Management System

Abstract

To provide a system capable of appropriately controlling communication without increasing the burden on a network.SOLUTION: In a management system, communication start detection means 14 of terminal devices T1, T2, ..., Tn (hereinafter referred to as a terminal device T) detects the start of communication 18 in the terminal device T. Communication operation determination means 12 refers to recorded communication operation determination information 10 for the communication 18 whose start has been detected, and determines whether the communication 18 is appropriate. If it is determined that the communication 18 is appropriate, the communication 18 is caused to be performed. On the other hand, if it is determined that the start of the communication 18 is inappropriate, the communication operation determination means 12 stops the communication 18. Thus, the start of the inappropriate communication 18 is prevented. As described above, the determination information from a management server device MS is recorded in each terminal device T, and inappropriate processes and communications are eliminated in each terminal device T based on this.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] This invention relates to a management system capable of managing inappropriate communications in a terminal device.

Background Art

[0002] In companies and the like, the opportunity for each employee's terminal device to access an external server device such as SaaS has been increasing. In SaaS and the like, since the same function is provided by a plurality of different SaaS, it is often the case that the company designates the SaaS that can be used so as not to generate unnecessary SaaS usage contracts. In addition, some of the SaaS do not comply with the company's security policy, and in some cases, communication with such SaaS is prohibited.

[0003] For such purposes, communication with an external server device such as SaaS is controlled. For example, in a firewall that connects to the Internet from an in-house network (such as a LAN), a control device that controls the server device that is the communication destination is provided. The control device records SaaS that permits communication from the terminal device and SaaS that prohibits communication. Such a control device is also disclosed in Patent Document 1 and Patent Document 2.

[0004] By using the above control device, the connection destination from the terminal device connected to the in-house network can be controlled.

[0005] However, in recent years, due to telecommuting and the like, the performance of work on terminal devices not connected to the in-house network has been increasing, and in such cases, the control of the connection destination by the above control device has not been possible.

[0006] To address this, some companies have configured their systems so that SaaS can only be accessed from the internal network, requiring users to connect to the internal network from outside the company to access SaaS (see Non-Patent Document 1). In this case, for security reasons, a VPN was used to connect to the internal network from outside the company.

[0007] Alternatively, the control device was installed on the internet rather than the company's internal network, and access to the SaaS was restricted to through this control device only (see Non-Patent Document 2).

[0008] These systems allow users to control the connected SaaS application even if the terminal device is not connected to the company network (i.e., even if it is located outside the company network). [Prior art documents] [Patent Documents]

[0009] [Patent Document 1] Patent 5340041 [Patent Document 2] Japanese Patent Publication No. 2005-352667 [Non-patent literature]

[0010] [Non-Patent Document 1] Digital Arts Inc. i-FILTER https: / / www.itreview.jp / categories / swg [Non-Patent Document 2] Netskope Intelligent SSE (https: / / www.netskope.com / jp / products) [Overview of the project] [Problems that the invention aims to solve]

[0011] However, in systems like the one described in Non-Patent Document 1, external devices are always accessed via VPN through the internal network, resulting in a huge number of VPN connections and a significant burden.

[0012] Furthermore, systems like the one described in Patent Document 2 require the construction of a control server device on the internet, which also imposes a significant additional burden.

[0013] The purpose of this invention is to solve the above-mentioned problems and provide a system that can perform appropriate communication control without significantly increasing the network burden. [Means for solving the problem]

[0014] The following are some independently applicable features of this invention.

[0015] (1)-(5) The management system according to this invention is a management system comprising a terminal device to be managed and a management server device capable of communicating with the terminal device, The terminal device includes a communication start detection means for detecting the start of communication in the terminal device, and a communication operation determination means for determining whether the operation of the detected communication is appropriate based on communication operation determination information recorded in the recording unit, and stopping any communication that is determined to be inappropriate for operation. The management server device includes a communication operation determination information setting means that communicates with the terminal device and transmits the communication operation determination information to the terminal device for recording in the terminal device, It is characterized by having the following features.

[0016] Therefore, the terminal device can determine whether communication is appropriate or not and stop it, enabling efficient communication management.

[0017] (6)-(10) The management system according to this invention is a management system comprising a terminal device to be managed and a management server device capable of communicating with the terminal device, The terminal device includes a process startup detection means for detecting the startup of a process in the terminal device, a process operation determination means for determining the propriety of the operation of the process whose startup has been detected based on the process operation determination information recorded in the recording unit, and stopping the process determined to be inappropriate to operate, a communication startup detection means for detecting the start of communication in the terminal device, and a communication operation determination means for determining the propriety of the operation of the communication whose start has been detected based on the communication operation determination information recorded in the recording unit, and stopping the communication determined to be inappropriate to operate. The management server device is characterized by including a process operation determination information setting means for communicating with the terminal device, transmitting the process operation determination information to the terminal device, and causing the terminal device to record it, and a communication operation determination information setting means for communicating with the terminal device, transmitting the communication operation determination information to the terminal device, and causing the terminal device to record it.

[0018] Therefore, since the propriety of the process and communication can be determined and stopped on the terminal device side, process management and communication management can be efficiently performed.

[0019] (11) In the management system according to this invention, if the terminal device is connected to the local network of the organization and at least the agent for realizing the communication startup detection means and the communication operation determination means is not installed in the terminal device, it is configured so as not to be able to connect to the local network.

[0020] Therefore, it is possible to indirectly prompt that the agent must be installed in the terminal device to be managed.

[0021] (12) In the management system according to this invention, the process operation determination means is characterized by stopping the operation of the process attempting to perform communication determined to be inappropriate by the communication operation determination means.

[0022] Therefore, the process attempting to perform inappropriate communication can be automatically stopped.

