WO2015071964A1 - Security management method, device and program - Google Patents

Abstract

[Problem] To provide a security management method, device and program which can effectively forestall a decrease in the security level of a network system due to introduction of BYOD. [Solution] This security management device manages security in a network system which comprises one or multiple communication terminals used by end users and a server device, which retains resource contents of each of the communication terminals and provides the communication terminals with resource contents requested by the communication terminals. The security management device collects, from the communication terminals in the network system, security setting information representing the content of security settings in the communication terminals, determines the security level of each communication terminal on the basis of the collected security setting information, and controls access of the communication terminals to the server device or resource contents on the basis of the determination result of the security level of each communication terminal.

Description

Security management method, apparatus and program

The present invention relates to a security management method, apparatus, and program, and is particularly suitable when applied to an in-company network system in which a computer that is accessed from outside the in-company network system can be used within a business.

In recent years, for the purpose of improving the productivity of intellectual workers, the use of computers connected from outside the corporate network such as smart devices connected to the corporate network has been promoted. Under such circumstances, mobile device management software has been provided by each company for the purpose of preventing information leakage due to loss or theft of smart devices holding important corporate data in the corporate network. Yes. This type of mobile device management software usually has the following functions to enable a system administrator to centrally manage smart devices.
(A) Asset management Function to manage smart devices owned by companies.
(B) Security policy distribution and enforcement Functions for enforcing passcode policies and function restrictions. For example, the smart device is forced to have 8 or more alphanumeric characters as a pass code or prohibited from using the camera.
(C) Distribution of connection settings to in-house system A function for distributing connection settings such as an in-house Wi-Fi access point, VPN (Virtual Private Network), and groupware server.
(D) Application distribution A function for distributing a distribution application and its license code, or an application originally developed by a company.
(E) Remote control A function to send a command to a smart device and forcibly execute it. For example, it has functions such as operation lock and internal information deletion for a stolen / lost terminal.

Patent Document 1 discloses an invention related to such mobile device management software.

US Pat. No. 7,665,125

In recent years, a work style called BYOD (Bring Your Own Device) that uses smart devices personally owned by employees as work styles using smart devices has begun to spread mainly in the United States, and mobile devices. Management software is also required to support this type of usage.

However, conventional mobile device management software is premised on the operation of lending a smart device purchased by a company to an employee and forcing the employee to have a security policy preset by a system administrator. Yes. For this reason, in order to apply a security management method using such existing mobile device management software to an in-house network system that has introduced BYOD, it is necessary to make employees comply with the security settings determined by the system administrator. There is.

However, each employee has different permissible security settings, and the security settings determined by the system administrator are uniform (for example, forcing the password for operation lock to 8 or more alphanumeric characters, prohibiting the use of the camera, etc.) There is a problem that employees who are unable to accept can not use their smart devices in business even in companies where BYOD is approved.

On the other hand, if the security management method is changed so that the owner of the computer that connects to the corporate network from the outside can decide the security setting, the security level will depend on the setting technique of the connecting computer. Therefore, there is a problem that it is difficult to maintain a high security level of a smart device used as a business.

Therefore, if the owner of a computer that connects to the corporate network from the outside rather than by the system administrator can voluntarily maintain the security level of his smart device, the security of the corporate network system accompanying the introduction of BYOD It is considered that the decrease in level can be prevented effectively.

The present invention has been made in consideration of the above points, and intends to propose a security management method, apparatus, and program capable of effectively preventing a decrease in the security level of a network system accompanying the introduction of BYOD. .

In order to solve this problem, in the present invention, each resource content is held with one or a plurality of communication terminals used by an end user, and the resource content requested in response to a request from the communication terminal is communicated with the communication. In a security management method executed by a security management device that manages security in a network system having a server device provided to a terminal, the security management device performs security on each communication terminal from each communication terminal in the network system. A first step of collecting security setting information representing the content of the setting; a second step of determining a security level for each communication terminal based on the collected security setting information by the security management device; Seki Utility management device, based on the security level of the determination result of each of the communication terminal, and to provide a third step of controlling access of said communication terminal to said server device or said resource content.

In the present invention, each of the communication terminals used by the end user and one or a plurality of communication terminals, each of which holds resource contents, and provides the resource contents requested in response to a request from the communication terminals to the communication terminal A security management device for managing security in a network system having a device, wherein the security management device collects security setting information representing security setting contents in the communication terminal from each of the communication terminals in the network system. A security level determining unit that determines a security level for each of the communication terminals based on the collected security setting information; and the server device or the resource based on the determination result of the security level determining unit. And to and an access controller for controlling access of the communication terminal for over scan content.

Further, in the present invention, each of the communication terminals used by the end user and a server that holds the resource contents and provides the requested resource contents to the communication terminal in response to a request from the communication terminal A security management device that manages security in a network system including the device, and a security management device that collects security setting information representing security setting contents in the communication terminal from each of the communication terminals in the network system; A second step of determining a security level for each communication terminal based on the security setting information, and the communication terminal for the server device or the resource content based on a determination result of the security level for each communication terminal. Acu And so as to execute the process and a third step of controlling the scan.

According to this security management method, apparatus, and program, the end user performs security setting of a security level corresponding to the use of the communication terminal on the communication terminal, and voluntarily maintains the security level.

According to the present invention, it is possible to realize a security management method, apparatus, and program capable of effectively and effectively preventing a decrease in the security level of the network system accompanying the introduction of BYOD.

It is a block diagram which shows the whole structure of the corporate network system by 1st Embodiment. It is a block diagram which shows the structural example of a smart device. It is a block diagram which shows the structural example of a server apparatus. It is a conceptual diagram which shows the structural example of an access control list. It is a conceptual diagram which shows the structural example of a security level change table. It is a conceptual diagram which shows the structural example of a terminal information table. It is a conceptual diagram which shows the structural example of a security level table. It is a conceptual diagram which shows the structural example of a resource management table. It is a conceptual diagram which shows the structural example of a resource content management table. It is a flowchart which shows the process sequence of a security management control process. It is a flowchart which shows the process sequence of a security setting collection process. It is a flowchart which shows the process sequence of a resource content management process. It is a flowchart which shows the process sequence of an access control process. It is a block diagram which shows the whole structure of the corporate network system by 2nd Embodiment. It is a flowchart which shows the process sequence of an access control process. It is a block diagram which shows the whole structure of the corporate network system by 3rd Embodiment. It is a conceptual diagram which shows the structural example of a new security setting table. It is a flowchart which shows the process sequence of a security setting discovery process.

Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.

(1) First Embodiment (1-1) Configuration of Corporate Network System According to the Present Embodiment In FIG. 1, reference numeral 1 denotes the corporate network system according to the present embodiment as a whole. The in-company network system 1 includes one or a plurality of smart devices 2, one or a plurality of server devices (hereinafter referred to as resources as appropriate) 3, and a mobile device management device 4, which are configured as a network 5 Are connected to each other.

The smart device 2 is a portable information terminal such as a laptop computer, a smartphone, or a tablet that is personally owned by an employee. As shown in FIG. 2, the smart device 2 includes a CPU (Central Processing Unit) 11, a main storage device 12, a secondary storage device 13, and a wireless communication interface 14 connected to each other via an internal bus 10. Is done.

CPU 11 is a processor that controls operation of the entire smart device 2. The main storage device 12 is composed of, for example, a volatile semiconductor memory and is used as a work memory for the CPU 11. The main storage device 12 stores a dedicated program (hereinafter referred to as a client) installed in advance in order to realize a security management method according to the present embodiment to be described later.

