control system capable of efficiently preventing the abuse due to the modification of the agent.

Further, according to the invention of claim 7, when the server device receives an access request from the terminal device, it at least performs acquisition of information related to the terminal device and transmission of the acquired information to the server device. Since it is configured to determine whether or not to permit the service provision to the user based on the information about the terminal device received from the agent that executes the agent on the terminal device, it is possible to efficiently prevent unauthorized access requests. The terminal monitoring control method can be obtained.

According to the invention of claim 8, there is provided an agent for acquiring information on the user of the terminal device, transmitting the acquired information to the server device, and disconnecting the communication in response to an instruction from the server. I configured it to make a call,
The terminal monitoring control method capable of forcibly disconnecting an unauthorized access request is obtained.

Further, according to the invention of claim 9, a new agent key is selected each time an access request is made from the terminal device, an agent having the agent key is transmitted, and based on the agent key received from the agent, Since it is configured to determine whether or not to provide the service to the user, it is possible to obtain the terminal monitoring control method capable of efficiently preventing the abuse due to the modification of the agent.

According to the invention of claim 10, when the server device receives the access request from the terminal device,
Providing a service to the user based on the information related to the terminal device received from the agent that executes the acquisition of the information related to the terminal device and the transmission of the acquired information to the server device. Since it is configured to determine whether to permit or prohibit, there is an effect that a program executed by a computer that can efficiently prevent an unauthorized access request can be obtained.

[Brief description of drawings]

FIG. 1 is an explanatory diagram for explaining the concept of a terminal monitoring control system according to a first embodiment.

FIG. 2 is a functional block diagram showing a system configuration of a terminal monitoring control system according to the first embodiment.

FIG. 3 is a flowchart (1) showing a processing procedure of the terminal monitoring control system shown in FIG.

4 is a flowchart (2) showing a processing procedure of the terminal monitoring control system shown in FIG.

FIG. 5 is a flowchart (1) showing a processing procedure of the terminal monitoring control system according to the second embodiment.

FIG. 6 is a flowchart (2) showing a processing procedure of the terminal monitoring control system according to the second embodiment.

[Explanation of symbols]

10 servers 11 Interface part 12 Memory 13 HTTP server processing unit 14 Agent transmitter 15 Agent control unit 16 Authentication processing part 17 Control unit 20, 30, 40 Access requester node 21 Interface part 22 Memory 23 Browser 24 agents 25 Control unit 50 Internet

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Yasuko Iwai             4-5-16 Miyamae, Suginami-ku, Tokyo Pearl High             Tsu Miyamae B-102 (72) Inventor ▲ Takahashi Hidetomo             4-1, Kamiodanaka, Nakahara-ku, Kawasaki-shi, Kanagawa             No. 1 Fujitsu System Integration Laboratories Ltd.             Within (72) Inventor Takashi Asama             4-1, Kamiodanaka, Nakahara-ku, Kawasaki-shi, Kanagawa             No. 1 Fujitsu System Integration Laboratories Ltd.             Within F-term (reference) 5B045 GG01 JJ08 JJ34 JJ35 JJ38                 5B085 AC11 AC18 AE00

Claims (10)

[Claims] 1. A terminal monitoring control system, which is connected to a server device that provides a service via a network and monitors and controls a terminal device that requests a service to the server device, wherein the server device is the terminal device. When the access request is received from the agent, the agent transmitting means for transmitting the agent that at least acquires the information related to the terminal device and transmits the acquired information to the server device; and the information related to the terminal device received from the agent. A terminal monitoring and controlling system comprising: a determining unit that determines whether or not to permit service provision to the user based on the above. 2. The agent transmitting means transmits an agent made up of a program executable on the terminal device, and the terminal device executes the agent received from the server device. The terminal monitoring control system described in 1. 3. The terminal monitoring control system according to claim 1, wherein the agent transmitting means transmits an agent that can be autonomously executed on the terminal device. 4. The agent transmitting means transmits an agent that acquires information related to a user of the terminal device, transmits the acquired information to a server device, and disconnects communication in response to an instruction from the server. The terminal monitoring control system according to claim 1, 2, or 3. 5. The agent transmitting means transmits an agent for controlling operation of the terminal device in response to an acquisition of information on the terminal device, transmission of the acquired information to a server device, and an instruction from the server. The terminal monitoring control system according to claim 1, 2, or 3. 6. The agent sending means selects a new agent key each time an access request is made from the terminal device, and sends an agent having the agent key, and the judging means receives the agent key accepted from the agent. The permission / prohibition of service provision to the user is determined based on the above.
5 is a terminal monitoring and controlling system. 7. A terminal monitoring control method for monitoring and controlling a terminal device that is connected to a server device that provides a service via a network and requests a service to the server device, wherein the server device is controlled from the terminal device. When an access request is accepted, an agent sending step of sending an agent that at least acquires information related to the terminal device and sends the acquired information to the server device; and an information related to the terminal device received from the agent. A terminal monitoring and controlling method comprising: a determination step of determining whether or not to permit the service provision to the user based on the determination step. 8. The agent sending step sends an agent that obtains information related to a user of the terminal device, sends the obtained information to a server device, and disconnects communication in response to an instruction from the server. The terminal monitoring and controlling method according to claim 7, wherein 9. The agent transmitting step selects a new agent key each time an access request is made from the terminal device to transmit an agent having the agent key, and the determining step includes the agent key received from the agent. 8. The permission / prohibition of service provision to the user is determined based on the above.
Alternatively, the terminal monitoring control method according to item 8. 10. A program that causes a computer to execute a terminal monitoring control method for monitoring and controlling a terminal device that is connected to a server device that provides a service via a network and that requests the server device for a service. When the device receives an access request from the terminal device, an agent transmitting step of transmitting an agent that at least acquires information related to the terminal device and transmits the acquired information to the server device; A program for causing a computer to execute a determination step of determining whether to permit service provision to the user based on information related to the terminal device.