Information processing system, information processing method, and information processing program

Abstract

To provide an information processing system, an information processing method, and an information processing program that facilitate communication with the inside and outside of an organization while maintaining security.SOLUTION: An information processing system 100 includes a first communication server 10 that is provided in an internal network and controls transmission and reception of data between first client terminals 20 belonging to the internal network, and a second communication server 11 that is provided to be able to communicate with an external network, executes predetermined processing on data transmitted from an external terminal via the external network, and controls transmission and reception of data between the first client terminals 20 and the external terminal.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] An embodiment of the present invention relates to an information processing system, an information processing method, and an information processing program. [Background technology]

[0002] In recent years, working styles have become more diverse, and working from home, or what is known as "telework," is becoming more common. In telework, internal communications and meetings are conducted via online communication tools.

[0003] As online communication tools have become the norm for business, malware designed to steal important information from companies, organizations, and other organisations is spreading daily, and cyber attacks, including targeted attacks aimed at specific organisations and individuals, are on the rise.

[0004] There is a need to improve the network security of an organization, and one method is to protect important information within the organization by forming a closed network known as a Local Government Wide Area Network (LGWAN) system and isolating it from the system connected to the Internet. In addition, as described in Patent Document 1 and the like, a technology is disclosed that improves network security by only permitting communication that transfers information from the Internet connection system to a client terminal via a screen. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2020-013399 A Summary of the Invention [Problem to be solved by the invention]

[0006] As described above, security can be increased by placing resources that hold important information within a closed network and using a network isolation method that prevents connection from an external network. However, users within an organization may switch between client terminals that are set up independently for each system even when conducting simple communication with users outside the organization, such as chatting, which may reduce work efficiency. Furthermore, even in a network separation system that only permits communication for transferring information from an Internet connection system to a client terminal screen, there is a risk that restrictions will be imposed on the use of communication tools.

[0007] The present invention has been made in consideration of the above circumstances, and aims to provide an information processing system, an information processing method, and an information processing program that facilitate communication inside and outside an organization while maintaining security. [Means for solving the problem]

[0008] An information processing system according to an embodiment of the present invention includes a first communication server provided in an internal network and controlling data transmission and reception between first client terminals belonging to the internal network, and a second communication server provided to be able to communicate with an external network and performing a predetermined process on data transmitted from an external terminal via the external network, and controlling data transmission and reception between the first client terminal and the external terminal; and an information processing device that, when the first client terminal communicates with the first communication server and the second communication server, authenticates the first client terminal and controls communication with the first communication server and the second communication server, and the information processing device distributes data relating to transmission and reception recorded in the first communication server and the second communication server to the first client terminal and displays each of the data in a switchable manner on a screen of the first client terminal. It is characterized by: Effect of the Invention

[0009] According to an embodiment of the present invention, an information processing system, an information processing method, and an information processing program are provided that facilitate communication inside and outside an organization while maintaining security. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is a diagram showing an example of the configuration of an information processing system according to an embodiment of the present invention. [Diagram 2] (A) An explanatory diagram showing an example of a display screen of a client terminal during internal communication using a first communication server, and (B) an explanatory diagram showing an example of a display screen of a client terminal during external communication using a second communication server. [Diagram 3] 4 is a flowchart showing an example of an information processing method according to the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings. FIG. 1 is a diagram showing an example of the configuration of an information processing system 100 according to the present embodiment.

[0012] The information processing system 100 according to the embodiment is a system that uses a first communication server 10 when transmitting and receiving data between client terminals 20 belonging to an internal network (internal network) of an organization such as a company or an organization, and uses a second communication server 11 that performs predetermined processing on data from the outside when the client terminal 20 transmits and receives data to and from an external terminal via an external network. Here, data refers to information related to communication between terminals, and examples of such data include text data, audio data, and video data.

[0013] An external terminal is a terminal of a user outside the organization, and transmits and receives data to and from the client terminal 20 via an external network (for example, the Internet).

[0014] The information processing system 100 includes a first communication server 10, a second communication server 11, an information processing device 12, and a client terminal 20.

[0015] The client terminal 20 (first client terminal) is a terminal owned by a user in the organization and is placed in the internal network. The client terminal 20 also includes a terminal that a user in the organization uses to connect to the internal network from an external network by using encrypted communication.

[0016] In FIG. 1, the client terminals 20 (20a, 20b, 20c) are shown as being capable of sending and receiving data with the information processing device 12, but this configuration is not limited to this, and the client terminals 20 may be configured to be capable of sending and receiving data with each of the first communication server 10 and the second communication server 11.