The secondary storage device 13 is a large-capacity storage device, and is composed of, for example, a hard disk device. The secondary storage device 13 includes terminal information 19 including various information related to the smart device 2, security setting information 20 indicating the contents of security settings of the smart device 2, files downloaded from the server device 3, mails, and the like. Data of content (hereinafter referred to as resource content) 21 and the like are stored.

In the following, the terminal information 19 stored in the secondary storage device 13 of the smart device 2 includes identification information (device ID) unique to the smart device 2 assigned to the smart device 2 by the system administrator. The system administrator includes identification information (user ID) unique to the employee assigned to the employee who owns the smart device 2.

In the following, as an item to be referred to when determining the security level of the smart device 2 (hereinafter referred to as a security reference item), a pass code for releasing the operation lock set for the smart device 2 , The valid / invalid of the camera function and the valid / invalid of the tethering function are selected. Also, the combination pattern of these security reference item values (passcode character number, camera function enable / disable, tethering function enable / disable) is called the security setting of the smart device 2, and information indicating the contents of the security setting is This is called security setting information 20.

The wireless communication interface 14 includes, for example, a Wi-Fi interface compliant with IEEE (Institute of Electrical and Electronics Engineers) 802.11b standard, and is connected to the network 5 via the wireless communication network. The wireless communication interface 14 performs protocol control during communication with the server device 3 and the mobile device management device 4 via the wireless communication network.

The server device 3 is composed of, for example, a file server or a mail server. As shown in FIG. 3, the server device 3 includes a CPU 31, a main storage device 32, a secondary storage device 33, and a communication interface 34 that are connected to each other via an internal bus 30.

The CPU 31 is a processor that controls the operation of the entire server device 3. The main storage device 32 is composed of, for example, a volatile semiconductor memory and is used as a work memory for the CPU 31. The main storage device 31 stores a business processing unit 35 that is a program for processing a main business (for example, a business as a file server or a mail server) of the server device 3 and an access control level receiving unit 36 described later. .

The secondary storage device 33 is a large-capacity storage device, and is composed of, for example, a hard disk device. The secondary storage device 33 stores data of the resource content 21 such as a file or mail corresponding to the server device 3 and an access control list 37 described later.

The communication interface 34 is composed of, for example, a LAN (Local Area Network) card, and performs protocol control during communication with the smart device 2 and the mobile device management apparatus 4.

The mobile device management apparatus 4 is a computer apparatus having a function of managing the security of the entire corporate network system 1. As shown in FIG. 1, a CPU 41 and a main storage apparatus 42 connected to each other via an internal bus 40. The secondary storage device 43 and the communication interface 44 are provided.

The CPU 41 is a processor that controls the operation of the entire mobile device management apparatus 4. The main storage device 42 is composed of, for example, a volatile semiconductor memory and is used as a work memory for the CPU 41. A terminal information collection unit 45, a security setting collection unit 46, a security level determination unit 47, a resource content management unit 48, an access control unit 49, a control unit 50, and a security level change table 51, which will be described later, are stored in the main storage device 42. Held.

The secondary storage device 43 is a large-capacity storage device, and is composed of, for example, a hard disk device. The secondary storage device 43 stores a terminal information table 52, a security level table 53, a resource management table 54, and a resource content management table 55, which will be described later.

The communication interface 44 is composed of, for example, a LAN card, and performs protocol control during communication with the smart device 2 and the server device 3.

(1-2) Security Management Method According to this Embodiment (1-2-1) Configuration of Various Programs and Tables Related to this Security Management Method Next, the security management method in the corporate network system 1 will be described. In the corporate network system 1, BYOD that allows an employee to access the server device 3 using his / her smart device 2 and browse or download the resource content 21 held by the server device 3 is permitted. The security setting of the smart device 2 is also left to the employees who own and use the smart device 2.

For this reason, in the in-house network system 1, for each server device 3, the security level that allows access to the server device 3 is defined in advance by the system administrator, and only the smart device 2 that has been set to meet the security level. A security management method for controlling access from the smart device 2 to each server device 3 is adopted so that the server device 3 can be accessed and the resource content 21 held by the server device 3 can be viewed or downloaded. .

In practice, in the case of the in-company network system 1, the mobile device management apparatus 4 periodically collects the security setting information of each smart device 2 existing in the system, and the smart device 2 of each smart device 2 is collected based on the collection result. The function to judge each security level is installed. Then, the mobile device management apparatus 4 determines whether or not each smart device 2 can access each server device 3 based on the determination result, and whether or not each employee can access each server device 3 based on the determination result. , The access of each smart device 2 to each server device 3 is controlled.

Further, when the security setting of the smart device 2 is changed and the security level is lowered, the mobile device management apparatus 4 is not allowed to access at the security level after changing the security setting (is inaccessible). When the resource content 21 (FIG. 2) acquired before the security setting change is held in the smart device 2, actions such as deletion or prohibition of browsing specified for the resource content 21 (hereinafter referred to as this) A function for giving an instruction to the smart device 2 to execute an action when the access is prohibited is called. When the smart device 2 receives such an instruction, the smart device 2 executes an access prohibition change action specified for the resource content 21 for the resource content 21.

As means for realizing the security management system according to the present embodiment as described above, the main storage device 12 of the smart device 2 includes a terminal information transmission unit 16, a security setting transmission unit 17, and The above-described client 15 including the resource content processing unit 18 is stored.

In response to a request from the mobile device management device 4, the terminal information transmission unit 16 reads the terminal information (device ID and user ID) of the smart device 2 stored in the secondary storage device 13 to read the mobile device management device 4 is a program having a function of transmitting data to 4.

Also, the security setting transmission unit 17 reads the security setting information of the smart device 2 stored in the secondary storage device 13 and transmits it to the mobile device management device 4 in response to a request from the mobile device management device 4 It is a program having

Further, the resource content processing unit 18 is a program having a function of executing the above-described access prohibition update action preset for the resource content 21 with respect to the corresponding resource content 21 in accordance with an instruction from the mobile device management apparatus 4. .

On the other hand, in connection with the security management method described above, the access control list 37 is stored in the secondary storage device 33 (FIG. 3) of the server device 3, and the access control level is received in the main storage device 32 of the server device 3. The part 36 is stored.

The access control list 37 is a list used for managing the access control level for each employee (whether or not each employee can be accessed) with respect to the server device 3, and as shown in FIG. And a communication permission column 37B.

The user ID column 37A stores the user ID of each employee who is to perform access control, and the communication permission column 37B indicates whether or not the employee is permitted to access the server apparatus 3. Communication permission information (“true” when permitted, “false” when not permitted) is stored.

Therefore, in the case of FIG. 4, it is indicated that the user with the user ID “user B” is permitted (“true”) to access the server apparatus 3 holding the access control list 37.

Thus, when the access request is given from the smart device 2, the server device 3 refers to the access control list 37 and the owner of the smart device 2 that is the transmission source of the access request recognized based on the access request. When the communication is permitted (“true”) in the access control list 37, the access request is accepted. When the owner is not permitted to communicate (“false”), the access request is received. I refuse.

The access control level receiving unit 36 is a program having a function of changing the contents of the access control list 37 in response to a request for changing the access control list 37 transmitted from the mobile device management apparatus 4.

