Network quarantine system, network quarantine method and program therefor

A network quarantine method used in a network quarantine system which comprises:

• a quarantine agent mounted to a terminal comprising a normal operation implementation unit that performs operation processing by using an operation network, which judges whether or not the normal operation implementation unit satisfies a policy that is a security basis restricted in advance in the operation network;
• a relay device connected between the terminal and the operation network, which allows the terminal to connect to the operation network based on a result of judgment when the quarantine agent judges that the terminal satisfies the policy;
• and
• a quarantine server which controls actions of the relay device, wherein:
• when judged by the quarantine agent that a normal operation implementation unit of the terminal satisfies the policy, a quarantine server control unit gives an instruction to the relay device to destroy information to which the connection identifier is not added as unrelated information;
• the quarantine server control unit transmits a connection permission notification containing a connection identifier for the operation network to the terminal;
• a VLAN tag operation unit gives an instruction regarding an adding action of the normal operation implementation unit of the terminal to add the connection identifier every time when transmitting transmission information based on the connection permission notification transmitted from the quarantine server;
• and
• the relay device and the quarantine server cooperate to destroy the information and immediately block the terminal from the operation network without keeping the terminal in a state of being connected to the operation network, even when the terminal is judged to satisfy the policy by the quarantine agent and is connected to the operation network, and then the quarantine agent is uninstalled in an unauthorized manner.

A non-transitory computer readable recording medium storing a network quarantine program used in a network quarantine system which comprises:

• a quarantine agent mounted to a terminal comprising a normal operation implementation unit that performs operation processing by using an operation network, which judges whether or not the normal operation implementation unit satisfies a policy that is a security basis restricted in advance in the operation network;
• a relay device connected between the terminal and the operation network, which allows the terminal to connect to the operation network based on a result of judgment when the quarantine agent judges that the terminal satisfies the policy;
• and
• a quarantine server which controls actions of the relay device, the program causing a computer provided in advance to the quarantine server to execute:
• a relay device instruction function which, when judged by the quarantine agent that the normal operation implementation unit of the terminal satisfies the policy, transmits a connection permission notification containing a connection identifier for the operation network to the terminal and gives an instruction to the relay device to destroy information to which the connection identifier is not added as unrelated information, and
• the relay device and the quarantine server cooperate to destroy the information and immediately block the terminal from the operation network without keeping the terminal in a state of being connected to the operation network even when the terminal is judged to satisfy the policy by the quarantine agent and is connected to the operation network, and then the quarantine agent is uninstalled in an unauthorized manner.

A non-transitory computer readable recording medium storing a network quarantine program used in a network quarantine system which comprises:

• a quarantine agent mounted to a terminal comprising a normal operation implementation unit that performs operation processing by using an operation network, which judges whether or not the normal operation implementation unit satisfies a policy that is a security basis restricted in advance in the operation network;
• a relay device connected between the terminal and the operation network, which allows the terminal to connect to the operation network based on a result of judgment when the quarantine agent judges that the terminal satisfies the policy;
• and
• a quarantine server which controls actions of the relay device, the program causing a computer provided in advance to the terminal to execute:
• a VLAN tag operation function which gives an instruction regarding an adding action of the normal operation implementation unit of the terminal to add the connection identifier every time when transmitting transmission information based on the connection permission notification transmitted from the quarantine server;
• wherein:
• the relay device and the quarantine server cooperate to destroy the information and immediately block the terminal from the operation network without keeping the terminal in a state of being connected to the operation network, even when the terminal is judged to satisfy the policy by the quarantine agent and is connected to the operation network, and then the quarantine agent is uninstalled in an unauthorized manner.

A network quarantine system, comprising:

• a quarantine agent mounted to a terminal comprising a normal operation implementation unit that performs operation processing by using an operation network, for judging whether or not the normal operation implementation unit satisfies a policy that is a security basis restricted in advance in the operation network;
• relay means connected between the terminal and the operation network, for allowing the terminal to connect to the operation network based on a result of judgment when the quarantine agent judges that the terminal satisfies the policy;
• and
• a quarantine server for controlling actions of the relay device, wherein:
• the quarantine server comprises a quarantine server control means for functioning when judged by the quarantine agent that the normal operation implementation unit of the terminal satisfies the policy to transmit a connection permission notification containing a connection identifier for the operation network to the terminal and giving an instruction to the relay means to destroy information to which the connection identifier is not added as unrelated information;
• the quarantine agent of the terminal comprises VLAN tag operation means for giving an instruction regarding an adding action of the normal operation implementation unit of the terminal to add the connection identifier every time when transmitting transmission information based on the connection permission notification transmitted from the quarantine server;
• and
• the relay means and the quarantine server cooperate to destroy the information and immediately block the terminal from the operation network without keeping the terminal in a state of being connected to the operation network, even when the terminal is judged to satisfy the policy by the quarantine agent and is connected to the operation network, and then the quarantine agent is uninstalled in an unauthorized manner.