Control system, relay device, and access management program

A relay device configured to relay access from an external device through a plurality of ports to a control device, the control device being configured to control a control object, the relay device comprising:

• a reception unit configured to receive an authentication request from a request source;
• an authentication unit configured to authenticate validity of the request source upon receipt of the authentication request by the reception unit;
• and
• an access management unit configured to control a restriction level of access from the external device to the control device based on a port management list that defines a communication permitted state of each of the plurality of ports for each of a plurality of management modes of the control device, when the validity of the request source is authenticated by the authentication unit,
• wherein the control device is configured to communicate with the external device through at least one port permitted by the port management list of the plurality of ports according to a type of a management mode;
• wherein the plurality of management modes include a development phase, an operation phase, and a maintenance phase;
• wherein a number of ports permitted in the operation phase is smaller than a number of ports permitted in each of the development phase and the maintenance phase;
• and
• wherein the access management unit is configured to control the restriction level of the access from the external device to the control device for the at least one port permitted by the port management list according to the type of the management mode.

An access management method for managing access from an external device through a plurality of ports to a control device, the control device being configured to control a control object, the access management method comprising:

• receiving an authentication request from a request source;
• authenticating validity of the request source upon receipt of the authentication request;
• and
• controlling a restriction level of access from the external device to the control device based on a port management list that defines a communication permitted state of each of the plurality of ports for each of a plurality of management modes of the control device, when the validity of the request source is authenticated,
• wherein the control device communicates with the external device through at least one port permitted by the port management list of the plurality of ports according to a type of a management mode,
• wherein the plurality of management modes include a development phase, an operation phase, and a maintenance phase;
• wherein a number of ports permitted in the operation phase is smaller than a number of ports permitted in each of the development phase and the maintenance phase;
• and
• wherein the restriction level of the access from the external device to the control device is controlled for the at least one port permitted by the port management list according to the type of the management mode.