On the other hand, in connection with the security management method described above, the main storage device 42 of the mobile device management apparatus 4 includes a terminal information collection unit 45, a security setting collection unit 46, a security level determination unit 47, a resource content management unit 48, An access control unit 49, a control unit 50, and a security level change table 51 are stored. The secondary storage device 43 of the mobile device management apparatus 4 includes a terminal information table 52, a security level table 53, a resource management table 54, and resource content management. A table 55 is stored.

The terminal information collection unit 45 is a program having a function of collecting terminal information 19 (FIG. 2) of each smart device 2 from each smart device 2 existing in the system. The security setting collection unit 46 is a program having a function of collecting the security setting information 20 (FIG. 2) of the smart device 2 from each smart device 2 existing in the system. The terminal information collection unit 45 and the security setting collection unit 46 store the collected terminal information 19 and security setting information 20 in a terminal information table 52 described later.

The security level determination unit 47 is a program having a function of determining the security level of the smart device 2 based on the security setting information 20 of each smart device 2 collected by the security setting collection unit 46. The security level determination unit 47 stores the determination result of the determination in the terminal information table 52.

The resource content management unit 48 is a program having a function of managing the resource content 21 (FIG. 2) held or held in the smart device 2 based on the determination result of the security level determination unit 47. For example, the resource content management unit 48 changes the security level of the smart device 2, and the resource content 21 acquired from the server device 3 that is not permitted to access at the current security level is held in the smart device 2. In such a case, the smart device 2 is instructed to execute an access prohibition change action set in advance for the resource content 21.

The access control unit 49 is a program having a function of controlling the access of the smart device 2 to the server device 3 based on the security level of the smart device 2 determined by the security level determination unit 47. Specifically, the access control unit 49 requests the corresponding server device 3 to update the above-described access control list 37 (FIG. 3) as necessary based on the determination result of the security level determination unit 47.

The control unit 50 is a program having a function of starting the above-described terminal information collection unit 45, security setting collection unit 46, security level determination unit 47, resource content management unit 48, and access control unit 49 when necessary.

Further, the security level change table 51 is a table used for managing the smart device 2 in which the security level determined by the security level determination unit 47 has changed from the security level at the previous security level determination. As shown in FIG. 5, the security level change table 51 includes a device ID column 51A, a security level column 51B before change, and a security level column 51C after change.

In the device ID column 51A, the device ID of the smart device 2 whose security level has been changed by changing the security setting is stored. Further, the security level before changing the security setting of the smart device 2 is stored in the security level column 51B before changing, and the security level after changing the security setting of the smart device 2 (that is, current) is stored in the security level column 51C after changing. Stores the level.

Therefore, in the case of FIG. 5, the smart device 2 to which the device ID “device B” is assigned has the security level changed from “2” before the security setting is changed. It is shown that the later security level has changed to “1”.

The terminal information table 52 manages terminal information 19 (FIG. 2) and security setting information 20 (FIG. 2) collected from the smart device 2 by the terminal information collecting unit 45 (FIG. 1) and the security setting collecting unit 46 (FIG. 1). As shown in FIG. 6, the table is configured by a device ID column 52A, a user ID column 52B, a passcode character number column 52C, a camera column 52D, a tethering column 52E, and a security level column 52F.

In the device ID column 52A and the user ID column 52B, the terminal information 19 of the corresponding smart device 2 collected from the smart device 2 by the terminal information collection unit 45 is stored. Specifically, the device ID column 52A stores the device ID of the corresponding smart device 2, and the user ID column 52B stores the user ID of the employee who owns the smart device 2.

Also, the security setting information of the corresponding smart device 2 collected from the smart device 2 by the security setting collection unit 46 is stored in the passcode character number column 52C, the camera column 52D, and the tethering column 52E. Specifically, the pass code character number column 52C stores the number of characters of the pass code for releasing the operation lock set for the corresponding smart device 2, and the camera column 52D stores the camera function of the smart device 2. A value indicating valid / invalid (“true” when valid, “false” when invalid) is stored. In the tethering column 52E, a value indicating whether the tethering function in the smart device 2 is valid / invalid (“true” when valid, “false” when invalid) is stored.

Further, the security level column 52F stores the security level of the corresponding smart device 2 determined by the security level determination unit 47 (FIG. 1).

Therefore, in the case of FIG. 6, the smart device 2 to which the device ID “device A” is assigned is owned by the employee “user A”, and the smart device 2 is operated with the number of characters “4”. A passcode for unlocking is set, and both the camera function and the tethering function are enabled (“true”), and the security level of the smart device 2 is determined to be “1”. It is shown.

The security level table 53 is a table used for managing the security level for the security setting of the smart device 2 specified in advance by the system administrator. The security level determination unit 47 determines the security level of the smart device 2. It is used when doing. As shown in FIG. 7, the security level table 53 includes a security level field 53A, a passcode character number field 53B, a camera field 53C, a tethering field 53D, and an accessible resource ID list field 53E.

In the passcode character number field 53B, the camera field 53C, and the tethering field 53D, there are values indicating the number of characters of the passcode, which are security reference items in the present embodiment, the validity / invalidity of the camera function, and the validity / invalidity of the tethering function. The security level column 53A stores the security level preset by the system administrator for the combination pattern of the values of the respective security reference items. The accessible resource ID list field 53E stores a list of resource IDs of the respective server devices 3 designated in advance by the system administrator as resources that can be accessed by the smart device 2 having the corresponding security level.

Therefore, in the case of FIG. 7, the smart device 2 in which the pass code for unlocking the operation with the number of characters “4” is set and both the camera function and the tethering function are set to be valid (“true”). The security level is “1”, and it is indicated that the smart device 2 having the security level can access only the server device 3 to which the resource ID “resource A” is assigned.

In the case of this embodiment, the security level is set in advance by the system administrator for each combination pattern of the values of each security reference item. Accordingly, the security level table 53 is provided with entries (rows) corresponding to the combination patterns of the values of the individual security reference items.

The resource management table 54 is a table used for managing the server device 3, and as shown in FIG. 8, a resource ID column 54A, an IP address column 54B, an access means column 54C, a registration method column 54D, and a deletion method. It consists of a column 54E.

In the resource ID column 54A, the resource ID of the corresponding server device 3 is stored, and in the IP address column 54B, the IP (Internet Protocol) address of the corresponding server device 3 is stored. The access means column 54C stores a method for accessing the corresponding server device 3 (for example, “script” when access is to be made by a script).

Further, the registration method column 54D stores a method for registering the desired smart device 2 in the server device 3 (the script name when registered by a script), and the deletion method column 54E stores the registered smart device. The method of deleting the device 2 from the server device 3 (or the script name when deleting by the script) is stored.

Therefore, in the case of FIG. 8, the IP address of the server apparatus 3 to which the resource ID “resource A” is assigned is “192.168.100.1”, and the script “rsrcA / addUser.ps1” is used for the server apparatus 3. It is shown that the smart device 2 can be registered and the registration of the smart device 2 can be deleted using the script “rsrcA / delUser.ps1”.

Furthermore, the resource content management table 55 is a table used for managing each resource content 21 (FIG. 3) held in each server device 3, and as shown in FIG. 9, a resource ID column 55A, a content ID It consists of a column 55B and an access prohibition change action column 55C.

