Management system

Abstract

To provide a system capable of appropriately controlling communication without increasing the burden on a network.SOLUTION: In a management system, communication start detection means 14 of terminal devices T1, T2, ..., Tn (hereinafter referred to as a terminal device T) detects the start of communication 18 in the terminal device T. Communication operation determination means 12 refers to recorded communication operation determination information 10 for the communication 18 whose start has been detected, and determines whether the communication 18 is appropriate. If it is determined that the communication 18 is appropriate, the communication 18 is caused to be performed. On the other hand, if it is determined that the start of the communication 18 is inappropriate, the communication operation determination means 12 stops the communication 18. Thus, the start of the inappropriate communication 18 is prevented. As described above, the determination information from a management server device MS is recorded in each terminal device T, and inappropriate processes and communications are eliminated in each terminal device T based on this.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a management system capable of managing inappropriate communications in a terminal device. [Background technology]

[0002] In companies, the number of opportunities for employees to access external server devices such as SaaS from their terminal devices is increasing. In SaaS, the same functions are provided by multiple different SaaS, so in order to avoid unnecessary SaaS usage contracts, companies often specify the SaaS that can be used by the company. In addition, some SaaS does not comply with the company's security policy, and communication to such SaaS may be prohibited.

[0003] For such purposes, communication to external server devices such as SaaS is controlled. For example, a control device is provided in a firewall that connects an in-house network (such as a LAN) to the Internet, which controls the server device that is the communication destination. The control device records SaaS for which communication from a terminal device is permitted and SaaS for which communication is prohibited. Such a control device is also disclosed in Patent Document 1 and Patent Document 2.

[0004] By using the above-mentioned control device, it is possible to control the connection destination from a terminal device connected to the in-house network.

[0005] However, in recent years, the number of people working from home or the like who are performing their duties using terminal devices that are not connected to the company's internal network has increased, and in such cases, the above-mentioned control device cannot control the connection destination.

[0006] To solve this problem, it has been proposed to set up the SaaS so that it can only be accessed from the company's internal network, and to use the SaaS by connecting to the internal network from outside the company (see Non-Patent Document 1). In this case, from a security standpoint, a VPN is used to connect from outside the company to the internal network.

[0007] Alternatively, a control device may be provided on the Internet rather than on an internal company network, and the SaaS may be accessed only via the control device (see Non-Patent Document 2).

[0008] These systems make it possible to control the connected SaaS even if the terminal device is not connected to the company network (that is, even if it is outside the company). [Prior art documents] [Patent documents]

[0009] [Patent Document 1] Patent 5340041 [Patent Document 2] Patent Publication No. 2005-352667 [Non-patent literature]

[0010] [Non-Patent Document 1] Digital Arts Inc. i-FILTER https: / / www.itreview.jp / categories / swg [Non-Patent Document 2] Netskope Intelligent SSE https: / / www.netskope.com / jp / products Summary of the Invention [Problem to be solved by the invention]

[0011] However, in a system such as that described in Non-Patent Document 1, devices outside the company always access the company network via a VPN, which results in a huge number of VPN connections, imposing a heavy burden.

[0012] Furthermore, in a system such as that disclosed in Patent Document 2, a control server device must be constructed on the Internet, which also imposes a large additional burden.

[0013] SUMMARY OF THE PRESENT EMBODIMENT An object of the present invention is to provide a system that can solve the above problems and appropriately control communications without increasing the burden on the network. [Means for solving the problem]

[0014] Several independently applicable features of the present invention are listed below.

[0015] (1)-(5) A management system according to the present invention includes a terminal device to be managed and a management server device capable of communicating with the terminal device, The terminal device includes a communication start detection means for detecting the start of communication in the terminal device, and a communication operation determination means for determining whether or not an operation of the communication whose start is detected is appropriate based on the communication operation determination information recorded in the recording unit, and for terminating the communication whose operation is determined to be inappropriate; the management server device has a communication operation determination information setting means for communicating with the terminal device, transmitting the communication operation determination information to the terminal device and causing the terminal device to record the communication operation determination information; The present invention is characterized by the following features.

[0016] Therefore, since the terminal device can determine whether communication is appropriate and then stop the communication, communication management can be performed efficiently.

[0017] (6)-(10) A management system according to the present invention includes a terminal device to be managed and a management server device capable of communicating with the terminal device, The terminal device comprises a process start detection means for detecting the start of a process in the terminal device, a process operation determination means for determining whether the operation of the process whose start has been detected is appropriate based on the process operation determination information recorded in the recording unit, and terminating the process whose operation has been determined to be inappropriate, a communication start detection means for detecting the start of communication in the terminal device, and a communication operation determination means for determining whether the operation of the communication whose start has been detected is appropriate based on the communication operation determination information recorded in the recording unit, and terminating the communication whose operation has been determined to be inappropriate, The management server device is characterized by comprising a process operation determination information setting means for communicating with the terminal device, transmitting the process operation determination information to the terminal device and causing it to be recorded in the terminal device, and a communication operation determination information setting means for communicating with the terminal device, transmitting the communication operation determination information to the terminal device and causing it to be recorded in the terminal device.

[0018] Therefore, since the terminal device can determine whether the process and communication are appropriate and can stop them, process management and communication management can be performed efficiently.

[0019] (11) The management system of the present invention is characterized in that a terminal device is connected to a local network of an organization and is configured such that the terminal device cannot connect to the local network unless an agent for realizing at least the communication start detection means and the communication operation determination means is installed in the terminal device.

[0020] Therefore, it is possible to indirectly prompt the user that the agent must be installed in the terminal device to be managed.

[0021] (12) The management system according to the present invention is characterized in that the process operation determination means stops the operation of a process that is attempting to perform communication that has been determined to be inappropriate by the communication operation determination means.

[0022] Therefore, any process attempting inappropriate communication can be automatically stopped.

[0023] (13) The management system of the present invention is characterized in that, when the communication operation determination means of the terminal device determines that the communication attempted by the process is inappropriate, it updates the process operation determination information so as to stop the operation of the process thereafter.

[0024] Therefore, it is possible to prohibit the process that attempted to carry out inappropriate communication from being launched thereafter.

[0025] (14) The management system of the present invention is characterized in that, when the communication operation determination means of a terminal device determines that the communication attempted by a process is inappropriate, it transmits the status to the management server device, and the process operation determination information setting means of the management server device, upon receiving the status, updates the process operation determination information so as to stop the operation of the process in the terminal device thereafter, and transmits the updated process operation determination information to the terminal device.

[0026] Therefore, the process that attempted to perform inappropriate communication can be prohibited from being started in other terminal devices as well.