[0017] The first communication server 10 is provided in an internal network, and is a server that controls the transmission and reception of data between client terminals 20 that belong to the internal network.

[0018] Data transmission and reception between the client terminals 20 via the first communication server 10 may be performed by an application installed on the client terminal 20, or may be performed via a web browser on the client terminal 20. The first communication server 10 may record data related to transmission and reception for each client terminal 20 as needed, and transmit past data to the client terminal 20 when communicating with the client terminal 20.

[0019] The second communication server 11 is a server that is capable of communicating with an external network, performs predetermined processing on data transmitted from an external terminal via the external network, and controls transmission and reception of data between the client terminal 20 and the external terminal.

[0020] The predetermined processing means a process of converting data received from an external terminal via an external network into text or image to render it harmless. For example, malicious URLs that lead to sites that download malware by malicious third parties are converted into text or deleted. Data processing by the second communication server 11 renders data from the outside harmless, so that harmful data such as malware can be prevented from being sent to the internal network.

[0021] Data transmission and reception between the client terminal 20 and an external terminal using the second communication server 11 may be performed via an application installed on the client terminal 20, or via a web browser on the client terminal 20. The second communication server 11 may record data related to transmission and reception for each client terminal 20 and external terminal, and transmit past data to the client terminal 20 when communicating with the client terminal 20.

[0022] The information processing device 12 is a server that authenticates a user of a client terminal 20 that makes an access request to the communication server, and controls communication between the client terminal 20 and the first communication server 10 and the second communication server 11.

[0023] The information processing device 12 is provided in an internal network, and is provided between the communication servers (the first communication server 10 and the second communication server 11) and the client terminal 20.

[0024] The information processing device 12 includes an authentication unit 13 and a control unit 14. The functions of each unit constituting the information processing device 12 may be realized by executing a predetermined program code using a processor, and are not limited to such software processing. For example, the functions may be realized by hardware processing using an ASIC or the like, or may be realized by a combination of software processing and hardware processing.

[0025] The authentication unit 13 authenticates the client terminal 20 when there is an access request from the client terminal 20 to the communication server. Specifically, it requests identification information for identifying a user (e.g., a user ID, a password, biometric information, etc.), and authenticates the client terminal 20 when the information from the client terminal 20 matches the identification information registered in advance. Note that the authentication of the client terminal 20 may be performed based on the identification information, position information, etc. of the client terminal 20, or may be performed by combining various authentication methods.

[0026] When the authentication is consistent, the control unit 14 causes the client terminal 20 to communicate with the first communication server 10 and the second communication server 11.

[0027] In the case of data transmission and reception between client terminals 20, i.e., in the case of internal communication, the control unit 14 relays and controls the transmission and reception of data between the client terminals 20. On the other hand, in the case of data transmission and reception between the client terminal 20 and an external terminal, i.e., in the case of external communication, the control unit 14 relays and controls the transmission and reception of data between the client terminal 20 and the external terminal.

[0028] The control unit 14 may control so that when the authenticated client terminals 20 communicate via the first communication server 10 and the second communication server 11, only communication between specific terminals is permitted. Specifically, in the case of data transmission and reception between the client terminals 20, communication between the authenticated client terminals 20 is permitted. In addition, in the case of data transmission and reception between the client terminals 20 and an external terminal, communication between the authenticated client terminal 20 and a pre-registered external terminal is permitted. Security can be improved by authenticating the client terminals 20 and permitting communication only between specific terminals.

[0029] Furthermore, the control unit 14 may integrate the past data of each of the client terminals 20 recorded in the first communication server 10 and the second communication server 11, and distribute the integrated data to each of the client terminals 20. This allows the client terminal 20 to check internal and external communications on a single display screen.

[0030] FIG. 2 is an explanatory diagram illustrating a display screen of the client terminal 20 during communication using the communication server.

[0031] 2(A) is an example of a display screen of the client terminal 20 during intra-company communication using the first communication server 10. Using the first communication server 10, chatting for sending and receiving text data and Web conferences for sending and receiving video data including audio data are held with internal users. Here, the display screen of the terminal of Yamada Taro, an internal user, is shown, and Yamada Taro is chatting and holding Web conferences with users in the same organization.

[0032] FIG. 2B is an example of a display screen of the client terminal 20 during external communication using the second communication server 11.