The content ID column 55B stores the folder name of the folder in which the corresponding resource content 21 is stored, and the resource ID column 55A stores the resource ID of the server device 3 that holds the resource content 21. The Further, in the access prohibition change action column 55C, when the security level of the smart device 2 is changed, when the smart device 2 becomes unable to access the server device 3 holding the resource content 21, the smart device 2 is displayed. Stores the content of an access prohibition change action (for example, deletion or prohibition of browsing) to be executed for the resource content 21.

Therefore, in the case of FIG. 9, the resource content 21 with the resource content ID “rsrcA” held in the server apparatus 3 with the resource ID “resource A” is assigned “Wipe (delete)” as the access prohibition change action. It is shown that it is prescribed what should be done.

(1-2-2) Various Processes Related to the Security Management System Next, the processing contents of various processes executed in relation to the security management system according to the present embodiment described above will be described with reference to FIGS. explain. In the following, the processing subject of various processes will be described as “program (...)”, But in practice, the CPU 41 of the mobile device management apparatus 4 or the CPU 11 of the smart device 2 performs the process based on the program. Needless to say that.

(1-2-2-1) Control Unit Processing FIG. 10 shows security management control processing periodically executed by the control unit 50 (FIG. 1) of the mobile device management apparatus 4 in relation to the security management method. A processing procedure is shown. The control unit 50 starts a necessary program (terminal information collection unit 45, security setting collection unit 46, resource content management unit 48 or access control unit 49) at a necessary timing according to the processing procedure shown in FIG. The mobile device management apparatus 4 is controlled so as to execute the security management processing according to the security management system according to the present embodiment as described above as the entire apparatus.

Actually, when starting the security management control process shown in FIG. 10, the control unit 50 first activates the terminal information collection unit 45 (FIG. 1) and the security setting collection unit 46 (FIG. 1) (SP1). As a result, the terminal information collection unit 45 collects the terminal information 19 (FIG. 2) of the smart device 2 from each smart device 2 in the system, and stores the collected terminal information 19 in the terminal information table 52 (FIG. 6). Store. Further, the security setting collection unit 46 collects the security setting information 20 (FIG. 2) of the smart device 2 from each smart device 2 in the system, and stores the collected security setting information 20 in the terminal information table 52 (FIG. 6). ).

Subsequently, the control unit 50 determines whether any smart device 2 is registered in the security level change table 51 (FIG. 5) (SP2). When the control unit 50 obtains a negative result in this determination, it ends this security management control process.

On the other hand, when the control unit 50 obtains a positive result in the determination at step SP2, the control unit 50 activates the resource content management unit 48 (FIG. 1). As a result, the resource content management unit 48 executes processing corresponding to the security level after the security setting change as described later for the client 15 (FIG. 2) of the smart device 2 registered in the security level change table 51. Give instructions to do.

Next, the control unit 50 activates the access control unit 49 (SP4). As a result, the access control unit 49 gives an instruction to the corresponding server device 3 to update the access control list 37 (FIG. 4) according to the security level after changing the security setting of the smart device 2 whose security setting has been changed. Thereafter, the security management control process is terminated.

(1-2-2-2) Processing of Terminal Information Collection Unit When the terminal information collection unit 45 is started in step SP1 of the security management control process described above with reference to FIG. 10, first, each smart device existing in the system The terminal information 19 is collected from 2 respectively, and the collected terminal information 19 is stored in the terminal information table 52 as necessary.

Specifically, the terminal information collection unit 45 requests each smart device 2 existing in the system to transmit the terminal information 19 of the smart device 2. Thus, in response to this request, the terminal information transmission unit 16 (FIG. 2) of the client 15 of the smart device 2 reads the terminal information 19 of the smart device 2 from the secondary storage device 13, and the read terminal information 19 is transferred to the mobile device. It transmits to the device management apparatus 4.

If the received terminal information 19 is not registered in the terminal information table 52, the terminal information collection unit 45 of the mobile device management apparatus 4 that has received the terminal information 19 stores the terminal information 19 in the terminal information table 52. Register with.

(1-2-2-3) Processing of Security Setting Collection Unit On the other hand, FIG. 11 is executed by the security setting collection unit 46 (FIG. 1) started at step SP1 of the security management control processing described above with reference to FIG. The processing procedure of security setting collection processing is shown.

When the security setting collection unit 46 is activated by the control unit 50, the security setting collection unit 46 starts the security setting collection process shown in FIG. 11, and first, among the smart devices 2 existing in the system, the target smart device 2 at that time. One (hereinafter referred to as the target smart device 2) is selected (SP10).

Subsequently, the security setting collection unit 46 collects the security setting information 20 (FIG. 2) from the target smart device 2 (SP11). Specifically, the security setting collection unit 46 requests the target smart device 2 to transmit the security setting information 20. Thus, in response to this request, the security setting transmission unit 17 (FIG. 2) of the target smart device 2 reads the security setting information 20 of the target smart device 2 from the secondary storage device 13, and reads the read security setting information 20. It transmits to the mobile device management apparatus 4.

Next, the security setting collection unit 46 refers to the terminal information table 52 and determines whether or not the security setting information 20 collected from the target smart device 2 in the previous security setting collection process is registered in the terminal information table 52. (SP12).

Obtaining a negative result in this determination means that the target smart device 2 has been introduced into the system between the execution of the previous security setting collection process and the execution of the current security setting collection process. .

Thus, at this time, the security setting collection unit 46 newly registers the security setting information 20 of the target smart device 2 collected in step SP11 in the terminal information table 52 (SP13). The security setting collection unit 46 activates the security level determination unit 47 (FIG. 1) to determine the security level of the target smart device 2 based on the current security setting (SP14), and then proceeds to step SP19. .

On the other hand, obtaining a positive result in the determination at step SP12 means that the target smart device 2 already exists in the system when the previous security setting collection process is executed, and the security setting information 20 of the target smart device 2 Means that it was acquired during the previous security setting collection process.

Thus, the security setting collection unit 46 at this time, the security setting information 20 of the target smart device 2 registered in the terminal information table 52, and the security settings of the target smart device 2 collected in step SP11 of the current security setting collection process. The information 20 is compared to determine whether there is a difference in security settings in the target smart device 2 (SP15).

Here, obtaining a negative result in this determination means that there is no change in the security settings for the target smart device 2 between the end of the previous security setting collection process and the present, and accordingly the security level of the target smart device 2 Means no change. Thus, at this time, the security setting collection unit 46 proceeds to step SP20.

On the other hand, obtaining a positive result in the determination at step SP15 means that the security setting of the target smart device 2 has been changed from the end of the previous security setting collection process to the present, and as a result This means that the security level of the smart device 2 may also be changed. Thus, at this time, the security setting collection unit 46 activates the security level determination unit 47 to determine the current security level of the target smart device 2 based on the current security setting (SP16).

Next, the security setting collection unit 46 acquires the security level before the security setting change of the target smart device 2 from the terminal information table 52, the acquired security level before the security setting change, and the security level determination unit activated in step SP16 The current security level of the target smart device 2 (after the security setting change) determined in 47 is registered in the security level change table 51 (FIG. 5) (SP17).

Thereafter, the security setting collection unit 46 acquires the security setting information 20 (FIG. 2) of the target smart device 2 collected in step SP11 and the security of the target smart device 2 stored in the terminal information table 52 (FIG. 6). The setting information 20 is overwritten (SP18).

Subsequently, the security setting collection unit 46 displays the current security level of the target smart device 2 determined by the security level determination unit 47 activated in step SP14 or step SP16 in the corresponding security level column 52F (FIG. 6) is newly registered or overwritten (SP19).