[0027] (15) The system of the present invention is characterized in that, for communication that the communication operation determination means of the terminal device has determined to be inappropriate to operate, it refers to setting information recorded in correspondence with the process that attempted to perform the communication and determines whether to stop or allow the communication.

[0028] Therefore, it is possible to determine whether or not to automatically permit a new communication destination, etc., depending on the process.

[0029] (16) The system of the present invention is characterized in that communication operation judgment information indicates whether a communication destination server device is appropriate for performing communication operations, and when the communication operation judgment means of the terminal device permits communication that it has determined to be inappropriate for operation, it updates the communication operation judgment information so that the communication destination server device becomes an appropriate communication destination.

[0030] Therefore, it is possible to determine whether or not to automatically permit a new communication destination depending on the process, and to update the communication operation determination information.

[0031] (17) The system of the present invention is characterized in that communication operation judgment information indicates whether the destination server device is appropriate for performing communication operations, and when the communication operation judgment means of the terminal device permits communication that it has determined to be inappropriate for operation, it transmits to the management server device a notice that the destination server device should be newly permitted, and when the communication operation judgment information setting means of the management server device receives the notice that the destination server device should be newly permitted, it updates the communication operation judgment information to permit the destination server device and transmits the communication operation judgment information to the terminal device.

[0032] Therefore, it is possible to determine whether or not to automatically permit a new communication destination depending on the process, and to update the communication operation determination information.

[0033] (18)-(22) A management system according to the present invention includes a terminal device to be managed and a management server device capable of communicating with the terminal device, the terminal device includes at least one processor and a storage for recording an agent configured to be executed by the at least one processor, the agent includes a command for detecting a start of communication by the terminal device, determining whether or not an operation of the communication whose start is detected is appropriate based on the communication operation determination information recorded in the recording unit, and stopping the communication whose operation is determined to be inappropriate; The server device comprises at least one processor and a storage for recording a management program configured to be executed by the at least one processor, and the management program comprises instructions for communicating with the terminal device and transmitting the communication operation determination information to the terminal device and recording it in the terminal device.

[0034] Therefore, since the terminal device can determine whether communication is appropriate and then stop the communication, communication management can be performed efficiently.

[0035] (23) The management system of the present invention is characterized in that the agent of the terminal device detects the start of the process, judges the appropriateness of the operation of the process whose start is detected based on process operation judgment information recorded in a recording unit, and further includes an instruction to stop a process that is judged to be inappropriate for operation, and the management program of the management server device further includes an instruction to communicate with the terminal device and transmit the process operation judgment information to the terminal device and record it in the terminal device.

[0036] Therefore, since the terminal device can determine whether the process and communication are appropriate and can stop them, process management and communication management can be performed efficiently.

[0037] In this embodiment, the "process start detection means" corresponds to the processing of the agent 52 that receives the notification in step S1.

[0038] In the embodiment, steps S21 and S23 correspond to the "process operation determining means."

[0039] In this embodiment, the "communication start detection means" corresponds to the processing of the agent 52 that receives the notification in step S5.

[0040] In the embodiment, steps S25 and S26 correspond to the "communication operation determination means."

[0041] In the embodiment, step S152 corresponds to the "process operation determination information setting means."

[0042] In this embodiment, step S154 corresponds to the "communication operation determination information setting means."

[0043] The term "apparatus" is a concept that includes not only one consisting of one computer, but also one consisting of multiple computers connected via a network, etc. Therefore, when the means of the present invention (or a part of the means) is distributed among multiple computers, these multiple computers correspond to the apparatus.

[0044] The term "program" is a concept that includes not only programs that can be executed directly by a CPU, but also programs in source format, compressed programs, encrypted programs, programs that work in conjunction with an operating system to perform their functions, and the like. [Brief description of the drawings]

[0045] [Figure 1] 2 illustrates a functional configuration of a management system according to an embodiment of the present invention. [Diagram 2] This is the system configuration of the management system. [Diagram 3] This is the hardware configuration of the terminal devices IT and OT. [Figure 4] 2 shows a hardware configuration of a management server device MS. [Diagram 5] 2 is a flowchart showing the operation of an agent 52 and an OS 50. [Figure 6] This is a list of processes that are allowed to be launched (process whitelist). [Figure 7] 13 is a flowchart showing the operation of an agent 52, an OS 50, a process P, and a SaaS server device of a terminal device T. [Figure 8] This is a list of URLs for which communication is permitted (communication whitelist). [Figure 9] 13 is a flowchart showing the operation of the agent 52 and the OS 5050 according to another example. [Figure 10] 13 is an operational flowchart of the agent 52, the OS 50, the process P, and the SaaS server device of the terminal device T according to another example. [Figure 11] 13 illustrates a functional configuration of a management system according to a second embodiment. [Figure 12] 13 is a flowchart showing the operation of an agent 52 and a management server program. [Figure 13] 13 illustrates a functional configuration of a management system according to a third embodiment. [Figure 14] 13 is a flowchart showing the operation of the management server program, the SaaS server device, the agent 52, the OS 50, and a process P. [Figure 15] 13 is a flowchart showing the operation of the management server program, the SaaS server device, the agent 52, the OS 50, and a process P. [Figure 16] 13 is an example of setting information. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0046] 1. First embodiment 1.1 Functional configuration 1 shows the functional configuration of a management system according to an embodiment of the present invention, which is provided with terminal devices T1, T2, . . . Tn and a management server device MS capable of communicating with these devices.

[0047] The process operation determination information setting means 22 of the server device S transmits process operation determination information to each of the terminal devices T1, T2,...,Tn. Also, the communication operation determination information setting means 24 transmits communication operation determination information to the terminal devices T1, T2,...,Tn. These determination information are recorded in the recording units 6 of the terminal devices T1, T2,...,Tn.

[0048] A communication start detection means 14 of terminal devices T1, T2, ..., Tn (hereinafter referred to as terminal device T) detects the start of communication 18 in terminal device T. A communication operation determination means 12 refers to the recorded communication operation determination information 10 for the communication 18 whose start has been detected, and determines whether the communication 18 is appropriate.

[0049] If it is determined that the communication 18 is appropriate, the communication operation determination means 12 allows the communication 18 to be performed. On the other hand, if it is determined that the start of the communication 18 is inappropriate, the communication operation determination means 12 stops the communication 18. Thus, the start of an inappropriate communication 18 is prevented. Note that in this embodiment, stopping communication is a concept that includes not only the stop of a communication that has already been started, but also the non-start of a communication that has been requested to be started but has not yet been started.

[0050] The process start detection means 2 of the terminal device T detects the start of a process 16 in the terminal device T. The process operation determination means 4 refers to the recorded process information determination information 8 for the process 16 whose start has been detected, and determines whether or not the start is appropriate.