[0023] (13) The management system according to this invention is characterized in that when the communication operation determination means of the terminal device determines that the communication attempted by the process is inappropriate, the process operation determination information is updated so as to stop the operation of the process thereafter.

[0024] Therefore, the activation of a process attempting to perform inappropriate communication can be prohibited thereafter.

[0025] (14) The management system according to this invention is characterized in that when the communication operation determination means of the terminal device determines that the communication attempted by the process is inappropriate, the situation is transmitted to the management server device, and when the process operation determination information setting means of the management server device receives the situation, the process operation determination information is updated so as to stop the operation of the process in the terminal device thereafter, and then transmitted to the terminal device.

[0026] Therefore, the activation of a process attempting to perform inappropriate communication can also be prohibited in other terminal devices thereafter.

[0027] (15) The system according to this invention is characterized in that for communication determined by the communication operation determination means of the terminal device to be inappropriate to operate, the setting information recorded in association with the process attempting to perform the communication is referred to, and it is determined whether to stop or permit the communication.

[0028] Therefore, it is possible to automatically determine whether to permit a new communication destination or the like according to the process.

[0029] (16) The system according to this invention is characterized in that the communication operation determination information indicates whether or not the server device to which the communication is to be performed is appropriate, and the communication operation determination means of the terminal device updates the communication operation determination information to make the server device to which the communication is to be performed an appropriate communication destination when it determines that the communication is inappropriate to perform.

[0030] Therefore, depending on the process, it is possible to automatically decide whether to allow new communication destinations, etc., and update the communication operation determination information.

[0031] (17) The system according to this invention is characterized in that the communication operation determination information indicates whether or not the server device to which communication is to be performed is appropriate, and the communication operation determination means of the terminal device, when it determines that a communication is inappropriate to perform, transmits to the management server device that the server device to which communication is to be performed should be newly permitted, and when the communication operation determination information setting means of the management server device receives the message that the server device to which communication is to be newly permitted, updates the communication operation determination information to permit the server device to which communication is to be performed and transmits the communication operation determination information to the terminal device.

[0032] Therefore, depending on the process, it is possible to automatically decide whether to allow new communication destinations, etc., and update the communication operation determination information.

[0033] (18)-(22) The management system according to this invention is a management system comprising a terminal device to be managed and a management server device capable of communicating with the terminal device, The terminal device comprises at least one processor and storage for recording an agent configured to run by the at least one processor, the agent includes a function to detect the start of communication by the terminal device, to determine the appropriateness of the operation of the detected communication based on communication operation determination information recorded in the recording unit, and to stop any communication that is deemed inappropriate to operate. The server device comprises at least one processor and storage for recording a management program configured to be executed by the at least one processor, wherein the management program includes instructions for communicating with the terminal device and transmitting the communication operation determination information to the terminal device for recording in the terminal device.

[0034] Therefore, the terminal device can determine whether communication is appropriate or not and stop it, enabling efficient communication management.

[0035] (23) The management system according to this invention is characterized in that the agent of the terminal device detects the startup of the process, determines whether the operation of the detected process is appropriate based on process operation determination information recorded in the recording unit, and further provides a command to stop the process that is determined to be unsuitable for operation, and the management program of the management server device communicates with the terminal device and further provides a command to transmit the process operation determination information to the terminal device for recording in the terminal device.

[0036] Therefore, the terminal device can determine whether a process and communication are appropriate and stop them accordingly, enabling efficient process and communication management.

[0037] In this embodiment, the "process startup detection means" corresponds to the processing of agent 52 that receives the notification in step S1.

[0038] In this embodiment, the "process operation determination means" corresponds to steps S21 and S23.

[0039] In this embodiment, the "communication initiation detection means" corresponds to the processing performed by agent 52 upon receiving the notification in step S5.

[0040] In this embodiment, the "communication operation determination means" corresponds to steps S25 and S26.

[0041] In this embodiment, step S152 corresponds to the "process operation determination information setting means".

[0042] In this embodiment, step S154 corresponds to the "communication operation determination information setting means".

[0043] The term "device" is a concept that includes not only devices composed of a single computer, but also devices composed of multiple computers connected via a network or the like. Therefore, if the means (or even a part of the means) of the present invention are distributed across multiple computers, these multiple computers constitute the device.

[0044] The term "program" is a concept that includes not only programs that can be directly executed by the CPU, but also source code programs, compressed programs, encrypted programs, and programs that work in conjunction with the operating system to perform their functions. [Brief explanation of the drawing]

[0045] [Figure 1] This is the functional configuration of a management system according to one embodiment of the present invention. [Figure 2] This is the system configuration of the management system. [Figure 3] This describes the hardware configuration of terminal devices for IT and OT. [Figure 4] This is the hardware configuration of the management server device MS. [Figure 5] This is an operation flowchart for Agent 52 and OS 50. [Figure 6] This is a list of processes that are allowed to run (a process whitelist). [Figure 7] This is an operation flowchart of agent 52, OS 50, process P, and SaaS server device of terminal device T. [Figure 8] This is a list of URLs that are permitted to communicate (a communication whitelist). [Figure 9] This is an operation flowchart of Agent 52, OS 5050, using another example. [Figure 10] This is an operation flowchart of agent 52, OS 50, process P, and SaaS server device of terminal device T, as in another example. [Figure 11] This is the functional configuration of the management system according to the second embodiment. [Figure 12] This is an operation flowchart for Agent 52, the management server program. [Figure 13] This is the functional configuration of the management system according to the third embodiment. [Figure 14] This is an operation flowchart for the management server program, SaaS server device, agent 52, OS 50, and process P. [Figure 15] This is an operation flowchart for the management server program, SaaS server device, agent 52, OS 50, and process P. [Figure 16] This is an example of configuration information. [Modes for carrying out the invention]

[0046] 1. First Embodiment 1.1 Functional configuration Figure 1 shows the functional configuration of a management system according to one embodiment of the present invention. Terminal devices T1, T2...Tn and a management server device MS capable of communicating with them are provided.