Next, the security setting collection unit 46 determines whether or not the processing of step SP11 to step SP19 has been executed for all the smart devices 2 existing in the system (SP20). If the security setting collection unit 46 obtains a negative result in this determination, it returns to step SP10, and thereafter, the smart device 2 selected in step SP10 is sequentially switched to another unprocessed smart device 2 while step SP10 to step SP10. Repeat the process of SP20.

When the security setting collection unit 46 eventually obtains a positive result in step SP20 by completing the processing of steps SP11 to SP19 for all the smart devices 2 existing in the system, it ends this security setting collection processing. .

(1-2-2-4) Processing of Security Level Determination Unit When the security level determination unit 47 is activated by the security setting collection unit 46 in step SP14 or step SP16 of the security setting collection processing described above with reference to FIG. The security level of the smart device 2 is determined.

In practice, when the security level of the target smart device 2 is determined, the security level determination unit 47 is recognized based on the security setting information 20 of the target smart device 2 collected by the security setting collection unit 46 in step SP11 of the security setting collection process. The security setting of the target smart device 2 is sequentially compared with each entry (row) of the security level table 53 (FIG. 7).

Specifically, in the case of the present embodiment, as described above, the security reference item indicates the number of characters of the passcode (number of passcode characters) for unlocking the operation lock of the smart device 2, the validity / invalidity of the camera function, Since the tethering function is enabled / disabled, the security level determination unit 47 stores the values of these security reference items in the target smart device 2 and the passcode character number field 53B, camera field 53C, and tethering field 53D of the security level table 53. Each stored value is compared sequentially.

The security level determination unit 47 then matches the security levels at which the values of the security reference items in the target smart device 2 all match the values stored in the corresponding passcode character number field 53B, camera field 53C, or tethering field 53D. When an entry on the table 53 is detected, the security level stored in the security level column 53A (FIG. 7) of the entry is acquired, and the acquired security level is set as the security level of the target smart device 2 to the security setting collection unit 46. Notice.

(1-2-2-5) Processing of Resource Content Management Unit On the other hand, FIG. 12 shows the resource content management unit 48 (FIG. 1) activated by the control unit 50 in step SP3 of the security management control processing described above with reference to FIG. The process procedure of the resource content management process performed by is shown.

When the resource content management unit 48 is activated by the control unit 50, the resource content management unit 48 starts the resource content management process shown in FIG. 12. First, the smart device 2 (security information registered in the security level change table 51 (FIG. 5)) It is determined whether there is a smart device 2) whose level has been changed (SP30). When the resource content management unit 48 obtains a negative result in this determination, it ends this resource content management process.

On the other hand, when the resource content management unit 48 obtains a positive result in the determination at step SP30, it selects one smart device 2 from the smart devices 2 registered in the security level change table 51 (SP31), The security level before and after the security setting change of the smart device 2 is acquired from the security level change table 51 (SP32).

Subsequently, the resource content management unit 48 acquires the list of resource IDs of all the server apparatuses 3 that can be accessed at the security level before the change of the security setting of the smart device 2 acquired in step SP32 and the smart device 2 A list of resource IDs of all server apparatuses 3 accessible at the security level after changing the security setting is acquired from the security level table 53 (FIG. 7) (SP33).

Next, the resource content management unit 48 does not exist on the list of resource IDs of the server device 3 that can be accessed at the security level before the change of the security setting of the smart device 2 acquired in step SP33. It is determined whether or not there is a resource ID (hereinafter referred to as an increased resource ID) present on the list of resource IDs of the server device 3 that can be accessed at the security level after the change of the security setting 2 (SP34). .

Here, to obtain a negative result in this determination means that there is no server device 3 to which the smart device 2 is newly accessible as a result of changing the security setting of the smart device 2 selected in step SP31. means. Thus, at this time, the resource content management unit 48 proceeds to step SP37.

On the other hand, obtaining a positive result in the determination in step SP34 means that the server device 3 that is newly accessible to the smart device 2 as a result of changing the security setting of the smart device 2 selected in step SP31. It means to exist. Thus, at this time, the resource content management unit 48 stores, for all the increased resource IDs acquired in step SP33, information on entries corresponding to the increased resource IDs from the resource content management table 55 (FIG. 9) (stored in the resource content column 55B). Resource access ID and access prohibition change action column 55C stored in the access prohibition change action column 55C are acquired (SP35).

Subsequently, the resource content management unit 48 transmits the information acquired in step SP35 for each increased resource ID to the smart device 2 selected in step SP31, and the server device 3 to which the increased resource ID is assigned. A request is made for management of the resource content 21 (FIG. 2) acquired from the server device 3 newly accessible by changing the security setting (SP36).

Thus, the resource content processing unit 18 (FIG. 2) of the smart device 2 that has received such information and such a request creates a dedicated folder for each resource content ID included in the information on the secondary storage device 13 (FIG. 2). After that, when the resource content 21 to which the resource content ID is assigned is downloaded from the server device 3, the resource content 21 is managed so as to be stored in a corresponding dedicated folder.

Thereafter, the resource content management unit 48 exists in the resource ID list of the server device 3 that can be accessed at the security level before the change of the security setting of the smart device 2 acquired in step SP32. It is determined whether or not there is a resource ID that does not exist on the list of resource IDs of the server device 3 that can be accessed at the security level after the change of the security setting of the device 2 (hereinafter referred to as an extinguished resource ID) ( SP37).

Here, obtaining a negative result in this determination means that there is no server device 3 that is prohibited from accessing the smart device 2 as a result of the change in the security setting of the smart device 2 selected in step SP31. . Thus, at this time, the resource content management unit 48 proceeds to step SP40.

On the other hand, obtaining a positive result in the determination in step SP37 means that there is a server apparatus 3 in which access to the smart device 2 is prohibited as a result of changing the security setting of the smart device 2 selected in step SP31. Means that. Thus, at this time, the resource content management unit 48 stores, for all the erasure resource IDs acquired in step SP37, information on entries corresponding to the erasure resource IDs (resource content column 55B) from the resource content management table 55 (FIG. 9). Resource access ID and access prohibition change action column 55C stored in the access prohibition change action column 55C are acquired (SP38).

Subsequently, the resource content management unit 48 transmits the information acquired in step SP38 for each extinct resource ID to the smart device 2 selected in step SP31, and the server device 3 to which the extinct resource ID is assigned. A request is made to execute an action when changing access prohibition for the resource content 21 acquired from the server device 3 that has become inaccessible due to the change of the security setting (SP39).

Thus, the resource content processing unit 18 of the smart device 2 that has received the information and the request, with respect to the resource content 21 stored in the dedicated folder associated with the resource content ID included in the information, An access prohibition change action (for example, “Wipe (delete)”) defined for the resource content ID included in the information is executed.

Thereafter, the resource content management unit 48 determines whether or not the processing of step SP31 to step SP39 has been executed for all the smart devices 2 registered in the security level change table 51 (SP40). If the resource content management unit 48 obtains a negative result in this determination, it returns to step SP31, and then sequentially switches the smart device 2 selected in step SP31 to another unprocessed smart device 2, while step SP31 to step SP31. Repeat the process of SP40.

When the resource content management unit 48 finally obtains a positive result at step SP40 by completing the processing of step SP32 to step SP39 for all the smart devices 2 registered in the security level change table 51, the resource content management unit 48 The management process ends.