[0051] If it is determined that the start of the process 16 is appropriate, the process 16 is started as is. On the other hand, if it is determined that the start of the process 16 is inappropriate, the process operation determination means 4 stops the process 16. Thus, the start of an inappropriate process 16 is prevented. Note that in this embodiment, stopping a process is a concept that includes not only the case where an already started process is stopped, but also the case where a process that has been requested to be started but has not yet been started is not started.

[0052] As described above, the determination information from the management server device MS is recorded in each terminal device T, and inappropriate processes and communications are eliminated in each terminal device T based on the determination information. Therefore, inappropriate processes and communications can be determined and eliminated on the terminal device T side. Furthermore, since the above management process can be performed by recording the determination information in each terminal device T, appropriate management can be performed even if the terminal device T is connected to an external network.

[0053] 1.2 System configuration and hardware configuration The system configuration of the management system is shown in Fig. 2. In this embodiment, as the terminal devices T, an in-house terminal device IT and an external terminal device OT are used.

[0054] The in-house terminal devices IT1, IT2, ..., ITm are connected to an in-house network by wire or wirelessly. A shared server device (not shown) is connected to the in-house network, and data necessary for business is stored therein. Each of the in-house terminal devices IT1, IT2, ..., ITm can access the shared server device via the in-house network and use the data.

[0055] The external terminal devices OT1...OTp can be connected to the in-house network via a VPN over the Internet connected by wire or wirelessly. In the case of telecommuting, for example, the external terminal devices OT1...OTp can be connected to the in-house network via the VPN and connected to the shared server device to carry out their work.

[0056] A management server device MS is provided on the Internet, and SaaS server devices SS1 to SSq are also provided on the Internet to provide business applications and the like in the cloud.

[0057] The hardware configuration of the terminal devices IT and OT is shown in Fig. 3. Connected to the CPU 30 are a memory 32, a display 34, an SSD (which may be a storage device such as a hard disk) 36, a DVD-ROM drive 38, a keyboard / mouse 40, and a communication circuit 42. The communication circuit 42 is a circuit for connecting to an in-house network and the Internet.

[0058] The SSD 36 records an operating system 50, processes P1...Pr, an agent 52, communication operation determination information 54, and process operation determination information 56. The processes P1...Pr and the agents 52 cooperate with the operating system 50 to fulfill their functions.

[0059] The operating system 50 and processes P1...Pr are recorded on a DVD-ROM 58 and then installed on the SSD 36 via the DVD-ROM drive 38. Alternatively, they may be installed from an external recording device such as a USB memory. Furthermore, these programs may be downloaded from a server device or a management server device on the Internet and then installed.

[0060] Processes P1...Pr are individual functions of an application program (for example, a process that connects to a SaaS server device SS and obtains a processing result). In other words, a number of processes are gathered together to construct one application program. One process may also construct one application program.

[0061] The agent 52 is downloaded from the management server device MS and installed. The communication operation determination information 54 and the process operation determination information 56 are downloaded from the management server device MS and recorded by the processing of the agent 52. Note that they may also be installed from the DVD-ROM 78.

[0062] 4 shows the hardware configuration of the management server device MS. A memory 62, a communication circuit 64, an SSD (which may be a storage device such as a hard disk) 66, and a DVD-ROM drive 68 are connected to a CPU 60. The communication circuit 64 is a circuit for connecting to the Internet.

[0063] The SSD 66 stores an operating system 70, a management server program 72, communication operation determination information 74, and process operation determination information 76. The management server program 72 cooperates with the operating system 70 to fulfill its functions.

[0064] The operating system 70 and management server program 72 are programs that have been recorded on a DVD-ROM 78 and installed in the SSD 66 via the DVD-ROM drive 68. They may also be installed from an external recording device such as a USB memory. Furthermore, these programs may be downloaded from a server device on the Internet and installed.

[0065] 1.3 Process and communication management 5 and 7 show flowcharts of the process and communication management processing. Fig. 5 is a flowchart of the process management processing. In the terminal devices IT and OT, these processings are executed by the CPU 30 based on an operating system (hereinafter, OS) 50, an agent 52, and processes P1 to Pr, and in the management server device MS, the CPU 60 executes them based on a management server program 72. Hereinafter, when it is said that the OS 50 executes processing, it means that the CPU 30 executes processing based on the OS 50. The same applies to the other programs.

[0066] In this embodiment, when the OS 50 receives a process start command, the OS 50 uses a hook function or the like provided in the OS 50 to notify the agent 52 of the presence of the start command (step S1). The OS 50 may receive a process start command when the user double-clicks an application icon to start the application, when another process attempts to start the process, or the like.

[0067] When the agent 52 of the terminal device IT or OT receives a process start command from the OS 50 of the terminal device IT or OT, the agent 52 reads the process operation determination information 56 from the SSD 36 (step S21). In the figure, the horizontal dashed lines indicate the exchange between programs in the same terminal device IT or OT. Next, for the process for which the start command was issued, the agent 52 refers to the process operation determination information 56 and determines whether or not the process should be started (step S23).

[0068] 6 shows the process operation determination information 56. In this embodiment, the process operation determination information 56 is a permission list of processes that are permitted to be started. The agent 52 judges whether a process for which a start command has been issued is on this permission list. If the process is on the list, it is judged that it is appropriate to start the process, and if not, it is judged that it is not appropriate to start the process.

[0069] The agent 52 notifies the OS 50 of whether or not the process commanded to be started is appropriate (step S23). The OS 50 receives this notification. If the notification indicates that the start is appropriate, the OS 50 starts the process (step S3).

[0070] On the other hand, if the notification indicates that the start is inappropriate, the OS 50 does not start the process.

[0071] In this manner, it is possible to prevent processes from being started unless they are permitted in the process permission list. Note that, as described later, this process permission list can be rewritten from the management server device MS by the administrator controlling the management server device MS. Therefore, in each of the terminal devices IT and OT, it is possible to perform management so that only processes designated by the administrator can be operated.

[0072] Figure 7 shows a flowchart of the communication management process. This is the process when the process P, which has been started and is running as described above, attempts to communicate with the SaaS server device SS on the Internet. In the figure, the horizontal dashed lines indicate exchanges between programs in the same terminal devices IT and OT. The horizontal solid lines indicate communication between the terminal devices IT and OT and the SaaS server device SS.

[0073] When the process P of the terminal devices IT and OT uses the functions of the SaaS server device SS on the Internet, it is necessary to request the OS 50 to communicate with the SaaS server device SS and receive the processing results. Therefore, the process P issues a communication command to the OS 50 indicating the URL of the SaaS server device with which the process P is to communicate and indicating the desired processing content (step S41).