[0047] The process operation determination information setting means 22 of the server device S transmits process operation determination information to each terminal device T1, T2...Tn. Additionally, the communication operation determination information setting means 24 transmits communication operation determination information to terminal devices T1, T2...Tn. This determination information is recorded in the recording unit 6 of terminal devices T1, T2...Tn.

[0048] The communication start detection means 14 of terminal devices T1, T2...Tn (hereinafter referred to as terminal device T) detects the start of communication 18 in terminal device T. The communication operation determination means 12 refers to the recorded communication operation determination information 10 for the communication 18 whose start has been detected and determines whether the communication 18 is appropriate or not.

[0049] If it is determined that communication 18 is appropriate, the communication 18 is initiated. On the other hand, if it is determined that the initiation of communication 18 is inappropriate, the communication operation determination means 12 stops the communication 18. Thus, the initiation of inappropriate communication 18 is prevented. In this embodiment, stopping a communication includes not only stopping a communication that has already been started, but also not starting a communication that has been requested to be started but has not yet been started.

[0050] The process startup detection means 2 of the terminal device T detects the startup of process 16 in the terminal device T. The process operation determination means 4 refers to the recorded process information determination information 8 for the process 16 whose startup has been detected and determines whether the startup is appropriate or not.

[0051] If it is determined that starting process 16 is appropriate, process 16 is started. On the other hand, if it is determined that starting process 16 is inappropriate, the process operation determination means 4 stops process 16. Thus, the inappropriate starting of process 16 is prevented. In this embodiment, stopping a process includes not only stopping a process that has already started, but also not starting a process that has been requested to start but has not yet started.

[0052] As described above, judgment information from the management server device MS is recorded in each terminal device T, and based on this, each terminal device T eliminates inappropriate processes and communications. Therefore, inappropriate processes and communications can be identified and eliminated on the terminal device T side. Furthermore, since the above management process can be performed by recording the judgment information in each terminal device T, proper management can be carried out even if the terminal device T is connected to an external network.

[0053] 1.2 System Configuration and Hardware Configuration Figure 2 shows the system configuration of the management system. In this embodiment, the terminal devices T used are an in-house terminal device IT and an external terminal device OT.

[0054] Internal terminal devices IT1, IT2, ITm are connected to the company network via wired or wireless connections. A shared server device (not shown) is connected to the company network and stores data necessary for business operations. Each internal terminal device IT1, IT2, ITm can access the shared server device via the company network and utilize this data.

[0055] External terminal devices OT1...OTp can connect to the company network via a VPN over the internet, either via a wired or wireless connection. In cases such as working from home, employees can connect to the company network via VPN and then connect to the shared server device to perform their work.

[0056] A management server device MS is located on the internet. In addition, SaaS server devices SS1...SSq are provided via the cloud to offer business applications and other services.

[0057] Figure 3 shows the hardware configuration of the IT and OT terminal devices. The CPU 30 is connected to memory 32, a display 34, an SSD (or other storage device such as a hard disk) 36, a DVD-ROM drive 38, a keyboard / mouse 40, and a communication circuit 42. The communication circuit 42 is a circuit for connecting to the company network and the internet.

[0058] SSD36 stores the operating system 50, processes P1...Pr, agent 52, communication operation determination information 54, and process operation determination information 56. Process P1...Pr and agent 52 work in cooperation with the operating system 50 to perform their functions.

[0059] Operating system 50, process P1...Pr, was installed on SSD 36 via DVD-ROM drive 38 from DVD-ROM 58. Alternatively, programs stored on external storage devices such as USB memory may be installed. Furthermore, these programs may be downloaded and installed from server devices or management server devices on the internet.

[0060] Processes P1...Pr represent individual functions of an application program (for example, a process that connects to a SaaS server device SS and obtains processing results). In other words, multiple processes come together to form a single application program. However, a single process may also form a single application program.

[0061] Agent 52 was downloaded and installed from the management server device MS. Communication operation determination information 54 and process operation determination information 56 were downloaded and recorded from the management server device MS through processing by Agent 52. Alternatively, installation may be performed from DVD-ROM 78.

[0062] Figure 4 shows the hardware configuration of the management server device MS. The CPU 60 is connected to memory 62, a communication circuit 64, an SSD (or other storage device such as a hard disk) 66, and a DVD-ROM drive 68. The communication circuit 64 is a circuit for connecting to the internet.

[0063] SSD66 stores the operating system 70, a management server program 72, communication operation determination information 74, and process operation determination information 76. The management server program 72 works in cooperation with the operating system 70 to perform its functions.

[0064] The operating system 70 and the management server program 72 were installed on the SSD 66 via the DVD-ROM drive 68 from the DVD-ROM 78. Alternatively, they may be installed from an external storage device such as a USB memory stick. Furthermore, these programs may be downloaded and installed from a server device on the internet.

[0065] 1.3 Process and Communication Management Processing Figures 5 and 7 show flowcharts of process and communication management processes. Figure 5 is a flowchart of the process management process. These processes are executed by the CPU 30 based on the operating system (hereinafter referred to as OS) 50, agent 52, and process P1...Pr in terminal devices IT and OT, and by the CPU 60 based on the management server program 72 in the management server device MS. Hereafter, when it is stated that the OS 50 performs processing, it means that the CPU 30 performs processing based on the OS 50. The same applies to other programs.