(1-2-2-6) Process of Access Control Unit FIG. 13 is executed by the access control unit 49 (FIG. 1) activated by the control unit 50 in step SP4 of the security management control process described above with reference to FIG. The processing procedure of access control processing is shown.

When the access control unit 49 is activated by the control unit 50, the access control unit 49 starts the access control process shown in FIG. 13. First, the smart device 2 registered in the security level change table 51 (the smart device whose security level has been changed). It is determined whether or not the device 2) exists (SP50). If the access control unit 49 obtains a negative result in this determination, it ends this access control process.

On the other hand, when the access control unit 49 obtains a positive result in the determination at step SP50, it selects one smart device 2 from the smart devices 2 registered in the security level change table 51 (SP51). The security level before and after the security setting change of the smart device 2 is acquired from the security level change table 51 (SP52).

Subsequently, the access control unit 49 acquires the list of resource IDs of the server device 3 that can be accessed at the security level before the change of the security setting of the smart device 2 and the security setting of the smart device 2 acquired in step SP53. A list of resource IDs of the server device 3 that can be accessed at the changed security level is acquired from the security level table 53 (FIG. 7) (SP53).

Next, the access control unit 49 acquires the list of resource IDs of the server device 3 that can be accessed at the security level before the change of the security setting of the smart device 2 and the change of the security setting of the smart device 2 acquired in step SP53. A list of resource IDs of the server device 3 that can be accessed at a later security level is compared, and a difference between these two resource ID lists is extracted (SP54). Specifically, the access control unit 49 extracts all of the increase resource ID and the disappearance resource ID described above by comparing these two lists.

Thereafter, the access control unit 49 sets the IP address, access means, and registration method of the server apparatus 3 to which the increased resource ID is assigned for all the increased resource IDs extracted in step SP54 as the resource management table 54 (FIG. 8). (SP55).

Also, the access control unit 49 uses the information acquired in step SP55 to update the access control list 37 (FIG. 4) to the server device 3 to which the increased resource ID is assigned for each increased resource ID. Request (SP56). Specifically, the access control unit 49 accesses the server device 3 to which each increased resource ID extracted in step SP54 is assigned, and the smart device selected in step SP51 by the access means and registration method acquired in step SP55. The server device 3 is notified of the user ID of the employee who owns 2.

Thus, the access control level receiving unit 36 (FIG. 3) of the server device 3 that has received such notification, when the user ID notified at that time is already registered in the access control list 37 held by itself, The value stored in the communication permission column 37B (FIG. 4) of the entry corresponding to the user ID in the control list 37 is changed to a value (“true”) indicating communication permission. If the user ID registered at that time is not registered in the access control list 37, the access control level receiving unit 36 adds a new entry to the access control list 37, and the user ID column 37A ( The user ID is stored in FIG. 4), and a value (“true”) indicating communication permission is stored in the communication permission column 37B of the entry.

Subsequently, the access control unit 49 acquires, from the resource management table 54, the IP address, access means, and deletion method of the server device 3 to which the annihilation resource ID is assigned for all the erasure resource IDs extracted in step SP54. (SP57).

Further, the access control unit 49 uses the information acquired in step SP57 to request the server device 3 to which the annihilation resource ID is assigned for each erasure resource ID to update the access control list 37 (SP58). ). Specifically, the access control unit 49 accesses the server device 3 to which each extinction resource ID extracted in step SP54 is assigned, and the smart device selected in step SP51 by the access means and the deletion method acquired in step SP57. The server device 3 is notified of the user ID of the employee who owns 2.

Thus, the access control level receiving unit 36 of the server device 3 that has received such notification stores it in the communication permission column 37B of the entry corresponding to the user ID notified at that time among the entries of the access control list 37 held by itself. The value that is set is changed to a value indicating communication disapproval (“false”).

Next, the access control unit 49 deletes the entry corresponding to the smart device 2 (the smart device 2 selected in step SP51) targeted at that time from the entries in the security level change table 51 (SP59). It is determined whether or not the processing of steps SP52 to SP59 has been completed for all smart devices 2 registered in the security level change table 51 (smart devices 2 whose security level has been changed) (SP60).

If the access control unit 49 obtains a negative result in this determination, the access control unit 49 returns to step SP51, and thereafter, sequentially switches the smart device 2 selected in step SP51 to another smart device 2 that has not been processed, Repeat the process.

When the access control unit 49 eventually obtains a positive result in step SP60 by completing the processing of step SP52 to step SP59 for all the smart devices 2 registered in the security level change table 51, this access control process Exit.

(1-3) Effects of this Embodiment As described above, in the corporate network system 1 according to this embodiment, the security level that allows access to the server device 3 is specified for each server device 3 in advance. Access from the smart device 2 to each server device 3 so that only the smart device 2 with security settings satisfying the requirements can access the server device 3 and view or download the resource content 21 held by the server device 3 Is controlled.

Therefore, in the in-company network system 1, an employee who intends to use his / her smart device 2 in the business inevitably has a security level corresponding to the use of the smart device 2. Set and voluntarily maintain its security level. Therefore, according to the in-company network system 1, it is possible to effectively and effectively prevent a decrease in security level accompanying the introduction of BYOD.

In the corporate network system 1, when the security setting of the smart device 2 is changed and the security level of the smart device 2 is changed, the resource content 21 held by the smart device 2 is changed after the security setting is changed. For the resource content 21 that has become inaccessible, the smart device 2 is caused to execute the access prohibition change action set for the resource content 21, so that not only access from the smart device 2 to the server device 3 but also the smart device 2 Security management of the resource content 21 acquired by 2 can also be performed. In this way, according to the in-company network system 1, it is possible to perform more reliable security management.

(2) Second Embodiment (2-1) Configuration of Corporate Network System According to This Embodiment FIG. 14 showing the same reference numerals in FIG. 14 corresponding to those in FIG. 1 is according to the second embodiment. An in-company network system 60 is shown. The in-company network system 60 is characterized in that the mobile device management device 63 operates as a reverse proxy between the server device 61 and the smart device 62 and controls access from the smart device 62 to the server device 61.

In practice, in the case of the present embodiment, the smart device 62 sends an access request to the resource content 21 (FIG. 3) to the mobile device management apparatus 4 rather than to the server apparatus 61 that holds the resource content 21. Send.

As shown in FIG. 14, the mobile device management device 63 is different from the access control unit 49 described above with reference to FIG. 1 except that the access control unit 66 according to the second embodiment is stored in the main storage device 42. The configuration is the same as that of the mobile device management apparatus 4 of the first embodiment.

The access control unit 66 is a program having a function of controlling access from the smart device 62 to the server device 61 via the mobile device management device 63.

In practice, when the access control unit 66 receives an access request to the resource content 21 held by any one of the server devices 61 from the smart device 62, the access from the smart device 62 to the server device 61 is permitted. If not, the access request is discarded and an error response indicating that the corresponding server device 61 or resource content 21 cannot be accessed is returned to the smart device 62.

On the other hand, when access from the smart device 62 to the server device 61 is permitted, the access control unit 66 transfers the access request to the server device 61.

Each server device 61 is connected to the mobile device management device 63 via a firewall 64 and a server network 65. These server devices 61 do not store the access control level receiver 36 (FIG. 3) in the main storage device 32, and hold the access control list 37 (FIG. 3) in the secondary storage device 33 (FIG. 3). The server apparatus 3 is configured in the same manner as the server apparatus 3 according to the first embodiment except that it is not.