[0074] In this embodiment, when the OS 50 receives a communication command, the OS 50 uses a hook function or the like provided in the OS 50 to notify the agent 52 of the receipt of the communication command (step S5).

[0075] When the agent 52 of the terminal device IT or OT receives a communication command from the OS 50 of the terminal device IT or OT, the agent 52 reads the communication operation determination information 54 from the SSD 36 (step S25). Then, the agent 52 refers to the communication operation determination information 54 and determines whether the commanded communication is appropriate (step S26).

[0076] 8 shows the communication operation determination information 54. In this embodiment, the communication operation determination information 54 is a list of permitted URLs of the SaaS server device SS for which communication is permitted. The agent 52 judges whether the URL of the SaaS server device SS indicated by the communication command is on this permitted URL list. If it is on the list, it is determined that it is appropriate to communicate with the SaaS server device SS, and if it is not on the list, it is determined that it is not appropriate to communicate with the SaaS server device SS.

[0077] If the communication destination has the same URL as the URL in the allowed URL list and is at a lower level, it is determined to be an allowed URL. For example, if www.xxx.jp is in the allowed URL list, the communication destinations www.xxx.jp / yyy, www.xxx.jp / zzz, and www.xxx.jp / yyy / kkk are all determined to be allowed URLs. It is also possible to not allow communication unless the URL exactly matches the URL in the allowed URL list.

[0078] The agent 52 notifies the OS 50 of the suitability of communication with the SaaS server SS that has received the communication command (step S26). The OS 50 receives this notification.

[0079] If the notification indicates that communication with the SaaS server SS is appropriate, the OS50 communicates with the SaaS server SS and requests the desired processing (step S7). In response to this, the SaaS server SS executes the requested processing and transmits the processing results to the OS50 of the terminal devices IT and OT (step S101). The OS50 receives the processing results through communication and provides them to the process P (step S8).

[0080] Thereafter, the process P can use the processing functions of the SaaS server device SS via the OS 50 as necessary.

[0081] On the other hand, if the OS 50 receives the notification in step S6 that the communication with the SaaS server SS is inappropriate, the OS 50 does not communicate with the SaaS server SS that is the target of the communication command.

[0082] In this manner, it is possible to prevent communication only with the SaaS server device SS permitted in the communication permission list. Note that this communication permission list is rewritable from the management server device MS by the administrator, as described later. Therefore, each terminal device IT, OT can be managed so that communication only with the SaaS management server device SS designated by the administrator is prevented.

[0083] In this embodiment, the agent 52 is installed not only on the terminal device IT, which is assumed to be used by connecting to the in-house network, but also on the terminal device OT, which is used for telecommuting (not assumed to be used by connecting to the in-house network), etc. Therefore, process management and communication management can be performed on these external terminal devices OT in the same way as on the in-house terminal devices IT. In this case, no additional device is required.

[0084] When connecting an external terminal device OT to the internal network, a VPN is used to connect to the internal network. This allows connection to the internal network from outside while ensuring security. However, connection to the internal network is not essential to connect to the SaaS server device SS. This is because the external terminal device OT is also managed by the agent 52. Therefore, the burden on the VPN is not unnecessarily increased.

[0085] 1.4 Agent installation process As described in the above embodiment, if the agent 52 is installed in each of the terminal devices IT and OT, the above-mentioned process management and communication management can be performed. In other words, if the agent 52 is not installed in the terminal devices IT and OT to be managed, the above-mentioned management cannot be performed.

[0086] In this embodiment, in order to ensure that the agent 52 is installed in the terminal devices IT and OT that are to be managed, the following is done.

[0087] In an organization such as a company, when terminal devices IT and OT are lent to members of the organization such as employees, the agent 52 is installed in advance. This makes it possible to ensure the introduction of the agent 52 in the terminal devices IT and OT.

[0088] The administrator also records the MAC addresses of the terminal devices IT and OT in which the agent 52 is installed in a network device such as a router in the company network. The router allows only the terminal devices IT and OT whose MAC addresses are recorded to connect to the company network.

[0089] Therefore, terminal devices on which the agent 52 is not installed, that is, terminal devices that are not IT or OT devices loaned from the organization, cannot connect to the in-house network. For this reason, it is difficult to carry out business operations using such terminal devices.

[0090] When using a terminal device other than the loaned one for business purposes, the user must install the agent 52, contact the administrator, and have the MAC address set in the router so that the user can connect to the company network.

[0091] In this way, a state in which the agent 52 is substantially installed in the terminal device used for business can be created.

[0092] Alternatively, the management server device MS may collect the MAC addresses of the terminal devices IT and OT in which the agent 52 is installed, and based on this, the management server device MS may set the MAC addresses in the router, thereby reducing the work of the administrator.

[0093] 1.5 Update of process operation judgment information and communication operation judgment information It has been explained above that process management and communication management are performed based on the process operation determination information (the process permission list in the above) and the communication operation determination information (the communication permission list in the above) recorded in the terminal devices IT and OT.

[0094] These pieces of determination information are recorded in the management server device MS, downloaded by each of the terminal devices IT and OT, and then recorded in each of the terminal devices IT and OT.

[0095] In addition, the administrator can access the management server MS using his / her own terminal device IT, update the judgment information, and have it recorded in each terminal device IT and OT. This makes it possible to deal with newly permitted processes and communications, and newly unpermitted processes and communications.

[0096] 1.6 Variations (Other) (1) In the above embodiment, both the appropriateness of process startup and the appropriateness of communication are determined to control the operation. However, the operation may be controlled by determining only the appropriateness of process startup or only the appropriateness of communication.

[0097] (2) In the above embodiment, the determination information is acquired every time in steps S21 and S25. However, the determination information may be acquired from the SSD 36 only once at startup and stored in the memory 32 for reference.

[0098] (3) In the above embodiment, in managing process startup, a hook function or the like is used so that upon receiving a command to start a process P, OS 50 does not immediately start the process P, but instead starts only those processes that agent 52 determines to be appropriate.

[0099] However, the agent 52 may perform control using a process list indicating currently running processes as follows.

[0100] The processing flow chart for this case is shown in FIG.

[0101] When a process start command is received, the OS50 of the terminal devices IT and OT starts the process (step S11). At this time, the OS50 adds the started process to a process list showing currently operating processes.

[0102] The agent 52 of the terminal devices IT and OT constantly (at a predetermined time interval) monitors the process list recorded and updated by the OS 50 (step S31). The agent 52 acquires the process operation determination information 56 (the process permission list in FIG. 6) and determines whether or not a process that has newly appeared in the process list (i.e., newly started) is allowed to start.

