Address reporting device and method for detecting authorized and unauthorized addresses in a network environment

An address reporting method for returning, when a query requesting an address corresponding to a machine name for a machine on a first network provided with a plurality of authorized addresses and a plurality of unauthorized addresses is issued from a second network, the requested address to the second network,

• said address reporting method comprising the steps of:
• a) receiving a query for the address from the second network;
• b) determining whether or not the address corresponding to the machine name designated in the query received in step a) is one of the plurality of unauthorized addresses;
• c) preparing, when it is determined through step b) that the address corresponding to the machine name designated in the query is the unauthorized address, an address pair formed by the unauthorized address and the one of the plurality of authorized addresses;
• d) registering the address pair prepared in step c) in an address pair register table;
• and
• e) returning the authorized address forming the address pair to the second network, when it is determined through step b) that the address corresponding to the machine name designated in the query is one of the plurality of unauthorized addresses.

An address reporting method for returning when a query requesting an address corresponding to a machine name for a machine on a first network provided with a plurality of authorized addresses and a plurality of unauthorized addresses is issued from a second network, the requested address to the second network,

• said address reporting method comprising the steps of:
• a) receiving a query for the address from the second network;
• b) determining whether or not the address corresponding to the machine name designated in the query received in step a) is one of the plurality of unauthorized addresses:
• c) preparing, when it is determined through step b) that the address corresponding to the machine name designated in the query is the unauthorized address, an address pair formed by the unauthorized address and the one of the plurality of authorized addresses;
• d) registering the address pair prepared in step c) in an address pair register table;
• e) returning the authorized address forming the address pair to the second network, when it is determined through step b) that the address corresponding to the machine name is designated in the query is one of the plurality of unauthorized addresses;
• f) determining, when it is determined that the address corresponding to the machine name designated in the query is one of the plurality of unauthorized addresses, whether or not the address pair that contains the unauthorized address corresponding to the host name designated in the query is registered in the address pair register table;
• g) reading, when it is determined through step g) that the address pair that contains the unauthorized address corresponding to the machine name designated in the query is registered in the address pair register table, the authorized address forming the address pair from the address pair register table;
• h) specifying, when it is determined through step f) that the address pair that contains the unauthorized address corresponding to the machine name designated in the query is not registered in the address pair register table, one of the plurality of authorized addresses not registered in the address pair register table;
• and
• i) registering an address pair formed by the unauthorized address corresponding to the machine name designated in the query and the authorized address specified through step h) in the address pair register table, wherein
• when the authorized address is read from the address pair register table through step h), the authorized address read is returned to the second network in step e), and
• when the authorized address is specified through step h), the specified address is returned to the second network in step e).

An address reporting apparatus for returning, when a query for an address corresponding to a machine name of a machine on a first network is issued from a second network, the requested address to the second network, using authorized address storing means for storing an authorized address in the first network, said address reporting apparatus comprising:

• unauthorized address storing means storing an unauthorized address in the first network;
• receiving means receiving the query for the address from the second network;
• address determining means determining whether the address corresponding to the machine name designated in the query received by the receiving means is the authorized address stored in the authorized address storing means or the unauthorized address stored in the unauthorized address storing means;
• address pair preparing means preparing, when it is determined by the address determining means that the address corresponding to the machine designated in the query is the unauthorized address, the address pair formed by the unauthorized address and the authorized address;
• address pair registering means storing the address pair prepared by the address pair preparing means in an address pair register table;
• and
• address reporting means reporting, when it is determined by the address determining means that the address corresponding to the machine name designated in the query is the unauthorized address, the authorized address forming the address pair with the unauthorized address to the second network.