[0066] In this embodiment, when OS50 receives a process startup command, it uses a hook function provided in OS50 to notify agent 52 that a startup command has been received (step S1). Examples of when OS50 receives a process startup command include when a user double-clicks an application icon to launch it, or when another process attempts to launch the same process.

[0067] When the agent 52 of the terminal device IT or OT receives a command to start a process from the OS 50 of the terminal device IT or OT, it reads process operation determination information 56 from the SSD 36 (step S21). In the diagram, the horizontal dashed lines indicate communication between programs within the same terminal device IT or OT. Next, for the process that received the start command, the agent refers to this process operation determination information 56 and determines whether it is appropriate to start it (step S23).

[0068] Figure 6 shows the process operation determination information 56. In this embodiment, the process operation determination information 56 is a list of permitted processes that are allowed to start. Agent 52 determines whether the process for which a start command has been issued is on this permitted list. If it is on the list, it is determined that it is appropriate to start it; if it is not on the list, it is determined that it is not appropriate to start it.

[0069] Agent 52 notifies OS 50 whether the process that has been given a start command should be started (step S23). OS 50 receives this notification. If the notification indicates that the process should be started, OS 50 starts the process (step S3).

[0070] On the other hand, if the notification indicates that the startup is inappropriate, OS50 will not start the process in question.

[0071] As described above, it is possible to ensure that only processes permitted by the process permission list are launched. Note that, as will be explained later, this process permission list can be modified by the administrator via the management server device MS. Therefore, each terminal device (IT, OT) can be managed to ensure that only processes specified by the administrator can run.

[0072] Figure 7 shows a flowchart of the communication management process. This is the process that occurs when process P, which is started and running as described above, attempts to communicate with the SaaS server device SS on the internet. In the figure, horizontal dashed lines indicate communication between programs within the same terminal device IT or OT. Horizontal solid lines indicate communication between terminal devices IT or OT and the SaaS server device SS.

[0073] When a terminal device IT or OT process P uses the functions of a SaaS server device SS on the internet, it needs to request OS 50 to communicate with the SaaS server device SS and receive the processing result. Therefore, process P provides OS 50 with a communication command indicating the URL of the SaaS server device to communicate with and the desired processing content (step S41).

[0074] In this embodiment, when OS50 receives a communication command, it uses a hook function or the like provided in OS50 to notify agent 52 that a communication command has been received (step S5).

[0075] When the agent 52 of the terminal device IT or OT receives notification from the OS 50 of the terminal device IT or OT that a communication command has been received, it reads communication operation determination information 54 from the SSD 36 (step S25). Subsequently, it refers to this communication operation determination information 54 and determines whether the communication command is appropriate or not (step S26).

[0076] Figure 8 shows the communication operation determination information 54. In this embodiment, the communication operation determination information 54 is a list of permitted URLs of SaaS server devices SS that are allowed to communicate. Agent 52 determines whether the URL of the SaaS server device SS indicated by the communication command is in this permitted URL list. If it is in the list, it is determined that it is appropriate to communicate with this SaaS server device SS; if it is not in the list, it is determined that it is not appropriate to communicate.

[0077] Furthermore, if a URL has the same URL as one listed in the allowed URL list, or if the destination URL is at a lower level, it will be considered an allowed URL. For example, if www.xxx.jp is listed in the allowed URL list, then any of the destination URLs such as www.xxx.jp / yyy, www.xxx.jp / zzz, or www.xxx.jp / yyy / kkk will be considered allowed. Alternatively, communication may be denied unless the URL exactly matches one of the URLs listed in the allowed URL list.

[0078] Agent 52 notifies OS 50 whether communication with the SaaS server device SS that sent the communication command is possible (step S26). OS 50 receives this notification.

[0079] If notification indicates that communication with the SaaS server device SS is appropriate, OS50 communicates with the SaaS server device SS and requests the desired processing (step S7). In response, the SaaS server device SS executes the requested processing and sends the processing result to the OS50 of the terminal devices IT and OT (step S101). OS50 receives the processing result via communication and provides it to process P (step S8).

[0080] The process P can, as needed, utilize the processing functions of the SaaS server device SS via OS50.

[0081] On the other hand, if OS50 receives notification in step S6 that communication with the SaaS server device SS is inappropriate, it will not communicate with the SaaS server device SS that is the target of the communication command.

[0082] As described above, communication can be restricted to only SaaS server devices SS permitted in the communication permission list. Note that, as described later, this communication permission list can be modified by the administrator via the management server device MS. Therefore, each terminal device (IT, OT) can be managed to restrict communication to only the SaaS management server device SS specified by the administrator.

[0083] In this embodiment, agent 52 is installed not only on terminal devices (IT) that are intended to be used connected to the company network, but also on terminal devices (OT) used for teleworking, etc. (which are not intended to be used connected to the company network). Therefore, process management and communication management can be performed on these external terminal devices (OT) in the same way as on internal terminal devices (IT). In this case, no additional equipment is required.

[0084] Furthermore, when connecting external terminal devices (OT) to the internal network, a VPN is used. This allows for secure access to the internal network from outside. However, connecting to the SaaS server device (SS) does not require a connection to the internal network, as external terminal devices (OT) are also managed by agent 52. Therefore, this does not unnecessarily increase the VPN's load.

[0085] 1.4 Agent Deployment Process As described in the above embodiment, if agent 52 is installed on each terminal device (IT, OT), the above-described process management and communication management can be performed. Conversely, if agent 52 is not installed on the terminal devices (IT, OT) to be managed, the above-described management cannot be performed.

[0086] In this embodiment, in order to ensure that agent 52 is installed on the managed terminal devices IT and OT, the following is done.

[0087] In organizations such as companies, when lending IT and OT terminal devices to employees or other members of the organization, Agent 52 should be pre-installed. This ensures that Agent 52 is properly implemented on the IT and OT terminal devices.