[0103] If the started process is on the process permission list, the start of the process is determined to be appropriate, and if the started process is not on the process permission list, the start of the process is determined to be inappropriate (step S33).

[0104] When the agent 52 determines that the start of the process is inappropriate, it notifies the OS 50 of the forced termination of the process (step S34). The OS 50, which has received the forced termination instruction, forcibly terminates the process (step S13).

[0105] On the other hand, if the agent 52 determines that the start of the process is appropriate, it does not instruct the process to be forcibly terminated.

[0106] As described above, process launch can be managed using the process list managed by the OS 50. In this example, an inappropriate process will be launched once, but it will be forcibly terminated in a short time, so that it is practically the same as not allowing the process to be launched.

[0107] In the above, a process list showing currently running processes is used. However, instead of this, a similar process may be performed using an event log. An event log is a log that records when the OS 50 starts a new process. By monitoring this event log, the agent 52 can know when a new process is started, and can execute the processes from step S32 onward in FIG. 9.

[0108] The above describes the cases where the process list and the event log are used. Since the process list shows the currently running processes, it is possible to eliminate unnecessary processing of processes that have already finished.

[0109] (4) In the above embodiment, in managing communications, a hook function or the like is used so that upon receiving a communication command, the OS 50 does not immediately initiate communications, but only allows communications that the agent 52 judges to be appropriate.

[0110] However, the agent 52 may perform control using a communication status list indicating currently active communications as follows.

[0111] The processing flow chart for this case is shown in Fig. 10. When the OS 50 receives a communication command from the process P, it communicates with the SaaS server device SS specified in the communication command and requests the specified processing (step S15). At this time, the OS 50 adds communication with the SaaS server device SS to a communication status list indicating the current communication status.

[0112] The agent 52, which constantly monitors the communication status list (at predetermined time intervals), acquires the communication newly added to the communication status list (step S27). The agent 52 determines whether the communication with the SaaS server SS is appropriate based on the communication operation determination information 54 (communication permission list).

[0113] If the communication is not on the communication permission list and is determined to be inappropriate, the agent 52 sends an instruction to the OS 50 to forcibly terminate the communication (step S30). In response to this, the OS 50 forcibly terminates the communication (step S17).

[0114] On the other hand, if it is determined that the request is appropriate and is on the communication permission list, the agent 52 does not issue a forced termination instruction to the OS 50 50. Therefore, the OS 50 receives the result from the SaaS server SS and notifies the process P of the result (step S18).

[0115] (5) In the above embodiment, the management server device MS is placed on the Internet. However, the management server device MS may be placed on the company's internal network. This may be the case if the objects to be managed are only the terminal devices IT connected to the company's internal network. In this case, if the terminal devices connected to the external network are also to be managed, it is only necessary to assume that such terminal devices are always connected to the company's internal network via VPN for use.

[0116] (6) In the above embodiment, a process permission list (whitelist) of processes that are permitted to be started is used as the process operation determination information 56. However, a process list (blacklist) of processes that are not permitted to be started may be used instead.

[0117] Similarly, the communication operation determination information 54 may use a non-permitted URL list (blacklist) that does not permit communication, instead of a permitted URL list (whitelist) that permits communication.

[0118] (8) In the above embodiment, the communication with the SaaS server device SS is managed. However, the communication with other devices on the Internet, such as a normal web server device, may be managed.

[0119] (9) In the above embodiment, a whitelist or blacklist of destination URLs is used as communication operation determination information. In other words, the appropriateness is determined based on the destination, and communication operation determination information is constructed.

[0120] However, the communication operation determination information may be configured by determining suitability based on communication conditions (communication speed, communication method (wireless or wired, etc.), security status such as SSL, communication capabilities of the communication destination server device, etc.).

[0121] (10) In the above embodiment, protocols such as http: / / , https: / / , and ftp are not specified in the permitted URL list in Fig. 8. However, these may be specified.

[0122] Also, the domain or IP address may be specified, and if necessary, a port number may be specified.

[0123] (11) In the above embodiment, the permission list is used to permit or prohibit the start of each process, and the URL list is used to permit or prohibit the connection of each communication destination.

[0124] However, when an administrator wanted to allow an employee to use a specific SaaS service, he or she had to register multiple processes required to receive that service in an authorization list and multiple communication destinations in a URL list, which was cumbersome.

[0125] Therefore, a set of information that compiles multiple processes and multiple communication destinations required to receive each service may be recorded in a maintenance server device installed on the Internet. The administrator can access this maintenance server device and obtain the set of information that compiles multiple processes and multiple communication destinations required for each service. This makes it easy to set the permission list and URL list.

[0126] Furthermore, in the maintenance server device, if there is a change in the process or communication destination required for each service, the set information is updated. This allows the administrator to easily respond to changes in the process and communication destination of each service by obtaining the set information from the maintenance server device. Furthermore, the maintenance server device may update the process and communication destination for the management server device (deleting the old process and communication destination and adding the new process and communication destination). Furthermore, the management server device may access the maintenance server device to obtain and update the set information.

[0127] The above explains how to update the necessary processes and communication destinations for each service, but the same applies when newly registering the necessary processes and communication destinations for each service.

[0128] (12) The above-described embodiments and modifications may be implemented in combination with each other. Furthermore, these embodiments and modifications may be implemented in combination with other embodiments and modifications thereof.

[0129] 2. Second embodiment 2.1 Functional configuration Fig. 11 shows the functional configuration of a management system according to the second embodiment. The basic process start management and communication management in this embodiment are the same as those in the first embodiment. However, the difference is that when communication is stopped, the process operation determination information is updated so that the start of the process that attempted to perform the communication is prohibited thereafter.

[0130] The communication operation determination means 12 judges whether communication is appropriate by referring to the communication operation determination information 10. If it judges it to be inappropriate, it stops the communication 18. At this time, the communication operation determination means 12 transmits to the process operation determination information setting means 22 of the management server device MS a notice that communication has been stopped and a message about the process that attempted to perform the communication.

[0131] The process operation determination information setting means 22 receives this, updates the process operation determination information so as to prohibit the start of the process, and transmits it to the terminal device T. As a result, the start of the process is prohibited thereafter.

[0132] As described above, the process operation determination information is updated to prohibit the start of a process that attempted inappropriate communication, so that the start of the process can be prohibited thereafter.

[0133] 2.2 System configuration and hardware configuration The system configuration and hardware configuration are the same as those in the first embodiment shown in FIGS.