An address reporting apparatus for returning, when a query for an address corresponding to a machine name of a machine on a first network is issued from a second network, the requested address to the second network, using authorized address storing means for storing a plurality of authorized addresses in the first network, said address reporting apparatus comprising:

• unauthorized address storing means storing a plurality of unauthorized addresses in the first network;
• receiving means receiving the query for the address from the second network;
• address determining means determining whether the address corresponding to the machine name designated in the query received by the receiving means is one of the plurality of authorized addresses stored in the authorized address storing means or one of the plurality of unauthorized addresses stored in the unauthorized address storing means;
• address pair preparing means preparing, when it is determined by the address determining means that the address corresponding to the machine designated in the query is one of the plurality of unauthorized addresses, the address pair formed by the unauthorized address and one of the plurality of authorized addresses;
• address pair registering means storing the address pair prepared by the address pair preparing means in an address pair register table;
• and
• address reporting means reporting, when it is determined by the address determining means that the address corresponding to the machine name designated in the query is one of the plurality of unauthorized addresses, the authorized address forming the address pair with the unauthorized address to the second network.

An address reporting apparatus for returning, when a query for an address corresponding to a machine name of a machine on a first network is issued from a second network, the requested address to the second network, using authorized address storing means for storing a plurality of authorized addresses in the first network, said address reporting apparatus comprising:

• unauthorized address storing means storing a plurality of unauthorized addresses in the first network;
• receiving means receiving the query for the address from the second network;
• address determining means determining whether the address corresponding to the machine name designated in the query received by the receiving means is one of the plurality of authorized addresses stored in the authorized address storing means or one of plurality of unauthorized addresses stored in the unauthorized address storing means;
• address pair preparing means preparing, when it is determined by the address determining means that the address corresponding to the machine designated in the query is one of the plurality of unauthorized addresses, the address pair formed by the unauthorized address and one of the plurality of authorized addresses;
• address pair registering means storing the address pair prepared by the address pair preparing means in an address pair register table;
• address reporting means reporting, when it is determined by the address determining means that the address corresponding to the machine name designated in the query is one of the plurality of unauthorized addresses, the authorized address forming the address pair with the unauthorized address to the second network;
• registration determining means determining, when it is determined that the address corresponding to the machine name designated in the query is one of the plurality of unauthorized addresses, whether or not the address pair that contains the unauthorized address corresponding to the machine name designated in the query is registered in the address pair register table;
• address pair register table reading means reading, when it is determined by the registration determining means that the address pair that contains the unauthorized address corresponding to the machine name designated in the query, the address pair register table;
• and
• address specifying means specifying, when it is determined by the registration determining means that the address pair that contains the unauthorized address corresponding to the machine name designated in the query is not registered in the address pair register table, one of the authorized addresses from among the plurality of authorized addresses not registered in the address pair register table, wherein
• the address pair registering means registers the address pair formed by the address corresponding to the machining name designated in the query and the authorized address specified by the address specifying means, in the address pair register table, and
• the address reporting means returns, when the authorized address is read by the address pair register table reading means from the address pair register table, the authorized address read to the second network, or returns, when one of the authorized addresses is specified by the address specifying means, the specified authorized address to the second network.

An address reporting system for returning, when a query for an address corresponding to a machine name of a machine on a first network having an authorized address and an unauthorized address is issued from a second network communicable with the first network, the requested address to the second network, said address reporting system comprising:

• authorized address storing means storing an authorized address;
• unauthorized address storing means storing an unauthorized address;
• receiving means receiving the query for the address from the second network;
• address determining means determining whether the address corresponding to the machine name designated in the query received by the receiving means is the authorized address stored in the authorized address storing means or the unauthorized address stored in the unauthorized address storing means;
• address pair preparing means preparing, when it is determined by the address determining means that the address corresponding to the machine designated in the query is the unauthorized address, the address pair formed by the unauthorized address and the authorized address;
• address pair registering means storing the address pair prepared by the address pair preparing means in an address pair register table;
• and
• address reporting means reporting, when it is determined by the address determining means that the address corresponding to the machine name designated in the query is the unauthorized address, the authorized address forming the address pair with the unauthorized address to the second network.