[0088] Furthermore, the administrator records the MAC addresses of terminal devices (IT and OT) on which Agent 52 is installed in network equipment such as routers on the company network. The router then restricts access to the company network to only terminal devices (IT and OT) whose MAC addresses are recorded.

[0089] Therefore, terminal devices that are not IT or OT devices provided by the organization, and that do not have Agent 52 installed, cannot connect to the company network. As a result, it becomes difficult to perform work using such terminal devices.

[0090] If you use a terminal device other than the one provided for work purposes, you must install Agent 52, contact your administrator, and have them configure the router to configure the MAC address so that you can connect to the company network.

[0091] In this way, a state can be created in which agent 52 is effectively installed on the terminal device used for business operations.

[0092] Alternatively, the management server device MS may collect the MAC addresses of terminal devices IT and OT on which agent 52 is installed, and then configure the router's MAC address based on this information. This can reduce the administrator's workload.

[0093] 1.5 Updating process operation determination information and communication operation determination information The above explains that process management and communication management are performed using process operation determination information (process permission list in the above text) and communication operation determination information (communication permission list in the above text) recorded in terminal devices IT and OT.

[0094] This judgment information is downloaded from the management server device MS by each terminal device IT and OT, and then recorded on each terminal device IT and OT.

[0095] Furthermore, administrators can access the management server device MS using their own terminal device IT, update the judgment information, and have it recorded on each terminal device IT and OT. This allows for the handling of newly permitted and newly denied processes and communications.

[0096] 1.6 Variations (Other) (1) In the above embodiment, the operation is controlled by determining whether both process startup and communication are appropriate. However, the operation may be controlled by determining only whether process startup is appropriate or only whether communication is appropriate.

[0097] (2) In the above embodiment, the determination information is acquired each time in steps S21 and S25. However, this determination information may be acquired from the SSD 36 only once at startup, stored in memory 32, and referenced thereafter.

[0098] (3) In the above embodiment, in managing process startup, a hook function or the like is used so that the OS 50, upon receiving a command to start process P, does not immediately start process P, but only starts processes that the agent 52 deems appropriate.

[0099] However, agent 52 may be controlled using a process list that shows the processes currently running, as follows:

[0100] The processing flowchart for this case is shown in Figure 9.

[0101] When a process start command is received, the OS50 of the terminal device IT or OT starts the process (step S11). At this time, the OS50 adds the started process to the process list, which shows the processes that are currently running.

[0102] Agent 52 of the terminal device IT, OT constantly monitors the process list recorded and updated by OS 50 (at predetermined time intervals) (step S31). Agent 52 obtains process operation determination information 56 (process permission list in Figure 6) and determines whether a newly appearing (i.e., newly started) process in the process list is suitable for startup.

[0103] If the started process is on the process permission list, it is determined that the start of the process is appropriate; if it is not on the process permission list, it is determined that the start of the process is inappropriate (step S33).

[0104] If Agent 52 determines that the startup of the process is inappropriate, it informs OS 50 to terminate the process (step S34). Upon receiving the termination instruction, OS 50 terminates the process (step S13).

[0105] On the other hand, if agent 52 determines that the startup of the process is appropriate, it will not issue a command to forcibly terminate the operation of the started process.

[0106] As described above, process startup can be managed using the process list managed by OS50. In this example, an inappropriate process will start up initially, but it will be forcibly terminated after a short time, effectively achieving the same effect as not allowing it to start at all.

[0107] Note that the above uses a process list that shows currently running processes. However, instead, the same processing can be performed using an event log. The event log is a log that records when OS50 starts a new process. By monitoring this event log, agent 52 can know when a new process has started and can execute the processing from step S32 onwards in Figure 9.

[0108] The above explains the differences between using process lists and event logs. Since process lists show currently running processes, they eliminate unnecessary processing for processes that have already terminated.

[0109] (4) In the above embodiment, in managing communications, a hook function or the like is used so that the OS 50 does not immediately communicate when it receives a communication command, and only communications that the agent 52 deems appropriate are permitted.

[0110] However, agent 52 may also control the communication using a communication status list that indicates the currently active communication, as follows:

[0111] The processing flowchart in this case is shown in Figure 10. When OS50 receives a communication command from process P, it communicates with the SaaS server device SS specified in the communication command and requests the specified processing (step S15). At this time, OS50 adds the communication with this SaaS server device SS to the communication status list which shows the current communication status.

[0112] Agent 52, which constantly monitors the communication status list (monitoring at predetermined intervals), acquires the above communication that has been newly added to the communication status list (step S27). Agent 52 determines whether the communication with the above SaaS server device SS is appropriate based on the communication operation determination information 54 (communication permission list).

[0113] If the communication is not on the permitted communication list and is deemed inappropriate, agent 52 instructs OS 50 to terminate the communication (step S30). In response, OS 50 terminates the communication (step S17).

[0114] On the other hand, if agent 52 determines that the communication is appropriate because it is on the allowed list, agent 52 does not give OS 50 a command to terminate the process. Therefore, OS 50 receives the result from the SaaS server device SS and transmits it to process P (step S18).

[0115] (5) In the above embodiment, the management server device MS is located on the internet. However, the management server device MS may be located on the company's internal network. This is acceptable if the only devices to be managed are terminal devices IT connected to the company's internal network. In this case, if terminal devices connected to external networks are also to be managed, it is sufficient to assume that such terminal devices are also connected to the company's internal network via VPN.

[0116] (6) In the above embodiment, the process operation determination information 56 is a process permission list (whitelist) that is permitted to start. However, a process permission list (blacklist) that is not permitted to start may also be used.