[0134] 2.3 Process and communication management The process management process is the same as that in Fig. 5 in the first embodiment. However, in this embodiment, a list of processes that are not permitted to be started (start-up blacklist) is used as the process operation determination information. Therefore, the agent 52 allows the start-up of a process if it is not on this list of processes that are not permitted to be started. Also, the agent 52 does not allow the start-up of a process that is on the start-up blacklist.

[0135] The flowchart of the communication management process is also the same as that in Fig. 7 in the first embodiment. In this embodiment, as in the first embodiment, a list of URLs for which communication is permitted (communication whitelist) is used as communication operation determination information.

[0136] In this embodiment, as described above, the suitability of starting a process is judged by the start blacklist. Therefore, it is possible to install and start a newly supplied process (for example, a process provided by the SaaS server device SS that has not been used in the terminal devices IT and OT) in the terminal devices IT and OT.

[0137] If this process communicates with an unauthorized destination, the communication is prohibited by the communication whitelist. Therefore, no particular problems arise with respect to the communication. However, because the operation of the process itself is not prohibited, the process will be started multiple times, unnecessarily consuming processing power in the terminal devices IT and OT.

[0138] Therefore, in this embodiment, the start of a process that attempts to perform inappropriate communication is prohibited.

[0139] 7, the agent 52 refers to a list of URLs for which communication is permitted (communication whitelist) and determines whether the communication to be performed by the process P is appropriate. This is the same as in the first embodiment.

[0140] However, if the agent 52 determines that the communication is inappropriate, it performs the process shown in Fig. 12. The agent 52 requests the management server device MS to prohibit the start of the process P that attempted to perform the communication determined to be inappropriate.

[0141] In response to this, the management server program 72 of the management server device MS updates the start blacklist (process operation determination information 76) by adding the process P (step S151). Furthermore, the management server program 72 transmits the rewritten start blacklist (process operation determination information 76) to the agent 52 of each of the terminal devices IT and OT (step S152).

[0142] The agent 52 of each of the terminal devices IT and OT that has received the start blacklist rewrites the start blacklist (process operation determination information 56) based on the start blacklist (step S123).

[0143] In this manner, the process P that has been determined to have performed inappropriate communication is prohibited from being subsequently started in each of the terminal devices IT and OT.

[0144] 2.4 Modifications (Other) (1) In the above embodiment, a list of URLs for which communication is not permitted (communication blacklist) is used as the communication operation determination information. However, a list of URLs for which communication is permitted (communication whitelist) may be used as the communication operation determination information.

[0145] (2) In the above embodiment, in step S152, the management server program instructs all the terminal devices IT and OT to rewrite the process operation determination information.

[0146] However, it may also be possible to instruct the agent 52 to rewrite the process operation determination information only for the terminal devices IT and OT on which the process that attempted to perform inappropriate communication operation was running (in this case, the agent 52 itself may rewrite the process operation determination information for the terminal devices IT and OT without going through the management server device MS).

[0147] In addition, the information may be rewritten for all of the terminal devices IT and OT that belong to the same department (or terminal devices having a predetermined relationship) as the terminal devices IT and OT on which the process was run.

[0148] (3) In the above embodiment, the agent 52 requests the management server device MS to update the process operation determination information in step S122.

[0149] However, the agent 52 may forcibly terminate the process P that attempted to perform inappropriate communication without making such a request, or may request an update of the process operation determination information in step S122 after forcibly terminating the process P.

[0150] (4) The above-described embodiments and modifications may be implemented in combination with each other. Furthermore, these embodiments and modifications may be implemented in combination with other embodiments and their modifications.

[0151] 3. Third embodiment 3.1 Functional configuration Fig. 13 shows the functional configuration of a management system according to the third embodiment. The basic process start management and communication management in this embodiment are the same as those in the first embodiment. However, the difference is that the communication operation determination information is updated so that communication is permitted for the communication destination of the process that is permitted to start.

[0152] The communication operation determination means 12 determines whether the communication is appropriate by referring to the communication operation determination information 10. If it is determined to be inappropriate, it determines whether to stop the communication or to permit the communication based on the setting information recorded in association with the process P that attempted to perform the communication.

[0153] If the setting information specifies that communication should be stopped, the current communication is stopped. If the setting information specifies that communication should be permitted, the current communication is permitted and a communication operation determination information update command is transmitted to the management server device MS. In response to this, the communication operation determination information setting means 24 of the management server device MS updates the communication operation determination information to permit the communication and transmits the updated information to the terminal device T.

[0154] In response to this, the terminal device T rewrites the communication operation determination information 10. Therefore, from then on, the communication is permitted.

[0155] Therefore, by setting the configuration information, it is possible to automatically permit communication for a given process.

[0156] 3.2 System configuration and hardware configuration The system configuration and hardware configuration are the same as those in the first embodiment shown in FIGS.

[0157] 3.3 Process and communication management The process management process is the same as that in Fig. 5 in the first embodiment. However, in this embodiment as well, a list of processes that are permitted to be started (startup whitelist) is used as the process operation determination information. Therefore, the agent 52 allows the start of a process if it is listed in this list of permitted processes. Also, the agent 52 does not allow the start of a process that is not listed in the start up whitelist.

[0158] Flowcharts of the communication management process are shown in Figures 14 and 15. In this embodiment, as in the first embodiment, a list of URLs for which communication is permitted (communication whitelist) is used as communication operation determination information.

[0159] In the first embodiment, communication to URLs that are not included in the communication whitelist is prohibited. However, the following problems may occur.

[0160] When the launch of a dedicated application (process) for connecting to the SaaS server device SS and using its functions is permitted, the SaaS server device SS may provide a new URL as a connection destination for providing a new function. In this case, since the new URL is not listed in the communication whitelist, communication will be rejected according to the first embodiment.

[0161] This means that in order to use new functions of the SaaS server device, the administrator must rewrite the communication operation determination information, which is cumbersome.

[0162] In this embodiment, in order to deal with the above-mentioned situation, the communication operation determination information is automatically updated so that communication to the new destination URL is permitted depending on the process.

[0163] The process P issues a communication command to the OS 50 indicating the URL of the SaaS server device as the communication destination and indicating the desired processing content (step S41).

[0164] When the agent 52 of the terminal device IT or OT receives a communication command from the OS 50 of the terminal device IT or OT (step S5), it reads out the communication operation determination information 54 from the SSD 36 (step S25). Then, it refers to the communication operation determination information 54 and judges whether the commanded communication is appropriate (step S26). In this embodiment, as in the first embodiment, a list of URLs for which communication is permitted (communication whitelist) is used as the communication operation determination information 54.

[0165] If the agent 52 determines that communication is appropriate, it notifies the OS 50 of communication permission in step S124 of FIG.

