Network interface that prevents MAC or IP address spoofing of a management station by making a management station address register unchangeable by software

A communication apparatus, connected to a terminal and a transmission line of a local area network, for allowing said terminal to function as one communication terminal of said local area network, said apparatus comprising:

• communication regulation information storing means for storing communication regulation information defined as information for classifying other communication terminals connected to said local area network into a communication terminal permitted to communicate and a terminal not permitted to communicate in accordance with a LAN address;
• take-in means for taking in communication data propagating via the transmission line and containing a receiving LAN address and a transmitting LAN address;
• first judging means for judging whether or not a receiving LAN address taken in by said take-in means is coincident with a self-LAN address defined as a self-given LAN address;
• second judging means for judging whether or not a communication data transmitting terminal is a communication terminal permitted to communicate on the basis of a transmitting LAN address of the communication data in which the receiving LAN address is judged as being coincident with the self-LAN address by said first judging means and the communication regulation information within said communication regulation information storing means;
• and
• supplying means for supplying said terminal with only a content of the communication data in which the transmitting terminal is judged as said communication terminal permitted to communicate by said second judging means.

A communication terminal used for constituting a local area network, comprising:

• communication regulation information storing means for storing communication regulation information defined as information for classifying other communication terminals connected to said local area network into a communication terminal permitted to communicate in accordance with a network address and a terminal not permitted to communicate;
• take-in means for taking in communication data addressed to said means itself from the transmission line on the basis of a receiving LAN address contained in the communication data propagating through the transmission line;
• judging means for judging, based on a transmitting network address contained in the communication data taken in by said take-in means and the communication regulation information within said communication regulation information storing means, whether or not a terminal of transmitting the communication data is a communication terminal permitted to communicate;
• and
• outputting means for outputting, to said terminal, only a content of the communication data transmitted by said terminal judged as the communication terminal permitted to communicate.

A communication apparatus, comprising:

• communication regulation information storing means for storing communication regulation information defined as information for classifying other communication terminals connected to said local area network into a communication terminal permitted to communicate in accordance with a network address and a terminal not permitted to communicate;
• transmitting destination judging means for, when indicated to transmit data by the user, judging whether or not a data transmitting destination is said communication terminal permitted to communicate, on the basis of the network address of said communication terminal to which the relevant data is transmitted and the communication regulation information within said communication regulation information storing means;
• and
• sending means for sending, onto the transmission line, communication data corresponding to the data indicated to be transmitted only when said transmitting destination judging means judges that said data transmitted terminal is said communication terminal permitted to communicate.

A program recording medium recorded with a program for making a computer including a communication control unit connected to a transmission line of a local area network, function as:

• communication regulation information storing means for storing communication regulation information defined as information for classifying other communication terminals connected to said local area network into a communication terminal permitted to communicate and a terminal not permitted to communicate in accordance with a network address;
• judging means for judging, based on a transmitting network address contained in the communication data taken in by said communication control unit and the communication regulation information within said communication regulation information storing means, whether or not a communication data transmitting terminal is a communication terminal permitted to communicate;
• and
• outputting means for outputting only a content of the communication data in which the transmitting terminal is judged as said communication terminal permitted to communicate by said judging means.

A program recording medium recorded with a program for making a computer including a communication control unit connected to a transmission line of a local area network, function as:

• communication regulation information storing means for storing communication regulation information defined as information for classifying other communication terminals connected to said local area network into a communication terminal permitted to communicate and a terminal not permitted to communicate in accordance with a network address;
• judging means for judging, based on a transmitting network address contained in the communication data taken in by said communication control unit and the communication regulation information within said communication regulation information storing means, whether or not a communication data transmitting terminal is a communication terminal permitted to communicate;
• outputting means for outputting only a content of the communication data in which the transmitting terminal is judged as said communication terminal permitted to communicate by said judging means;
• transmitting destination judging means for, when indicated to transmit data by a user, judging whether or not a data transmitting destination is said communication terminal permitted to communicate, on the basis of the network address of said communication terminal to which the relevant data is transmitted and the communication regulation information within said communication regulation information storing means;
• and
• sending means for sending, onto the transmission line, communication data corresponding to the data indicated to be transmitted by controlling said communication control unit only when said transmitting destination judging means judges that said data transmitted terminal is said communication terminal permitted to communicate.