JP5165444B2 - Connection control program for controlling connection authority to computer on network, network terminal, and connection control method - Google Patents

Description

  The present invention relates to a connection control program, a network terminal, and a connection control method for controlling connection authority to a computer on a network without using hardware such as a LAN switch.

  In a closed network (LAN) such as a company, a technology called a virtual LAN (VLAN) for setting a virtual group in a terminal connected to the network is widely used independently of the connection status to the physical network. Has been. When setting a VLAN, it is common to group terminals connected to a network by MAC address or IP address using hardware called a LAN switch.

  1 and 2 show an example of a VLAN setting method using a LAN switch. In FIG. 1, a terminal 1 and a terminal 2 are connected to a LAN via a LAN switch. Although these terminals can be connected to a server A and a server B on the LAN, It is set so that it cannot be connected to C. In FIG. 2, the terminal 3 and the terminal 4 are also connected to the LAN via the LAN switch. Although these terminals can be connected to the server A and the server C on the LAN, the server is connected to the LAN switch. B is set so that it cannot be connected. As a result, terminal 1, terminal 2, server A, and server B form VLAN (1), and terminal 3, terminal 4, server A, and server C form VLAN (2).

  As described above, when setting a VLAN, it is normal to use hardware such as a LAN switch. However, if hardware is used, it takes time for physical wiring work, etc. It is preferable that this can be realized. As a method for setting a VLAN by terminal software, for example, an invention is disclosed in which a data area for recording information defining a group is provided in a packet transmitted from a terminal to the LAN (see Patent Document 1).

JP 2005-328427 A

  According to the invention described in Patent Document 1, a VLAN can be set without using hardware such as a LAN switch, but it is necessary to add data such as a group number to a packet sent from a terminal to a network each time. In addition, a load on processing for processing a packet is imposed on the terminal, and the amount of data transmitted on the network may increase.

  The present invention has been made in order to cope with such a problem. A network in which a VLAN can be set without processing a packet sent to the network and without using hardware such as a LAN switch. An object of the present invention is to provide a connection control program, a network terminal, and a connection control method for controlling connection authority to the above computer.

  A first invention for solving the problem according to the present application is a connection control program for controlling a connection authority to a computer on a network, and is provided on a network having a connection authority for each user ID of a user who operates the computer. A computer storing address information for identifying a computer or a connection destination list specifying a connection destination that is a combination of the address information and an auxiliary address accepts input of a user ID of a user who operates the computer, and performs login processing. A login processing step to be executed; an instruction detection step of detecting an instruction from an application program to another computer on the network to which the computer is connected in a state where the user is logged in; and the other specified in the instruction Address identifying the computer A connection destination specifying step for specifying a connection destination which is a combination of the address information and the auxiliary address, and a connection destination specified in the connection destination specifying step in a connection destination list corresponding to the user ID stored in the computer Is determined as a connection destination having connection authority, and when the connection authority determination step determines that the connection destination has connection authority, a command transmission is performed to transmit the command to the connection destination. And a step for executing a connection control program.

  In the first invention, the computer stores a list of other computers on the network to which the user has connection authority, and the transmission is made by confirming the connection authority when transmitting a command to the other computer. The VLAN can be set only by software provided in the terminal without processing the instruction packet.

  A second invention for solving the problem according to the present application is a connection control program for controlling connection authority to a computer on a network, wherein the computer receives an input of a user ID of a user who operates the computer and logs in A login processing step for executing processing, a user ID transmission step for transmitting the user ID to a server for managing connection authority to a computer for each user, and a user corresponding to the user ID from the server. A connection destination list receiving step for receiving address information for identifying other computers on the network or a connection destination list specifying a connection destination which is a combination of the address information and an auxiliary address, and temporarily storing the connection destination list in the computer; The computer is connected while the user is logged in. A command detection step for detecting a command from an application program to another computer on the network, and a connection which is address information for identifying the other computer designated by the command or a combination of the address information and an auxiliary address A connection authority determination step for determining a connection destination and a connection authority determination for determining whether the connection destination specified in the connection destination identification step is designated as a connection destination having a connection authority in the connection destination list temporarily stored in the computer And a command transmission step for transmitting the command to the connection destination when the connection authority is determined to be a connection destination in the connection authority determination step.