[0117] Similarly, for the communication operation determination information 54, instead of using a list of permitted URLs (whitelist) that allows communication, a list of unpermitted URLs (blacklist) that does not allow communication may be used.

[0118] (8) In the above embodiment, communication with the SaaS server device SS is managed. However, it may also be used to manage communication with other devices on the Internet, such as a regular web server device.

[0119] (9) In the above embodiment, a whitelist or blacklist of destination URLs is used as communication operation determination information. That is, the suitability is determined based on the destination and communication operation determination information is constructed.

[0120] However, it is also possible to determine suitability based on communication conditions (communication speed, communication method (wireless or wired, etc.), security status such as SSL, communication capabilities of the server device of the communication partner, etc.) and to construct communication operation determination information accordingly.

[0121] (10) In the above embodiment, the allowed URL list in Figure 8 does not specify protocols such as http: / / , https: / / , and ftp. However, these may be specified.

[0122] Alternatively, you can specify the domain or IP address, or, if necessary, specify the port number.

[0123] (11) In the above embodiment, the permission list is used to allow or deny the startup of each process, and the URL list is used to allow or deny connections to each communication destination.

[0124] However, when administrators authorized employees to use a specific SaaS service, it was cumbersome because they had to register multiple processes required to access the service in an allow list and multiple communication destinations in a URL list.

[0125] Therefore, a set of information containing multiple processes and communication destinations necessary to receive each service may be recorded on a maintenance server device located on the internet. Administrators can access this maintenance server device to obtain the set of information containing multiple processes and communication destinations necessary for each service. Consequently, setting up allow lists and URL lists becomes easy.

[0126] Furthermore, the maintenance server device updates the set information if there are any changes to the necessary processes or communication destinations for each service. This allows administrators to easily respond to changes in the processes and communication destinations of each service by obtaining the set information from the maintenance server device. Alternatively, the maintenance server device may update the processes and communication destinations on the management server device (deleting old processes and communication destinations and adding new ones). Alternatively, the management server device may access the maintenance server device to obtain and update the set information.

[0127] The above explains the necessary processes and communication destinations for each service, but the same procedure applies when registering new processes and communication destinations for each service.

[0128] (12) The above embodiments and modifications can be implemented in combination with each other. Furthermore, these embodiments and modifications can be implemented in combination with other embodiments and their modifications.

[0129] 2. Second Embodiment 2.1 Functional configuration Figure 11 shows the functional configuration of the management system according to the second embodiment. The basic process startup management and communication management in this embodiment are the same as in the first embodiment. However, it differs in that when a communication stoppage process is performed, the process operation determination information is updated so that the startup of the process that attempted to perform the communication is prohibited in the future.

[0130] The communication operation determination means 12 refers to the communication operation determination information 10 and determines whether the communication is appropriate or not. If it determines that the communication is inappropriate, it stops the communication 18. At this time, the communication operation determination means 12 transmits to the process operation determination information setting means 22 of the management server device MS that the communication has been stopped and the process that attempted to perform the communication.

[0131] The process operation determination information setting means 22 receives this information, updates the process operation determination information to prohibit the startup of the process, and transmits it to the terminal device T. As a result, the startup of the process will be prohibited from then on.

[0132] As described above, the process operation detection information has been updated to prohibit the startup of the process that attempted to perform inappropriate communication, so it is now possible to prohibit the startup of that process.

[0133] 2.2 System Configuration and Hardware Configuration The system configuration and hardware configuration are the same as those shown in Figures 2 to 4 in the first embodiment.

[0134] 2.3 Process and Communication Management Processing The process management process is the same as in Figure 5 of the first embodiment. However, in this embodiment, a list of processes that are not permitted to start (startup blacklist) is used as process operation determination information. Therefore, agent 52 will allow the start of any process that is not listed in this list of processes that are not permitted to start. Conversely, it will not allow the start of any process that is listed in the startup blacklist.

[0135] The flowchart for the communication management process is the same as in Figure 7 in the first embodiment. In this embodiment as well, a list of URLs that are permitted to communicate (communication whitelist) is used as communication operation determination information, just as in the first embodiment.

[0136] In this embodiment, as described above, the appropriateness of starting a process is determined by the startup blacklist. Therefore, it is possible to install and start newly supplied processes (for example, processes provided by the SaaS server device SS that have not been used in terminal devices IT and OT until now) in terminal devices IT and OT.

[0137] If this process attempts to communicate with an unauthorized destination, the communication will be blocked by the communication whitelist. Therefore, no particular problems arise regarding communication itself. However, because the operation of the process itself is not prohibited, the process will be started repeatedly, unnecessarily consuming processing power in the terminal devices (IT and OT).

[0138] Therefore, in this embodiment, the startup of a process that attempts to perform inappropriate communication is prohibited.

[0139] In step S26 of Figure 7, agent 52 refers to a list of URLs that are permitted to communicate (communication whitelist) to determine whether the communication that process P intends to perform is appropriate. This is the same as in the first embodiment.

[0140] However, if agent 52 determines that the communication is inappropriate, it performs the processing shown in Figure 12. Agent 52 requests the management server device MS to prohibit the startup of process P, which attempted to perform the communication that was determined to be inappropriate.

[0141] In response, the management server program 72 of the management server device MS updates the startup blacklist (process operation determination information 76) by adding the process P (step S151). Furthermore, the management server program 72 sends the rewritten startup blacklist (process operation determination information 76) to the agents 52 of each terminal device IT and OT (step S152).

[0142] Upon receiving the startup blacklist, the IT and OT agents 52 of each terminal device rewrite the startup blacklist (process operation determination information 56) based on it (step S123).

[0143] As described above, process P, which is deemed to be engaging in inappropriate communication, will be prohibited from being started again in each terminal device (IT, OT).