[0033] As shown in Fig. 2B, Taro Yamada, an internal user, is chatting and holding a Web conference with Jiro Yoshida, an external user, etc. By switching the display screen on the Web browser of the client terminal 20, communication between the inside and outside of the company can be carried out on a single client terminal 20.

[0034] The control unit 14 of the information processing device 12 may be configured to integrate external and internal data so that internal and external communication can be performed on a single display screen.

[0035] Next, the operation of the information processing system 100 according to this embodiment will be described. FIG. 3 is a flowchart of the information processing method according to this embodiment (see FIG. 1 as appropriate).

[0036] When an access request is received from the client terminal 20, the authentication unit 13 requests identification information for identifying the user of the client terminal 20, and authenticates the user of the client terminal 20 (S10).

[0037] In the case of data transmission / reception between the client terminals 20 (internal communication), the control unit 14 relays and controls the transmission / reception of data between the client terminals 20 via the first communication server 10 (S11: YES, S12).

[0038] On the other hand, in the case of data transmission and reception between the client terminal 20 and an external terminal (external communication), the second communication server 11 executes a predetermined process on the data transmitted from the external terminal (S11: NO, S13). Then, the control unit 14 relays and controls the transmission and reception of data between the client terminal 20 and the external terminal (S14).

[0039] In this way, according to the information processing system of this embodiment, when data is transmitted and received between client terminals belonging to an internal network, the first communication server is used, while when a client terminal transmits and receives data to and from an external terminal via an external network, a second communication server is used to perform a predetermined process on data from the outside. 2 By using a communication server, it is possible to facilitate communication both inside and outside an organization while maintaining network security.

[0040] The programs executed by each component of the information processing system are provided by being pre-installed in a storage circuit such as a ROM. Alternatively, the programs may be provided by being stored in a computer-readable storage medium such as a CD-ROM, CD-R, memory card, DVD, or flexible disk as a file in an installable or executable format. The programs executed by the information processing system 100 may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network.

[0041] Although some embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included in the scope and spirit of the invention, and are included in the scope of the invention and its equivalents described in the claims. [Explanation of symbols]

[0042] 10… First communication server , 11… Second Communication Server , 12… Information processing device , 13... authentication unit, 14... control unit, 20 (20a, 20b, 20c)... client terminal, 100... information processing system.

Claims

1. a first communication server provided in the internal network and controlling transmission and reception of data between first client terminals belonging to the internal network; a second communication server that is communicable with an external network, executes a predetermined process on data transmitted from an external terminal via the external network, and controls transmission and reception of data between the first client terminal and the external terminal; an information processing device that performs authentication of the first client terminal when the first client terminal communicates with the first communication server and the second communication server, and controls communication with the first communication server and the second communication server, the information processing device distributes data related to transmission and reception recorded in the first communication server and the second communication server to the first client terminal, and switches between and displays the data on a screen of the first client terminal; An information processing system comprising:

2. the information processing device permits communication between specific terminals when the authenticated first client terminal communicates via the first communication server and the second communication server; 2. The information processing system according to claim 1 .

3. The second communication server converts data received from the external network into text or an image.

2. The information processing system according to claim 1 .

4. A step of controlling, in a first communication server provided in the internal network, transmission and reception of data between first client terminals belonging to the internal network; a step of executing a predetermined process on data transmitted from an external terminal via the external network in a second communication server provided to be capable of communicating with an external network, and controlling transmission and reception of data between the first client terminal and the external terminal; performing authentication of the first client terminal when the first client terminal communicates with the first communication server and the second communication server, and controlling communication with the first communication server and the second communication server; a step of distributing data related to transmission and reception recorded in the first communication server and the second communication server to the first client terminal and displaying each of the data on a screen of the first client terminal in a switchable manner; 13. An information processing method comprising:

5. Computer, A function of controlling, in a first communication server provided in the internal network, transmission and reception of data between first client terminals belonging to the internal network; a function of executing a predetermined process on data transmitted from an external terminal via the external network in a second communication server provided to be capable of communicating with an external network, and controlling transmission and reception of data between the first client terminal and the external terminal; a function of authenticating the first client terminal when the first client terminal communicates with the first communication server and the second communication server, and controlling communication with the first communication server and the second communication server; a function of distributing data relating to transmission and reception recorded in the first communication server and the second communication server to the first client terminal and displaying each of the data on a screen of the first client terminal in a switchable manner; An information processing program characterized by causing the program to function as follows.

Images