  In the second invention, a packet of a command to be transmitted is configured by storing a list of other computers on the network to which the user has connection authority in the server and acquiring the list from the server when the user logs in. The VLAN can be set only by software provided in the terminal without processing the.

  According to a second aspect of the present invention, the computer includes address information for identifying another computer on the network having connection authority for each user ID of a user who operates the computer, or a combination of the address information and an auxiliary address. A connection destination list designating a connection destination is stored, and in the connection destination list receiving step, when the connection destination list corresponding to the user ID is not received from the server, in the connection authority determining step, It may be characterized in that it is determined whether or not the connection destination specified in the connection destination specifying step is designated as a connection destination having connection authority in a connection destination list corresponding to the user ID stored in the computer.

  As described above, even if the terminal is in an environment where the latest connection destination list cannot be acquired from the server for some reason, the connection authority can be controlled by using the connection destination list stored in the terminal.

  Further, in the second invention, in the connection destination list receiving step, when the connection destination list corresponding to the user ID is received from the server, the connection destination list corresponding to the user ID stored in the computer is displayed. The connection destination list received from the server may be updated.

  As described above, the connection destination list stored in the terminal used when the terminal is in an environment where the latest connection destination list cannot be acquired from the server for some reason can be maintained as new as possible.

  In the first invention and the second invention, when a predetermined application program is activated in the computer, the API of the application program is determined for the instruction detected in the instruction detection step, When an API replacement step for replacing the dummy API for executing the connection authority determining step is executed and an instruction is detected in the instruction detection step, the dummy API is called and the connection destination specifying step and the connection authority are detected. It can also be characterized in that a decision step is performed.

  As described above, it is possible to reliably transmit a command after determining the connection authority for a predetermined application program, and to set the connection authority for each application program.

  In addition, the first and second inventions may be characterized in that the computer is caused to execute an API re-replacement step of replacing the dummy API with the application program upon receiving the end of the application program.

  From the above, it is possible to avoid troubles such as memory leaks that may occur by replacing the API.

  The present invention can also be specified as a network terminal that controls connection authority to a computer on a network, which includes the connection control program according to the present invention.

  A network terminal corresponding to the first invention is a network terminal capable of controlling a connection authority to a computer on a network, and has a connection authority for each user ID of a user who operates the network terminal. Connection destination list storage means for storing a connection destination list specifying a connection destination which is a combination of address information and auxiliary address for identifying other computers, and input of a user ID of a user who operates the network terminal Log-in processing means for receiving a log-in process, command detection means for detecting a command from an application program to another computer on the network to which the network terminal is connected in a state where the user is logged in, The other compilation specified in the instruction Address information for identifying data or a connection destination specifying means for specifying a connection destination which is a combination of the address information and an auxiliary address, and a connection destination list corresponding to the user ID stored in the network terminal. A connection authority determining unit that determines whether the connection destination specified by the specifying unit is designated as a connection destination having a connection authority; and when the connection authority determining unit determines that the connection destination has a connection authority, the instruction is transmitted to the connection destination. And a command transmitting means for transmitting to the network terminal.

  A network terminal corresponding to the second invention is a network terminal capable of controlling authority to connect to a computer on a network, and accepts an input of a user ID of a user who operates the network terminal, and performs a login process. A user ID transmission unit that transmits the user ID to a server that manages connection authority to a computer for each user, and a user corresponding to the user ID from the server has connection authority. A connection destination list receiving means for receiving a connection destination list specifying a connection destination which is a combination of address information and an auxiliary address for identifying other computers on the network, and temporarily storing the connection destination list in the network terminal; The network terminal is connected with the user logged in. Instruction detection means for detecting an instruction from an application program to another computer on the network, and address information for identifying the other computer designated by the instruction or a connection destination that is a combination of the address information and an auxiliary address Connection destination specifying means for specifying, and connection authority determining means for determining whether or not the connection destination specified by the connection destination specifying means is designated as a connection destination having connection authority in the connection destination list temporarily stored in the network terminal And a command transmission unit that transmits the command to the connection destination when the connection authority determination unit determines that the connection authority has a connection authority.

