Apparatus and method for controlling communication through firewall, and computer program product

A method of controlling communication through a firewall between an internal device connected to an internal network and an external device connected to an external network, the method comprising:

• performing authentication of the external device to decide whether the external device is authentic;
• creating a result of authentication indicative of whether the external device is authentic;
• storing the result of authentication associated with first identification information unique to the external device in a first storage unit;
• receiving, from a server device that establishes communication between the external device and the internal device, a first message containing
• information that identifies a first application used for communication between the external device and the internal device, and
• the first identification information;
• determining whether the external device is authentic based on the stored result of authentication associated with the first identification information contained in the first message;
• determining whether the first application can be permitted;
• generating, when it is determined at the determining that the external device is authentic and that the first application can be permitted, a second message to set a first port in the firewall, the first port being a port used for communication between the external device and the internal device by using the first application;
• and
• transmitting the second message generated at the generating to the firewall.

A computer program product having a non-transitory computer-readable recording medium containing a plurality of computer-executable instructions to execute a method of controlling communication through a firewall between an internal device connected to an internal network and an external device connected to an external network, and causing a computer to execute the plurality of instructions comprising:

• performing authentication of the external device to decide whether the external device is authentic;
• creating a result of authentication indicative of whether the external device is authentic;
• storing the result of authentication information associated with first identification information unique to the external device in a first storage unit;
• receiving, from a server device that establishes communication between the external device and the internal device, a first message containing
• information that identifies a first application used for communication—between the external device and the internal device, and
• the first identification information;
• determining whether the external device is authentic based on the stored result of authentication associated with the first identification information contained in the first message;
• determining whether the first application can be permitted;
• generating, when it is determined at the determining that the external device is authentic and that the first application can be permitted, a second message to set a first port in the firewall, the first port being a port used for communication between the external device and the internal device by using the first application;
• and
• transmitting the second message generated at the generating to the firewall.