Loading patent…
AssigneeAhnlab, Inc.
InventorsHeean Park, Kyung Wan Kang, Kwang Tae Kim
Estimating the term…
A system for logically separating a server using client virtualization includes a client terminal including a virtual environment generation unit for generating a virtual environment, and a virtualized server including a local storage unit, an authentication server for performing authentication on the client terminal when a request for access to the local storage unit is received from a process executed in the virtual environment, and a virtualization filter drier for allowing or blocking the access request to the local storage unit based on the authentication result of the client terminal. The client terminal further includes a virtualization filter driver for transmitting the access request from the process executed in the virtual environment to the local storage unit, and blocking the access request from the process without being made through the virtual environment to the local storage unit.
A system for logically separating a server using client virtualization, the system comprising:
A method in a computer network system comprising a client terminal and a server for logically separating the server using client virtualization, the client terminal including a client side virtualization filter driver and the server including a server side virtualization filter driver, the method comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines:…
Multiprogramming arrangements: specific access rights for resources, e.g. using capability register
Computing and data processing
About 4 years 4 months of term left · ends 4 Mar 2031 (estimated)
The present invention relates to a network separation system, and more particularly, to a system and method in a computer network system including multiple client terminals and a virtualized server for logically separating the virtualized server using client virtualization, which are capable of more effectively protecting the virtualized server by allowing an authenticated client terminal to access the virtualized server through only a virtualization environment.
In recent years, with the rapid development of computer and communication technologies, the extensive use of computers and computer networks has become possible. Thus, public organizations, companies or the like use not only internal networks but also external networks such as the Internet to manage business related information or the like and transmit files or the like to the inside or outside.
However, since the external networks such as the Internet are vulnerable to external attacks, public organizations and companies deploy and operate supplementary firewalls to secure important internal information. Although the firewalls are installed, it is impossible to completely protect important internal information against intentional external attacks because they cannot prevent accesses which bypass them.
FIG. 1 is a block diagram of a system for logically separating a server using client virtualization in accordance with an embodiment of the present invention.
FIGS. 2A and 2B are flowcharts illustrating a controlling operation for logically separating a server in accordance with an embodiment of the present invention.
FIG. 3 is a flowchart illustrating a controlling operation for logically separating a server in accordance with another embodiment of the present invention.
Hereinafter, the operating principles of the present invention will be described in detail below with reference to the accompanying drawings. In the following description, well-known functions or constitutions will not be described in detail if they would obscure the invention in unnecessary detail. Further, the terminologies to be described below are defined in consideration of functions in the invention and may vary depending on a user's or operator's intention or practice.
FIG. 1 illustrates a block diagram of a system for logically separating a server using client virtualization in accordance with an embodiment of the present invention.
Referring to FIG. 1, the system in accordance with the present invention includes a client terminal 100 having a virtualization filter driver 110 and a virtualized server 150. The client terminal 100 includes a virtual environment generation unit 101 and a virtualization filter driver 110, and the virtualized server 150 includes a virtualization filter driver 130, a local storage unit 132, an authentication server 134, and an authentication information DB 136.