[0144] 2.4 Variations (Other) (1) In the above embodiment, a list of URLs that are not allowed to communicate (communication blacklist) is used as communication operation determination information. However, a list of URLs that are allowed to communicate (communication whitelist) may also be used as communication operation determination information.

[0145] (2) In the above embodiment, the management server program instructs all terminal devices IT and OT to rewrite the process operation determination information in step S152.

[0146] However, it is also possible to instruct the system to rewrite the process operation determination information only for terminal devices IT and OT on which a process attempting to perform an inappropriate communication operation was running (in this case, agent 52 itself may rewrite the process operation determination information for the terminal devices IT and OT without going through the management server device MS).

[0147] Alternatively, the system may be modified to rewrite all IT and OT terminal devices belonging to the same department (or terminal devices with a predetermined relationship) as the terminal device on which the process is running.

[0148] (3) In the above embodiment, agent 52 requests the management server device MS to update the process operation determination information in step S122.

[0149] However, agent 52 may choose to terminate process P, which attempted to perform inappropriate communication, without making such a request. Alternatively, after terminating the process, agent 52 may request the update of the process operation determination information in step S122.

[0150] (4) The above embodiments and modifications can be implemented in combination with each other. Furthermore, these embodiments and modifications can be implemented in combination with other embodiments and their modifications.

[0151] 3. Third Embodiment 3.1 Functional configuration Figure 13 shows the functional configuration of the management system according to the third embodiment. The basic process startup management and communication management in this embodiment are the same as in the first embodiment. However, the difference is that the communication destinations of processes that are permitted to start are updated with communication operation determination information to allow communication.

[0152] The communication operation determination means 12 refers to the communication operation determination information 10 and determines whether the communication is appropriate or not. If it determines that the communication is inappropriate, it makes a decision to stop the communication or allow the communication based on the setting information recorded in association with the process P that attempted to perform the communication.

[0153] If the configuration information specifies that communication should be stopped, the current communication will be stopped. If the configuration information specifies that communication should be permitted, the current communication will be permitted, and a communication operation determination information update command will be sent to the management server device MS. The communication operation determination information setting means 24 of the management server device MS will receive this command, update the communication operation determination information to permit the communication, and send it to the terminal device T.

[0154] In response, terminal device T rewrites the communication operation determination information 10. Therefore, the communication in question will be permitted from that point onward.

[0155] Therefore, by configuring the settings, communication can be automatically permitted for specific processes.

[0156] 3.2 System Configuration and Hardware Configuration The system configuration and hardware configuration are the same as those shown in Figures 2 to 4 in the first embodiment.

[0157] 3.3 Process and Communication Management Processing The process management process is the same as in Figure 5 of the first embodiment. However, in this embodiment as well, a list of processes that are permitted to start (startup whitelist) is used as process operation determination information. Therefore, agent 52 allows the start of any process that is listed in this list of permitted processes. Processes that are not listed in the startup whitelist are not permitted to start.

[0158] The flowchart for the communication management process is shown in Figures 14 and 15. In this embodiment, as in the first embodiment, a list of URLs that are permitted to communicate (communication whitelist) is used as communication operation determination information.

[0159] In the first embodiment, communication to URLs not listed in the communication whitelist is prohibited. However, the following problems could arise.

[0160] When a dedicated application (process) is authorized to connect to the SaaS server device SS and utilize its functions, the SaaS server device SS may provide a new URL as a connection destination to offer new functions. In this case, since the new URL is not listed in the communication whitelist, communication will be rejected according to the first embodiment.

[0161] This meant that administrators had to rewrite communication operation determination information in order to use new features of the SaaS server device, which was cumbersome.

[0162] In this embodiment, to address the situations described above, the communication operation determination information is automatically updated depending on the process to allow communication to a new destination URL. This is explained below.

[0163] Process P provides OS 50 with a communication command indicating the URL of the SaaS server device that is the communication partner and specifying the desired processing content (step S41).

[0164] When the agent 52 of the terminal device IT or OT receives notification from the OS 50 of the terminal device IT or OT that a communication command has been received (step S5), it reads the communication operation determination information 54 from the SSD 36 (step S25). Subsequently, it refers to this communication operation determination information 54 and determines whether the communication commanded is appropriate or not (step S26). In this embodiment, as in the first embodiment, a list of URLs that are permitted to communicate (communication whitelist) is used as the communication operation determination information 54.

[0165] If Agent 52 determines that it is appropriate to communicate, it informs OS 50 of permission to communicate in step S124 of Figure 15.

[0166] On the other hand, if it is determined that communication is inappropriate, instead of immediately informing OS50 that communication is not permitted, the system refers to the configuration information to decide whether to permit or deny communication.

[0167] Agent 52 reads configuration information recorded in association with the process attempting to communicate from SSD 36. In this embodiment, the configuration information is included in the communication operation determination information 54. An example of the configuration information is shown in Figure 16. It records whether or not to automatically allow communication with the destination for each process.

[0168] Agent 52 refers to this configuration information and determines whether automatic permission is granted to the communication destination for the process that is to communicate (step S123). If automatic permission is not granted, in step S124, it communicates to OS 50 that communication is not permitted.

[0169] If automatic permission is enabled, the OS50 is notified in step S125 that communication is permitted. Therefore, communication will be permitted even for URLs not listed in the communication whitelist.

[0170] Furthermore, Agent 52 requests the management server program to update the communication whitelist (communication operation determination information 54) so ​​that communication with the URL in question is deemed appropriate (step S126).

[0171] Upon receiving this, the management server program adds the URL to the communication whitelist and updates it (step S153). Furthermore, the management server program transmits this to the agents 52 of each terminal device IT and OT (step S154).

[0172] Upon receiving the updated communication whitelist, the IT and OT agents 52 of each terminal device record and rewrite it in the SSD 36 (step S127).