An address reporting system for returning, when a query for an address corresponding to a machine name of a machine on a first network having a plurality of authorized addresses and a plurality of unauthorized addresses is issued from a second network communicable with the first network, the requested address to the second network, said address reporting system comprising:

• authorized address storing means storing the plurality of authorized addresses;
• unauthorized address storing means storing the plurality of unauthorized addresses;
• receiving means receiving the query for the address from the second network;
• address determining means determining whether the address corresponding to the machine name designated in the query received by the receiving means is the authorized address stored in the authorized address storing means or the unauthorized address stored in the unauthorized address storing means;
• address pair preparing means preparing, when it is determined by the address determining means that the address corresponding to the machine designated in the query is the unauthorized address, the address pair formed by the unauthorized address and the authorized address;
• address pair registering means storing the address pair prepared by the address pair preparing means in an address pair register table;
• and
• address reporting means reporting, when it is determined by the address determining means that the address corresponding to the machine name designated in the query is the unauthorized address, the authorized address forming the address pair with the unauthorized address to the second network.

An address reporting system for returning, when a query for an address corresponding to a machine name of a machine on a first network having a plurality of authorized addresses and a plurality of unauthorized addresses is issued from a second network communicable with the first network, the requested address to the second network, said address reporting system comprising:

• authorized address storing means storing the plurality of authorized addresses;
• unauthorized address storing means storing the plurality of unauthorized addresses;
• receiving means receiving the query for the address from the second network:
• address determining means determining whether the address corresponding to the machine name designated in the query received by the receiving means is the authorized address stored in the authorized address storing means or the unauthorized address stored in the unauthorized address storing means;
• address pair preparing means preparing, when it is determined by the address determining means that the address corresponding to the machine designated in the query is the unauthorized address, the address pair formed by the unauthorized address and the authorized address:
• address pair registering means storing the address pair prepared by the address pair preparing means in an address pair register table;
• address reporting means reporting, when it is determined by the address determining means that the address corresponding to the machine name designated in the query is the unauthorized address, the authorized address forming the address pair with the unauthorized address to the second network;
• registration determining means determining, when it is determined that the address corresponding to the machine name designated in the query is one of the plurality of unauthorized addresses, whether or not the address pair that contains the unauthorized address corresponding to the machine name designated in the query is registered in the address pair register table;
• address pair register table reading means reading, when it is determined by the registration determining means that the address pair that contains the unauthorized address corresponding to the machine name designated in the query, the authorized address forming the address pair from the address pair register table;
• and
• address specifying means specifying, when it is determined by the registration determining means that the address pair that contains the unauthorized address corresponding to the machine name designated in the query is not registered in the address pair register table, one of the authorized addresses from among the plurality of authorized addresses not registered in the address pair register table, wherein
• the address pair registering means registers the address pair formed by the address corresponding to the machine name designated in the query and authorized address specified by the address specifying means, in the address pair register table, and
• the address reporting means returns, when the authorized address is read by the address pair register table reading means from the address pair register table, the authorized address read to the second network, or returns, when one of the authorized addresses is specified by the address specifying means, the specified authorized address to the second network.

An address reporting apparatus for returning, when a query for an address corresponding to a machine name of a machine on a first network is issued from a second network, the requested address to the second network, using an authorized address storing device for storing at least one authorized address in the first network, the address reporting apparatus comprising:

• an address determining device determining whether the address corresponding to the machine name designated in the query is one of the at least one authorized addresses stored in the authorized address storing device or one of at least one unauthorized addresses stored in an unauthorized address storing device;
• an address pair preparing device preparing, when it is determined by the address determining device that the address corresponding to the machine designated in the query is one of the at least one unauthorized addresses, the address pair formed by the unauthorized address and one of the at least one authorized addresses and storing the address pair in an address pair register table;
• and
• an address reporting device reporting, when it is determined by the address determining device that the address corresponding to the machine name designated in the query is one of the at least one unauthorized addresses, the authorized address forming the address pair with the unauthorized address to the second network.