  The network terminal corresponding to the second aspect of the invention is address information for identifying another computer on the network having connection authority for each user ID of a user who operates the network terminal, or a combination of the address information and an auxiliary address. A connection destination list storing means for storing a connection destination list designating a certain connection destination, and when the connection destination list receiving means receives the connection destination list corresponding to the user ID from the server, The connection authority determining unit determines whether the connection destination specified by the connection destination specifying unit is specified as a connection destination having connection authority in the connection destination list corresponding to the user ID stored in the connection destination list storage unit. It can also be characterized by judging.

  Furthermore, the network terminal corresponding to the second invention, when the connection destination list receiving means receives the connection destination list corresponding to the user ID from the server, the user stored in the connection destination list storage means. The connection destination list corresponding to the ID may be updated to the connection destination list received from the server.

  The network terminal corresponding to the first invention and the second invention, when a predetermined application program is activated, the API of the application program for the instruction detected by the instruction detection means, API replacement means for replacing with a dummy API for executing processing by the connection authority determining means is provided, and when the instruction detection means detects an instruction, the dummy API is called and the connection destination specifying means and the connection It can also be characterized in that processing by the authority determining means is executed.

  The network terminal corresponding to the first invention and the second invention may further include an API re-replacement unit that replaces the dummy API with the application program when the termination of the application program is accepted.

  The present invention can also be specified as a connection control method for controlling authority to connect to a computer on a network, which is executed by the connection control program according to the present invention or the network terminal according to the present invention.

  A connection control method corresponding to the first invention is a connection control method for controlling connection authority to a computer on a network, and is another computer on the network having connection authority for each user ID of a user operating the computer. A computer in which a connection destination list that specifies connection information that is a combination of the address information and the auxiliary address is stored receives the input of a user ID of a user who operates the computer, and executes a login process A login processing step, an instruction detecting step of detecting an instruction from an application program to another computer on a network to which the computer is connected in a state where the user is logged in, and the computer The other specified in the instruction A destination identifying step of identifying a destination that is a combination of address information for identifying a computer or a combination of the address information and an auxiliary address, and the computer is connected to the destination list corresponding to the user ID stored in the computer. A connection authority determining step for determining whether the connection destination specified in the connection destination specifying step is designated as a connection destination having a connection authority, and the computer is determined as a connection destination having a connection authority in the connection authority determining step. And a command transmission step of transmitting the command to the connection destination.

  A connection control method corresponding to the second invention is a connection control method for controlling connection authority to a computer on a network, wherein the computer receives an input of a user ID of a user who operates the computer, and performs a login process. A login processing step for executing the user ID, a user ID transmitting step for transmitting the user ID to a server for managing connection authority to the computer for each user, and the computer from the server to the user ID. A connection that receives address information for identifying another computer on the network to which the corresponding user has connection authority or a connection destination list that specifies a connection destination that is a combination of the address information and an auxiliary address, and causes the computer to temporarily store the connection. The destination list receiving step, and the computer An instruction detection step of detecting an instruction from an application program to another computer on a network to which the computer is connected in a state where the user is logged in, and the computer identifies the other computer specified in the instruction A connection destination specifying step of specifying a connection destination that is address information to be performed or a combination of the address information and an auxiliary address, and a connection specified by the computer in the connection destination specifying step in a connection destination list temporarily stored in the computer A connection authority determination step for determining whether the destination is designated as a connection destination having a connection authority; and when the computer determines that the connection authority has a connection authority in the connection authority determination step, the instruction is transmitted to the connection destination. A command transmission step for transmitting to A connection control method for.