[0166] On the other hand, if it is determined that communication is not appropriate, the denial of communication is not immediately conveyed to the OS 50, but rather the setting information is referenced to determine whether communication is permitted or not.

[0167] The agent 52 reads out the setting information recorded in association with the process that is attempting to communicate from the SSD 36. In this embodiment, the setting information is included in the communication operation determination information 54. An example of the setting information is shown in Fig. 16. Whether or not to automatically permit the communication destination is recorded in association with each process.

[0168] The agent 52 refers to this setting information and judges whether or not automatic permission is given to the communication destination for the process that is to perform communication (step S123). If automatic permission is "not given", the agent 52 notifies the OS 50 that communication is not permitted in step S124.

[0169] If automatic permission is "yes", in step S125, permission for communication is transmitted to the OS 50. Therefore, communication is permitted even for a URL that is not included in the communication whitelist.

[0170] Furthermore, the agent 52 requests the management server program to update the communication whitelist (communication operation determination information 54) so ​​that communication with the URL is determined to be appropriate (step S126).

[0171] The management server program receiving this updates the communication whitelist by adding the URL (step S153). Furthermore, the management server program transmits this to the agent 52 of each of the terminal devices IT and OT (step S154).

[0172] The agent 52 of each of the terminal devices IT and OT that has received the updated communication whitelist records and rewrites it in the SSD 36 (step S127).

[0173] In this manner, by setting the configuration information, it is possible to automatically permit a communication destination for a given process.

[0174] The reason why automatic permission of communication destinations is not given uniformly to all processes is that processes that are not deemed safe by the administrator are dangerous. The administrator can set configuration information in each of the terminal devices IT and OT via the management server device MS and determine which processes are to be given automatic permission of communication destinations.

[0175] 3.4 Modifications (Other) (1) In the above embodiment, in step S154, the management server program instructs all of the terminal devices IT and OT to rewrite the communication operation determination information.

[0176] However, it may also be possible to instruct the agent 52 to rewrite the communication operation judgment information only for the terminal devices IT and OT that have requested the communication permission setting (in this case, the agent 52 itself may rewrite the communication operation judgment information for the terminal devices IT and OT without going through the management server device MS).

[0177] In addition, the setting may be rewritten for all terminal devices IT and OT that belong to the same department (or terminal devices having a predetermined relationship) as the terminal device IT or OT that has requested the communication permission setting.

[0178] (2) In the above embodiment, the communication operation determination information is updated in step S126. However, the communication operation determination information may not be updated and a communication permission notification may simply be given to the OS 50 (step S125).

[0179] (3) In the above embodiment, the setting information is a part of the communication operation determination information. However, the setting information may be provided separately from the communication operation determination information.

[0180] (4) The above-described embodiments and modifications may be implemented in combination with each other. Furthermore, these embodiments and modifications may be implemented in combination with other embodiments and their modifications.

Claims

1. A management system including a terminal device to be managed and a management server device capable of communicating with the terminal device, The terminal device A communication start detection means for detecting the start of communication in the terminal device; a communication operation determination means for determining whether or not the operation of the communication, the start of which is detected, is appropriate based on the communication operation determination information recorded in the recording unit, and for terminating the communication that is determined to be inappropriate to operate; The management server device a communication operation determination information setting means for communicating with the terminal device and transmitting the communication operation determination information to the terminal device and causing the terminal device to record the communication operation determination information; A management system comprising:

2. A terminal device capable of communicating with a management server device, A communication start detection means for detecting the start of communication in the terminal device; a communication operation determination means for determining whether or not the operation of the communication, the start of which has been detected, is appropriate based on communication operation determination information transmitted from the management server device and recorded in a recording unit, and for terminating the communication that is determined to be inappropriate to operate; A terminal device comprising:

3. An agent program for implementing an agent device capable of communicating with a management server device by a computer, the agent program comprising: A communication start detection means for detecting the start of communication in the terminal device; An agent program for functioning as a communication operation judgment means for judging the appropriateness of a communication operation whose start has been detected based on communication operation judgment information transmitted from the management server device and recorded in a recording unit, and for terminating any communication that is judged to be inappropriate to operate.

4. A management server device capable of communicating with a terminal device, a communication operation determination information setting means for communicating with the terminal device, which monitors communication operations in the terminal device based on communication operation determination information, and transmitting the communication operation determination information to the terminal device and causing the terminal device to record the communication operation determination information; A management server device comprising:

5. A management server program for implementing a management server device capable of communicating with a terminal device by a computer, the management server program comprising: A management server program for functioning as a communication operation judgment information setting means that communicates with the terminal device, monitors the communication operation in the terminal device based on communication operation judgment information, and transmits the communication operation judgment information to the terminal device and records it in the terminal device.

6. A management system including a terminal device to be managed and a management server device capable of communicating with the terminal device, The terminal device a process initiation detection means for detecting the initiation of a process in the terminal device; a process operation determination means for determining whether or not the operation of a process whose start has been detected is appropriate based on the process operation determination information recorded in the recording unit, and for terminating a process whose operation is determined to be inappropriate; A communication start detection means for detecting the start of communication in the terminal device; a communication operation determination means for determining whether or not the operation of the communication, the start of which is detected, is appropriate based on the communication operation determination information recorded in the recording unit, and for terminating the communication that is determined to be inappropriate to operate; The management server device a process operation determination information setting means for communicating with the terminal device and transmitting the process operation determination information to the terminal device and causing the terminal device to record the process operation determination information; a communication operation determination information setting means for communicating with the terminal device and transmitting the communication operation determination information to the terminal device and causing the terminal device to record the communication operation determination information; A management system comprising:

7. A terminal device capable of communicating with a management server device, a process initiation detection means for detecting the initiation of a process in the terminal device; a process operation determination means for determining whether or not the operation of a process whose start has been detected is appropriate based on process operation determination information transmitted from the management server device and recorded in a recording unit, and for terminating a process whose operation is determined to be inappropriate; A communication start detection means for detecting the start of communication in the terminal device; a communication operation determination means for determining whether or not the operation of the communication, the start of which has been detected, is appropriate based on communication operation determination information transmitted from the management server device and recorded in a recording unit, and for terminating the communication that is determined to be inappropriate to operate; A terminal device comprising:

8. An agent program for implementing an agent device capable of communicating with a management server device by a computer, the agent program comprising: a process initiation detection means for detecting the initiation of a process in the terminal device; a process operation determination means for determining whether or not the operation of a process whose start has been detected is appropriate based on process operation determination information transmitted from the management server device and recorded in a recording unit, and for terminating a process whose operation is determined to be inappropriate; A communication start detection means for detecting the start of communication in the terminal device; An agent program for functioning as a communication operation judgment means for judging the appropriateness of a communication operation whose start has been detected based on communication operation judgment information transmitted from the management server device and recorded in a recording unit, and for terminating any communication that is judged to be inappropriate to operate.