When the server device 61 receives the access request transferred from the mobile device management device 63, the server device 61 reads the data of the resource content 21 (FIG. 3) designated in the access request from the secondary storage device 33 (FIG. 3). This is transferred to the mobile device management apparatus 63 via the server network 65 and the firewall 64 sequentially. Further, the mobile device management apparatus 63 transfers the data of the resource content 21 transferred from the server apparatus 61 to the smart device 62 that is the transmission source of the access request.

(2-2) Various Processes Related to the Security Management Method Next, processing contents of various processes executed in relation to the security management method according to the present embodiment as described above will be described.

(2-2-1) Control Unit Processing First, security management control processing periodically executed by the control unit 67 of the mobile device management apparatus 63 in relation to the security management method according to the present embodiment will be described. The control unit 67 executes the same process as the security management process except that the process of step SP4 is not executed in the security management control process according to the first embodiment described above with reference to FIG.

Specifically, when the control unit 67 starts the security management control apparatus according to the present embodiment, first, the terminal information collection unit 45 and the security setting collection unit 46 are activated, whereby each smart device 62 existing in the system. Terminal information 19 (FIG. 2) and security setting information 20 (FIG. 2) are collected from each (see step SP1 of FIG. 10).

Subsequently, the control unit 67 determines whether or not the security setting of any smart device 62 has been changed (see step SP2 in FIG. 10), and when the security setting of any smart device 62 has not been changed. This security management control process is terminated.

In contrast, when the security setting of any smart device 62 has been changed, the control unit 67 activates the resource content management unit 48 (see step SP3 in FIG. 10). As a result, the resource content management unit 48 instructs the client 15 (FIG. 2) of the smart device 62 whose security settings have been changed to manage the resource content 21 (FIG. 2) according to the changed security level. give. Then, the control unit 67 ends this security management control process.

(2-2-2) Processing of Access Control Unit On the other hand, FIG. 15 shows an access control unit 66 (see FIG. 15) of the mobile device management device 63 that has received an access request to the resource content 21 (FIG. 3) held by the server device 61. The process procedure of the access control process performed by 3) is shown. The access control unit 66 controls access to the resource content 21 of each smart device 62 according to the processing procedure shown in FIG.

That is, when the mobile device management apparatus 63 receives an access request for any of the resource contents 21 from the smart device 62, the access control unit 66 starts the access control process shown in FIG. The IP address of the server device 61 that holds the resource content 21 (hereinafter referred to as the access request destination server device 61) and the user ID of the employee who sent the access request are acquired from the access request. (SP70).

Subsequently, the access control unit 66 refers to the terminal information table 52 (FIG. 6), and has transmitted the smart device 62 (that is, the access request) held by the employee to whom the user ID acquired in step SP70 is assigned. The device ID of the smart device 62) is acquired (SP71).

Next, the access control unit 66 refers to the terminal information table 52, acquires the security level corresponding to the device ID acquired in step SP71 (SP72), and then refers to the security level table 53 (FIG. 7). Thus, a list of resource IDs of the server devices 61 permitted to access the security level acquired in step SP72 is acquired (SP73).

Subsequently, the access control unit 66 refers to the resource management table 54 (FIG. 8), and acquires a list of IP addresses for each server device 61 to which the resource ID acquired in step SP73 is assigned (SP74).

Next, the access control unit 66 determines whether or not the IP address of the access request destination server device 61 acquired in step SP70 is included in the list of IP addresses acquired in step SP74 (SP75).

Obtaining a positive result in this determination means that the resource content 21 held by the server device 61 that is the access request destination can be accessed at the security level of the smart device 62 that is the source of the access request. Thus, at this time, the access control unit 66 transfers the access request to the server device 61 that is the access request destination (SP76), and thereafter ends this access control processing.

On the other hand, obtaining a negative result in the determination at step SP75 means that the resource content 21 held by the server device 61 that is the access request destination cannot be accessed at the security level of the smart device 62 that is the source of the access request. means. Thus, at this time, the access control unit 66 discards the access request and notifies the smart device 62 that has transmitted the access request that the resource content 21 (or the server device 61) cannot be accessed. Is executed (SP77), and then this access control process is terminated.

(2-3) Effects of the Embodiment As described above, in the corporate network system 60 according to the present embodiment, the mobile device management apparatus 63 operates as a reverse proxy between the server apparatus 61 and the smart device 62, and the smart device Based on the security level of the smart device 62 determined based on the security setting of 62 and the security level accessible to the server device 61 set for each server device 61, the smart device 62 transfers to the server device 61. Control access.

Accordingly, as in the in-company network system 1 according to the first embodiment, also in the in-company network system 60, an employee who intends to use his / her smart device 62 in his / her business uses the smart device 62. Inevitably, the security level is set according to the use of the smart device 62, and the security level is voluntarily maintained. Therefore, according to the in-company network system 60, it is possible to effectively and effectively prevent a decrease in security level accompanying the introduction of BYOD.

(3) Third Embodiment (3-1) Configuration of Corporate Network System According to This Embodiment FIG. 16 showing the same reference numerals in FIG. 16 corresponding to those in FIG. 1 is according to the third embodiment. An in-company network system 70 is shown. When the smart device 2 having a security reference item other than the security reference item of the security setting known by the system administrator enters the management of the mobile device management apparatus 71, the in-company network system 70 notifies that fact. Except that the function for notifying the system administrator is installed in the mobile device management apparatus 71, it is configured in the same manner as the in-company network system 1 according to the first embodiment.

That is, in the case of a company permitting BYOD, for example, it is difficult to specify the type of smart device 2 to be managed by the mobile device management apparatus 4 (FIG. 1) according to the first embodiment. For example, when a new smart device 2 is released, the smart device 2 is an unknown device for the mobile device management apparatus 4, and therefore an appropriate security level cannot be designated. In the present embodiment, a function (hereinafter referred to as a security level determination support function) for accelerating detection of such a state and assisting the system administrator in determining an appropriate security level is implemented.

As means for realizing such a security level determination support function, in the in-company network system 70 according to the present embodiment, a security setting discovery unit 72 is provided in the main storage device 42 of the mobile device management apparatus 71 as shown in FIG. In addition, the new security setting table 73 is stored in the secondary storage device 43 of the mobile device management apparatus 71.

The security setting discovery unit 72 has a function of detecting a new security reference item of the security setting in the smart device 2 existing in the system and storing the detected new security reference item and its value in the new security setting table 73. It is a program. The security setting discovery unit 72 is activated by the control unit 74 after the execution of step SP1 of the security management control process described above with reference to FIG. 10 and before the start of step SP2.

The new security setting table 73 is a table used for managing a new security reference item of the security setting discovered by the security setting discovery unit 72, and as shown in FIG. (Value) column 73B.

In the key field 73A, the item name of a new security reference item of the security setting discovered by the security setting discovery unit 72 is stored. The value column 73B stores the value of the new security reference item in the smart device 2 having the new security reference item. Note that the value of the security reference item is, for example, “true” when the new security reference item is set, “false” when the new security reference item is not set, and the new security reference item is a numerical value. Is the numerical value of the new security reference item set in the smart device 2 at that time.

FIG. 18 shows the processing procedure of the security setting discovery process executed by the security setting discovery unit 72 started by the control unit 74 after the execution of step SP1 of the security management control process described above with reference to FIG. 10 and before the execution of step SP2. Show.