  According to a second aspect of the present invention, there is provided a connection control method comprising: address information for identifying another computer on a network having connection authority for each user ID of a user who operates the computer; A connection destination list designating a connection destination that is a combination of auxiliary addresses is stored, and if the connection destination list corresponding to the user ID is not received from the server in the connection destination list receiving step, the connection list In the authority determining step, it is determined whether or not the connection destination specified in the connection destination specifying step is designated as a connection destination having connection authority in the connection destination list corresponding to the user ID stored in the computer. You can also

  Furthermore, the connection control method corresponding to the second invention corresponds to the user ID stored in the computer when receiving the connection destination list corresponding to the user ID from the server in the connection destination list receiving step. The connection destination list to be updated may be updated to the connection destination list received from the server.

  In the connection control method corresponding to the first and second aspects of the invention, when the computer starts up a predetermined application program, the API of the application program is detected for the instruction detected in the instruction detecting step. An API replacement step for replacing with a dummy API for executing the connection destination specifying step and the connection authority determining step is provided. When an instruction is detected in the instruction detection step, the dummy API is called and the dummy API is called. The connection destination specifying step and the connection authority determining step may be executed.

  The connection control method corresponding to the first invention and the second invention includes an API re-replacement step of replacing the dummy API with the application program when the computer receives the end of the application program. It may be a feature.

  According to the present invention, it is possible to easily set a VLAN by using only software provided in a terminal without using a hardware such as a LAN switch and without processing a packet of a command to be transmitted.

  The best mode for carrying out the present invention will be described below in detail with reference to the drawings. The following description shows some examples of the embodiments of the present invention, and the present invention is not limited to such embodiments.

  3 and 4 are first and second diagrams, respectively, showing an example of a virtual network setting method by the connection control program according to the present invention. FIG. 5 and FIG. 6 are block diagrams showing configurations of the network terminals having the connection control program according to the present invention in the first and second embodiments, respectively. FIG. 7 and FIG. 8 are diagrams respectively showing first and second methods of connection destination control by API replacement in the connection control program according to the present invention. FIG. 9 is a block diagram showing an example of a connection destination list used in the connection control program according to the present invention. 10 and 11 are flowcharts showing the processing flow at the time of login in the first and second embodiments of the connection control program according to the present invention, respectively. FIG. 12 is a flowchart showing a processing flow of connection authority determination by the connection control program according to the present invention.

  3 and 4 show an example of a virtual network setting method by the connection control program according to the present invention. The connection control program according to the present invention is provided in a terminal such as a PC operated by a user connected to a LAN, and controls connection authority to other computers on the LAN at the terminal. The connection authority is set for each user, and a connection destination list of computers that can be connected to each user is stored in advance in the terminal or is called from the connection authority management server when the user logs in.

  In FIG. 3, when a user 101 and a user 102 try to connect to other computers (server A to server C) connected to the LAN, the connection control program of the terminal grants connection authority to the other computers to be connected. It is determined that the server A and the server B can be connected but the server C cannot be connected. In FIG. 4, when a user 201 and a user 202 try to connect to other computers (server A to server C) connected to the LAN, the connection control program of the terminal grants connection authority to the other computers to be connected. It is determined that the server A and the server C can be connected, but the server B cannot be connected. As a result, user 101, user 102, server A, and server B form a virtual network (1), and user 201, user 202, server A, and server C form a virtual network (2).

  A processing flow at the time of login in the first embodiment of the present invention will be described with reference to FIGS. 5 and 10.

  In FIG. 5, a terminal 10 is a terminal such as a PC connected to a network such as a LAN, and includes a CPU 11, a main memory 12, an OS 13, a mailer 14, a browser 15, an explorer 16, a connection control program 17, a dummy API 18, and a connection destination. A list 19 is provided, and the OS 13 to the connection destination list 19 are stored in a storage device such as a ROM or an HDD. In order to execute a program such as the OS 13, the CPU 11 performs arithmetic processing while the main memory 12 (including a virtual memory on the HDD) functions as a work area for the program.