9. A management server device capable of communicating with a terminal device, a process operation determination information setting means for communicating with the terminal device, which monitors the operation of the process in the terminal device based on process operation determination information, and transmitting the process operation determination information to the terminal device and causing the terminal device to record the information; a communication operation determination information setting means for communicating with the terminal device, which monitors the communication operation in the terminal device based on communication operation determination information, and transmitting the communication operation determination information to the terminal device and causing the terminal device to record the communication operation determination information; A management server device comprising:

10. A management server program for implementing a management server device capable of communicating with a terminal device by a computer, the management server program comprising: a process operation determination information setting means for communicating with the terminal device, which monitors the operation of the process in the terminal device based on process operation determination information, and transmitting the process operation determination information to the terminal device and causing the terminal device to record the information; A management server program for functioning as a communication operation judgment information setting means that communicates with the terminal device, monitors the communication operation in the terminal device based on communication operation judgment information, and transmits the communication operation judgment information to the terminal device and records it in the terminal device.

11. In any one of the systems according to claims 1 and 6, the terminal devices according to claims 2 and 7, the agent programs according to claims 3 and 8, the management server devices according to claims 4 and 9, and the management server programs according to claims 5 and 10, The system, device, or program is characterized in that the terminal device is connected to a local network of an organization, and is configured so that it cannot connect to the local network unless an agent for realizing at least the communication start detection means and the communication operation determination means is installed in the terminal device.

12. In any one of the system of claim 6, the terminal device of claim 7, the agent program of claim 8, the management server device of claim 9, and the management server program of claim 10, The system, device, or program, wherein the process operation determination means stops the operation of a process that attempts to perform communication that is determined to be inappropriate by the communication operation determination means.

13. The system, device or program of claim 12, A system, device, or program characterized in that, when the communication operation determination means of the terminal device determines that the communication attempted by the process is inappropriate, it updates the process operation determination information so as to stop the operation of the process thereafter.

14. The system, device or program of claim 12, When the communication operation determination means of the terminal device determines that the communication that the process is attempting to perform is inappropriate, the communication operation determination means transmits the situation to the management server device; The system, device, or program is characterized in that, when the process operation judgment information setting means of the management server device receives the status, it updates the process operation judgment information and sends it to the terminal device so as to stop operation of the process on the terminal device thereafter.

15. In the system according to claim 6, the terminal device according to claim 7, the agent program according to claim 8, the management server device according to claim 9, or the management server program according to claim 10, The communication operation determination means of the terminal device refers to setting information recorded in correspondence with the process that attempted to perform communication that is determined to be inappropriate to operate, and determines whether to stop or allow the communication.

16. The system, device or program of claim 15, The communication operation determination information indicates whether or not the communication destination server device is appropriate for performing a communication operation, The system, device, or program is characterized in that, when the communication operation determination means of the terminal device allows communication that it has determined to be inappropriate to operate, it updates the communication operation determination information so that the server device of the communication destination becomes an appropriate communication destination.

17. The system, device or program of claim 15, The communication operation determination information indicates whether or not the communication destination server device is appropriate for performing a communication operation, the communication operation determination means of the terminal device transmits to the management server device a notification that the server device to which the communication is to be transmitted should be newly permitted when the communication operation determination means of the terminal device has determined that the communication operation is inappropriate; The system, device, or program is characterized in that, when the communication operation determination information setting means of the management server device receives a signal that the communication destination server device should be newly authorized, it updates the communication operation determination information to authorize the communication destination server device, and transmits the communication operation determination information to the terminal device.

18. In any one of the systems according to claims 1 and 6, the terminal devices according to claims 2 and 7, the agent programs according to claims 3 and 8, the management server devices according to claims 4 and 9, and the management server programs according to claims 5 and 10, the management server device registers or updates the communication operation determination information and the process operation determination information based on set information sent from the maintenance server device; The maintenance server device records the set information, which is a set of communication destinations and processes required to receive a service from a service providing server device on the Internet.

19. A management system including a terminal device to be managed and a management server device capable of communicating with the terminal device, The terminal device At least one processor; and a storage device configured to store an agent configured to be executed by the at least one processor. The agent is a command for detecting a start of communication by the terminal device, determining whether or not the operation of the communication whose start has been detected is appropriate based on the communication operation determination information recorded in the recording unit, and stopping the communication whose operation is determined to be inappropriate; The server device includes: At least one processor; and a storage device configured to store a management program configured to be executed by the at least one processor. The management program includes: a command to communicate with the terminal device, transmit the communication operation determination information to the terminal device, and store the communication operation determination information in the terminal device; A management system comprising:

20. A terminal device capable of communicating with a management server device, At least one processor; and a storage device configured to store an agent configured to be executed by the at least one processor. The agent is a command to detect the start of communication in the terminal device, judge whether or not the operation of the communication whose start has been detected is appropriate based on the communication operation judgment information transmitted from the management server device and recorded in a recording unit, and stop the communication whose operation is judged to be inappropriate; A terminal device comprising:

21. An agent for implementing a terminal device capable of communicating with a management server device by a computer, a command to detect the start of communication in the terminal device, judge whether or not the operation of the communication whose start has been detected is appropriate based on the communication operation judgment information transmitted from the management server device and recorded in a recording unit, and stop the communication whose operation is judged to be inappropriate; An agent having:

22. A management server device capable of communicating with a terminal device, At least one processor; and a storage device configured to store a management program configured to be executed by the at least one processor. The management program includes: a command to communicate with the terminal device, the terminal device monitoring the communication operation in the terminal device based on communication operation determination information, and to transmit the communication operation determination information to the terminal device and record the communication operation determination information in the terminal device; A management server device comprising:

23. A management program for implementing a management server device capable of communicating with a terminal device by a computer, a command to communicate with the terminal device, the terminal device monitoring the communication operation in the terminal device based on communication operation determination information, and to transmit the communication operation determination information to the terminal device and record the communication operation determination information in the terminal device; A management program that includes:

24. In the system, device or program according to any one of claims 19 to 23, The agent of the terminal device The method further includes a command for detecting the start of the process, determining whether or not the operation of the process whose start has been detected is appropriate based on the process operation determination information recorded in the recording unit, and stopping the process whose operation is determined to be inappropriate; The management program of the management server device The system, device or program further comprises instructions for communicating with the terminal device, transmitting the process operation determination information to the terminal device and recording the information in the terminal device.

Images