When activated by the control unit 74, the security setting discovery unit 72 starts the security setting discovery process shown in FIG. 18, and first collects security setting information from each smart device 2 existing in the system (SP80). ).

Subsequently, based on the collected security setting information of each smart device 2, the security setting discovery unit 72 registers it in the current terminal information table 52 (FIG. 6) as a security reference item for the security setting of any smart device 2. It is determined whether there is a new security reference item that has not been set (SP81). If the security setting discovery unit 72 obtains a negative result in this determination, it ends this security setting discovery process.

On the other hand, when the security setting discovery unit 72 obtains a positive result in the determination at step SP81, it registers the newly found security reference item and its value in the new security setting table 73 (FIG. 17) (SP82). Thereafter, the fact that a new security reference item in the security setting has been found is displayed on a display device (not shown) or mailed to the system administrator, for example, to notify the system administrator (SP83). The setting discovery process ends.

The system administrator registers the security reference item found at that time in the mobile device management apparatus 71 as a new security reference item when determining the security setting. As a result, the new security reference item is registered in the terminal information table 52. In addition to this, the system administrator resets the security level for each combination pattern of the values of all the security reference items including the value of the new security reference item. As a result, the terminal information table 52 and the security level table 53 (FIG. 7) are updated in accordance with this resetting, and the subsequent resource content management process (FIG. 12) etc. 53.

As described above, according to the in-company network system 70 of the present embodiment, when a new security reference item is detected, the system administrator quickly grasps the new security reference item, and uses the new security reference item. Appropriate security level can be set. Therefore, according to the in-company network system 70, in addition to the effects obtained by the first embodiment, it is possible to perform highly reliable security management that can quickly cope with unknown security reference items.

(4) Other Embodiments In the above-described embodiment, the present invention is applied to the corporate network systems 1, 60, 70 configured as shown in FIG. 1, FIG. 14, or FIG. However, the present invention is not limited to this, and can be widely applied to network systems having various configurations other than the in-company network system.

Moreover, in the above-described embodiment, the case where the communication terminal used by the employee (end user) is the smart device 2, 62 such as a notebook computer, a smartphone, or a tablet is described, but the present invention is not limited thereto, For example, the communication terminal may be a desktop personal computer or another fixed computer device.

Further, in the above-described embodiment, the case where the access control of the smart devices 2 and 62 is performed in units of the server devices 3 and 61 has been described. Access control of the smart devices 2 and 62 may be performed in resource content 21 units, and other units may be applied as units for performing access control of the smart devices 2 and 62.

The present invention provides a security management device that manages security in a network system that includes a communication terminal used by an end user and a server device that provides a requested resource content to the communication terminal in response to a request from the communication terminal. Can be applied.

1, 60, 70: Corporate network system, 2, 62: Smart device, 3, 61: Server device, 4, 63, 71: Mobile device management device, 41: CPU, 42: Main memory Device, 43 ... Secondary storage device, 45 ... Terminal information collection unit, 46 ... Security setting collection unit, 47 ... Security level determination unit, 48 ... Resource content management unit, 49, 66 ... Access control unit , 50, 67, 74... Control unit, 51... Security level change table, 52... Terminal information table, 53... Security level table, 54. ... security setting discovery part, 73 ... new security setting table.

Claims (10)

1. A network system having one or a plurality of communication terminals each used by an end user, and a server device that holds resource contents and provides the requested resource contents to the communication terminal in response to a request from the communication terminal In a security management method executed by a security management device that manages security in the system,
   A first step in which the security management device collects security setting information representing the content of security settings in the communication terminal from each of the communication terminals in the network system;
   A second step in which the security management device determines a security level for each communication terminal based on the collected security setting information;
   The security management device comprises: a third step of controlling access of the communication terminal to the server device or the resource content based on a security level determination result for each communication terminal. Method.
2. A security level is defined in advance for each combination pattern of values of a plurality of security reference items predetermined as reference items of the security setting,
   In the first step, the security management device
   As the content of the security setting, obtain the value of each security reference item from the communication terminal,
   In the second step, the security management device
   Comparing the collected value of each security reference item in the communication terminal with a predetermined security level for each combination pattern of the values of the security reference item to determine the security level of the communication terminal. The security management method according to claim 1, wherein:
3. The server device or the resource content accessible for each security level is defined in advance,
   The communication terminal is
   Sending an access request for the resource content to the server device holding the resource content;
   The server device
   Holds an access control list in which whether or not communication is possible for each end user, which is notified in advance from the access control unit, and accepts an access request from the communication terminal based on the access control list or rejects the access request And
   In the third step, the security management device
   When there is a change in the security level of the communication terminal, the server apparatus that has become accessible or inaccessible due to the change in the security level is requested to update the access control list. The security management method according to claim 2, wherein:
4. The server device or the resource content accessible for each security level is defined in advance,
   The communication terminal is
   Sending an access request for the resource content to the security management device;
   In the third step, the security management device
   Based on the security level of the communication terminal that is the source of the access request, whether or not the communication terminal can access the resource content that is the target of the access request or the server device that holds the resource content Determine whether
   When access is possible, the access request is transferred to the server device, and the resource content data transmitted from the server device in response to the access request is transferred to the communication terminal that is the source of the access request. The security management method according to claim 2, wherein when access is impossible, a predetermined error response is transmitted to the communication terminal.
5. The security management device includes:
   Based on the security setting information collected from the communication terminal, when a reference item to be a new security reference item other than the security reference item predetermined as the security setting reference item is detected, the reference item The security management method according to claim 2, further comprising: notifying a system administrator of the detection of an error.
6. In the third step, the security management device
   The security management method according to claim 1, wherein the resource content that the communication terminal has already acquired from the server device is managed based on a determination result of the security level determination unit.
7. The server device or the resource content accessible for each security level is defined in advance,
   In the third step, the security management device
   When there is a change in the security level of the communication terminal determined by the security level determination unit, among the resource contents that the communication terminal has already acquired from the server device, the security level The resource content acquired from the server device that has become inaccessible by the communication terminal or the resource content that has become inaccessible by the change of the security level is defined in advance for the resource content. The security management method according to claim 6, wherein the communication terminal is requested to execute an action.
8. The security management method according to claim 7, wherein the action is deletion of the resource content from the communication terminal.
9. A network system having one or a plurality of communication terminals each used by an end user, and a server device that holds resource contents and provides the requested resource contents to the communication terminal in response to a request from the communication terminal In the security management device that manages the security in
   The security management device includes:
   A security setting collection unit that collects security setting information representing the content of security settings in the communication terminal from each of the communication terminals in the network system;
   A security level determination unit for determining a security level for each communication terminal based on the collected security setting information;
   A security management device comprising: an access control unit that controls access of the communication terminal to the server device or the resource content based on a determination result of the security level determination unit.
10. A network system having one or a plurality of communication terminals each used by an end user, and a server device that holds resource contents and provides the requested resource contents to the communication terminal in response to a request from the communication terminal In the security management device that manages the security in
    A first step of collecting security setting information representing the contents of security settings in the communication terminal from each of the communication terminals in the network system;
    A second step of determining a security level for each of the communication terminals based on the collected security setting information;
    A security management program for executing a process comprising: a third step of controlling access of the communication terminal to the server device or the resource content based on a security level determination result for each communication terminal.

Images