  When the terminal 10 is activated, the OS 13 is read to the main memory 12 and a user login screen is displayed on the display of the terminal 10. The user inputs a user ID for identifying the user and a password for personal authentication from the login screen.

  When the terminal 10 receives the input of the user ID and password (S01), the user is authenticated against the combination of the user ID and password registered in advance in the terminal 10 (S02). If the user ID and the password match, login processing is performed (S03), and a computer operation screen is launched on the display of the terminal 10. If they do not match, error processing is performed (S04), and a re-input screen or an error message display screen is displayed on the display.

  When the login process is performed, the connection control program 17 for controlling the connection authority to the computer on the network is read out to the main memory 12 and activated (S05). Further, the connection control program 17 reads the connection destination list 19 corresponding to the user ID into the main memory 12 (S06).

  The connection destination list 19 is stored in the terminal 10 for each user ID of the user who uses the terminal 10, and each connection destination list includes a MAC that identifies other computers on the network to which the user has connection authority. Addresses, IP addresses, and port numbers are stored. FIG. 9 shows an example of the connection destination list 19. By specifying the port number in addition to the IP address, the FTP server, TELNET server, SMTP server, Web server, etc. on the network are functionally It can be specified.

  The processing flow at the time of login described above will be described with reference to FIG. 6 and the flowchart of FIG. 11 according to the second embodiment of the present invention.

  6, the terminal 10 has the same configuration as that in FIG. 5, but a connection authority management server 50 is installed on a network such as a LAN to which the terminal 10 is connected. The connection authority management server 50 is a server computer that can communicate with a terminal on the network, and is connected to a table such as the example of FIG. 9 provided for each user ID of a user who uses the terminal on the network. A destination list 51 is stored. The information stored in the connection destination list is basically the same as the connection destination list 19 stored in the terminal 10 in the first embodiment.

  The operation until the terminal 10 is activated and accepts the input of a user ID and a password (S11) is the same as that in the first embodiment. Also, the user authentication (S12), the login process (S13) when the user ID and password match, and the error process (S14) when they do not match are the same as in the first embodiment.

  When the login process is performed, as in the first embodiment, the connection control program 17 for controlling the authority to connect to the computer on the network is read into the main memory 12 and activated (S15). Subsequently, the connection control program 17 transmits a connection destination list request specifying a user ID to the connection authority management server 50 (S16).

  The connection authority management server 50 that has received the request reads out the connection destination list 51 corresponding to the user ID and sends it back to the terminal 10. However, the terminal 10 and the connection authority management server 50 cannot communicate with each other for some reason. When a response from the connection authority management server 50 is not detected for a predetermined time (S17), the connection destination list 19 corresponding to the user ID stored in the terminal 10 is read (S19).

  On the other hand, when a response from the connection authority management server 50 is detected (S17) and the connection destination list 51 is received (S18), the connection destination list 19 corresponding to the user ID stored in the terminal 10 is received. (S20). If these lists do not match, the connection destination list 19 stored in the terminal 10 is updated to the connection destination list 51 reflecting the latest authority (S22). By performing such an update process, the connection destination list 19 stored in the terminal 10 to be used when the terminal 10 is in an environment where the latest connection destination list 51 cannot be acquired from the connection authority management server 50 for some reason. It will be possible to keep it as new as possible.

  If the lists match, or the list does not match and the connection destination list 19 of the terminal 10 is updated, the connection destination list 51 received from the connection authority management server 50 is temporarily stored in the main memory 12 (S23).

  Next, a processing flow for determining connection authority according to the present invention will be described with reference to FIG. 5 (the same applies to FIG. 6) and the flowchart of FIG. The processing flow for determining connection authority is the same in the first embodiment and the second embodiment.

  As described above, in a state where the user logs in to the terminal 10 and the connection control program 17 is activated, the application program (mailer 14, browser 15, explorer 16, etc.) is read into the main memory 12 and activated. (S31). Subsequently, the setting corresponding to the API corresponding to the read application program is replaced with a dummy API 18 for causing the connection control program 17 to execute the connection authority determination process (S32).

  Here, a command for sending a request from the application program to another computer on the network (transmission / reception of mail from the mailer 14 to the mail server 20, startup of the web application from the browser 15 to the web server 30, and file server from the explorer 16) When an API call is detected by opening a folder at 40 (S33), the processing flow differs depending on whether the called API is the dummy API 18 (S34).

  Here, it may be set so that the connection control program 17 determines whether or not it is a dummy API 18, but the API called from the application program includes the dummy API replaced by S32 in the application program. Even if the determination is not made by the connection control program 17, the subsequent flow automatically differs depending on whether the called API is the dummy API 18 or not.

  If the called API is not the dummy API 18 (if it is a call from an application that is not controlled by the connection control program 17), an instruction to the OS is executed according to the API (S38), and another computer (mail server) 20, the web server 30, the file server 40, etc.).

  On the other hand, when the dummy API 18 is called (when it is a call from an application that is a control target of the connection control program 17), the IP address or IP address designated as the connection destination from the command for the OS by the connection control program 17 And a combination of port numbers are specified (S35). Subsequently, referring to the connection destination list 19 previously read into the main memory 12 (or the connection destination list 51 temporarily stored in the main memory 12), the identified IP address or the combination of the IP address and the port number is determined. Then, it is determined whether or not it is included in connection destinations having connection authority in the connection destination list 19 (S36).

  If it is not included in the connection destination having the connection authority in the connection destination list 19, an error process is performed (S39), and an error message is displayed by the application program. If it is included in the connection destination having connection authority in the connection destination list 19, an instruction to the OS is executed according to the API (S38, a method for causing the OS to execute the instruction is shown in FIGS. As will be described, there are the following two methods), and a request to another computer (the mail server 20, the Web server 30, the file server 40, etc.) is transmitted.

  7 and 8 are diagrams illustrating the connection destination control method using the dummy API 18 by the API replacement by the connection control program 17 described above. An instruction from the application to the OS is normally executed by calling an API of the application program. However, in the present invention, by setting the original API to be replaced with the dummy API 18, a dummy is issued when the instruction is issued to the OS. API 18 will be called.

  The dummy API 18 determines the connection authority by the connection control program 17 before causing the OS to execute the instruction, and causes the OS to execute the instruction when it is confirmed that the connection authority is obtained. In order for the dummy API 18 to cause the OS to execute an instruction, as shown in FIG. 7, the instruction received by the dummy API 18 may be handed over to the original API before replacement, thereby causing the OS to execute the instruction. As shown in FIG. 8, the dummy API 18 may be provided with a function of executing an instruction to the OS in the same manner as the original API before the replacement, so that the dummy API 18 may cause the OS to execute the instruction.

  Finally, when the termination of the application started in S31 is received (S40), the termination processing of the application is executed, and resetting is performed so that the dummy API 18 replaced earlier is returned to the original API (S41). This is because it is preferable to perform such resetting because the replacement with the dummy API 18 may cause a trouble such as a memory leak.

It is a 1st figure which shows an example of the general setting method of the present VLAN using a LAN switch. It is a 2nd figure which shows an example of the general setting method of the present VLAN using a LAN switch. It is a 1st figure which shows an example of the setting method of the virtual network by the connection control program concerning this invention. It is a 2nd figure which shows an example of the setting method of the virtual network by the connection control program concerning this invention. It is a block diagram which shows the structure in 1st Embodiment of the network terminal provided with the connection control program concerning this invention. It is a block diagram which shows the structure in 2nd Embodiment of the network terminal provided with the connection control program concerning this invention. It is a figure which shows the 1st method of the connection destination control by API replacement in the connection control program concerning this invention. It is a figure which shows the 2nd method of the connection destination control by API replacement in the connection control program concerning this invention. It is a block diagram which shows an example of the connection destination list | wrist used with the connection control program concerning this invention. It is a flowchart which shows the processing flow at the time of login in 1st Embodiment of the connection control program concerning this invention. It is a flowchart which shows the processing flow at the time of login in 2nd Embodiment of the connection control program concerning this invention. It is a flowchart which shows the processing flow of the connection authority judgment by the connection control program concerning this invention.

Explanation of symbols

10 Terminal 11 CPU
12 Main memory 13 OS
14 Mailer 15 Browser 16 Explorer 17 Connection Control Program 18 Dummy API
19 Connection destination list 20 Mail server 30 Web server 40 File server 50 Connection authority management server 51 Connection destination list

Claims (15)

A connection control program for controlling the connection permission from the computer to which the connection source is on a network to the destination to become another computer, the computer serving as the connection source,
A login process step of receiving a user ID of a user who operates the computer as the connection source and executing a login process;
A user ID transmission step of transmitting the user ID to a server that manages connection authority to the computer for each user;
From the server, receiving the connection destination list specifying address information or the address information and the destination is a combination of an auxiliary address that identifies the other computers on the network to which the user has a connection authority corresponding to the user ID A connection destination list receiving step of temporarily storing the connection source computer in a computer;
In a state in which the user logs in, the instruction detection step of detecting the command from the application program transmits a request to the other computers in the connection originated the computer on the connected network,
A connection destination specifying step for specifying a connection destination which is address information for identifying the other computer designated in the command or a combination of the address information and an auxiliary address;
A connection authority determining step for determining whether the connection destination specified in the connection destination specifying step is designated as a connection destination having connection authority in the connection destination list temporarily stored in the computer as the connection source ;
When it is determined that the connection authority has a connection authority in the connection authority determination step, a request transmission step of executing the command and transmitting a request to the other computer ;
A connection control program for executing Wherein the connection originated the computer, a combination of the address information or the address information and auxiliary address identifying the other computers on the network having connection authority for each user ID of the user to operate the computer serving as the connection source A connection list that specifies a certain connection destination is stored,
In the connection destination list reception step, when the connection destination list corresponding to the user ID is not received from the server, the connection authority determination step corresponds to the user ID stored in the connection source computer. The connection control program according to claim 1, wherein it is determined whether or not the connection destination specified in the connection destination specifying step is specified as a connection destination having connection authority in the connection destination list. In the connection destination list receiving step, when the connection destination list corresponding to the user ID is received from the server, the connection destination list corresponding to the user ID stored in the computer as the connection source is received from the server. 3. The connection control program according to claim 2, wherein the connection control program is updated to a connection destination list. To the computer that is the connection source ,
When activation of a predetermined application program is executed, the API of the application program is replaced with a dummy API for executing the connection destination specifying step and the connection authority determining step for the command detected in the command detection step. API replacement step is executed,
4. The connection according to claim 1, wherein when a command is detected in the command detection step, the dummy API is called and the connection destination specifying step and the connection authority determining step are executed. Control program. To the computer that is the connection source ,
5. The connection control program according to claim 4, wherein upon completion of the application program, an API re-replacement step of replacing the dummy API with the application program is executed. A network terminal that can control the authority to connect to other computers on the network
Login processing means for receiving input of a user ID of a user operating the network terminal and executing login processing;
User ID transmission means for transmitting the user ID to a server that manages connection authority to the computer for each user;
From the server, receiving the connection destination list specifying address information or the address information and the destination is a combination of an auxiliary address that identifies the other computers on the network to which the user has a connection authority corresponding to the user ID A connection destination list receiving means for temporarily storing in the network terminal;
In a state in which the user logs in, the instruction detection means for detecting a command from the application program transmits a request to the other computers on the network to which the network terminal is connected,
Address information for identifying the other computer specified in the command or a connection destination specifying means for specifying a connection destination that is a combination of the address information and an auxiliary address;
Connection authority determining means for determining whether or not the connection destination specified by the connection destination specifying means is designated as a connection destination having connection authority in the connection destination list temporarily stored in the network terminal;
When the connection authority determining means determines that the connection destination has a connection authority, a request transmission means for executing the command and transmitting a request to the other computer ;
A network terminal comprising: Storing connection destination list specifying address information or the address information and the destination is a combination of an auxiliary address that identifies the other computers on the network having connection authority for each user ID of the user operating the network terminal A connection list storage means,
When the connection destination list receiving unit does not receive the connection destination list corresponding to the user ID from the server, the connection authority determining unit adds the user ID stored in the connection destination list storage unit to the user ID. 7. The network terminal according to claim 6, wherein it is determined whether or not the connection destination specified by the connection destination specifying means in the corresponding connection destination list is designated as a connection destination having connection authority. When the connection destination list receiving means receives the connection destination list corresponding to the user ID from the server, the connection destination list corresponding to the user ID stored in the connection destination list storage means is received from the server. 8. The network terminal according to claim 7, wherein the network terminal is updated to a connection destination list. When the activation of a predetermined application program is executed, the API of the application program is replaced with a dummy API for executing processing by the connection destination specifying unit and the connection authority determining unit for the command detected by the command detection unit API replacement means to
9. The network according to claim 6, wherein when the command detection unit detects a command, the dummy API is called and processing by the connection destination specifying unit and the connection authority determining unit is executed. Terminal. The network terminal according to claim 9, further comprising an API re-replacement unit that replaces the dummy API with the application program upon accepting termination of the application program. A connection control method for controlling connection authority from a connection source computer to a connection destination computer on a network,
Computer to which the connection source, and receives an input of the user ID of the user to operate the computer serving as the connection source, and login processing step of executing the login process,
A user ID transmitting step in which the computer transmits the user ID to a server that manages connection authority to the computer for each user;
Computer serving as the connection source, from the server, the connection destination is a combination of address information and the address information and auxiliary address identifying the other computers on the network to which the user has a connection authority corresponding to the user ID A connection destination list receiving step of receiving the specified connection destination list and temporarily storing it in the connection source computer;
Computer serving as the connection source, in a state where the user has logged in, an instruction detection step of detecting the command from the application program transmits a request to the other computers in the connection originated the computer on the connected network When,
A connection destination identifying step in which the computer that is the connection source identifies address information that identifies the other computer specified in the command or a connection destination that is a combination of the address information and an auxiliary address;
The connection computer determines whether the connection destination specified in the connection destination specifying step is designated as a connection destination having connection authority in the connection destination list temporarily stored in the connection source computer. Authority decision step;
When the connection source computer is determined as a connection destination having a connection authority in the connection authority determination step, a request transmission step of executing the command and transmitting a request to the other computer ;
A connection control method characterized by comprising: Wherein the connection originated the computer, a combination of the address information or the address information and auxiliary address identifying the other computers on the network having connection authority for each user ID of the user to operate the computer serving as the connection source A connection list that specifies a certain connection destination is stored,
In the connection destination list reception step, when the connection destination list corresponding to the user ID is not received from the server, the connection authority determination step corresponds to the user ID stored in the connection source computer. 12. The connection control method according to claim 11, wherein it is determined whether or not the connection destination specified in the connection destination specifying step is designated as a connection destination having connection authority in the connection destination list to be connected. In the connection destination list receiving step, when the connection destination list corresponding to the user ID is received from the server, the connection destination list corresponding to the user ID stored in the computer as the connection source is received from the server. The connection control method according to claim 12, wherein the connection destination list is updated. When the connection source computer is activated to start a predetermined application program, the application program API executes the connection destination specifying step and the connection authority determining step for the command detected in the command detection step. An API replacement step for replacing with a dummy API for
14. The connection according to claim 11, wherein when a command is detected in the command detection step, the dummy API is called and the connection destination specifying step and the connection authority determining step are executed. Control method. 15. The connection control method according to claim 14, further comprising an API re-replacement step of replacing the dummy API with the application program when the computer as the connection source accepts termination of the application program.