[0173] As described above, by configuring the settings, communication destinations can be automatically permitted for specified processes.

[0174] The reason why automatic permission for communication destinations was not uniformly granted to all processes is that it would be dangerous to allow communication with processes that the administrator has not deemed safe. The administrator can configure settings information for each terminal device (IT, OT) via the management server device (MS) and decide which processes should be allowed to communicate with destinations automatically.

[0175] 3.4 Variations (Other) (1) In the above embodiment, the management server program instructs all terminal devices IT and OT to rewrite the communication operation determination information in step S154.

[0176] However, it is also possible to instruct the agent to rewrite the communication operation determination information only for terminal devices IT and OT that have requested communication permission settings (in this case, agent 52 itself may rewrite the communication operation determination information for the terminal devices IT and OT without going through the management server device MS).

[0177] Alternatively, the settings may be rewritten for all IT and OT terminal devices belonging to the same department (or terminal devices with a specified relationship) as the terminal device that requested the communication permission settings.

[0178] (2) In the above embodiment, the communication operation determination information is updated in step S126. However, the communication operation determination information may not be updated, and only a communication permission notification may be given to the OS50 (step S125).

[0179] (3) In the above embodiment, the configuration information is included as part of the communication operation determination information. However, the configuration information may be provided separately from the communication operation determination information.

[0180] (4) The above embodiments and modifications can be implemented in combination with each other. Furthermore, these embodiments and modifications can be implemented in combination with other embodiments and their modifications.

Claims

1. A management system comprising a terminal device to be managed and a management server device capable of communicating with said terminal device, The aforementioned terminal device is A communication start detection means for detecting the start of communication in the terminal device, The system includes a communication operation determination means that determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. The aforementioned management server device is A communication operation determination information setting means that communicates with the terminal device and transmits the communication operation determination information to the terminal device for recording in the terminal device, A management system characterized by comprising: The management system is characterized in that the terminal device is connected to the organization's local network, and is configured such that it cannot connect to the local network unless an agent program for implementing at least the communication initiation detection means and the communication operation determination means is installed on the terminal device.

2. A terminal device capable of communicating with a management server device, A communication start detection means for detecting the start of communication in the terminal device, A communication operation determination means determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information transmitted from the management server device and recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. In a terminal device equipped with, The terminal device is connected to the organization's local network and is configured such that it cannot connect to the local network unless at least the communication initiation detection means and the communication operation determination means are installed on the terminal device.

3. An agent program for realizing a terminal device that can communicate with a management server device using a computer, wherein the computer is A communication start detection means for detecting the start of communication in the terminal device, In an agent program that functions as a communication operation determination means for determining whether the operation of a detected communication is appropriate based on communication operation determination information transmitted from the management server device and recorded in the recording unit, and stopping communications that are determined to be inappropriate for operation, The agent program is characterized in that the terminal device is connected to the organization's local network and is configured such that it cannot connect to the local network unless the agent program for implementing at least the communication initiation detection means and the communication operation determination means is installed on the terminal device.

4. A management system comprising a terminal device to be managed and a management server device capable of communicating with said terminal device, The aforementioned terminal device is Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means that determines whether the operation of a detected process is appropriate based on process operation determination information recorded in the recording unit, and stops any process that is determined to be inappropriate for operation, A communication start detection means for detecting the start of communication in the terminal device, The system includes a communication operation determination means that determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. The aforementioned management server device is A process operation determination information setting means that communicates with the terminal device and transmits the process operation determination information to the terminal device for recording in the terminal device, A communication operation determination information setting means that communicates with the terminal device and transmits the communication operation determination information to the terminal device for recording in the terminal device, A management system characterized by comprising: The management system is characterized in that the terminal device is connected to the organization's local network, and is configured such that it cannot connect to the local network unless an agent program for implementing at least the communication initiation detection means and the communication operation determination means is installed on the terminal device.

5. A terminal device capable of communicating with a management server device, Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means determines whether the operation of a detected process is appropriate based on process operation determination information transmitted from the management server device and recorded in the recording unit, and stops any process that is determined to be unsuitable for operation. A communication start detection means for detecting the start of communication in the terminal device, A communication operation determination means determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information transmitted from the management server device and recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. In a terminal device equipped with, The terminal device is connected to the organization's local network and is configured such that it cannot connect to the local network unless at least the communication initiation detection means and the communication operation determination means are installed on the terminal device.

6. An agent program for realizing a terminal device that can communicate with a management server device using a computer, wherein the computer is Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means determines whether the operation of a detected process is appropriate based on process operation determination information transmitted from the management server device and recorded in the recording unit, and stops any process that is determined to be unsuitable for operation. A communication start detection means for detecting the start of communication in the terminal device, In an agent program that functions as a communication operation determination means for determining whether the operation of a detected communication is appropriate based on communication operation determination information transmitted from the management server device and recorded in the recording unit, and stopping communications that are determined to be inappropriate for operation, The agent program is characterized in that the terminal device is connected to the organization's local network and is configured such that it cannot connect to the local network unless an agent program for implementing at least the communication initiation detection means and the communication operation determination means is installed on the terminal device.

7. A management system comprising a terminal device to be managed and a management server device capable of communicating with said terminal device, The aforementioned terminal device is Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means that determines whether the operation of a detected process is appropriate based on process operation determination information recorded in the recording unit, and stops any process that is determined to be inappropriate for operation, A communication start detection means for detecting the start of communication in the terminal device, The system includes a communication operation determination means that determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. The aforementioned management server device is A process operation determination information setting means that communicates with the terminal device and transmits the process operation determination information to the terminal device for recording in the terminal device, A communication operation determination information setting means that communicates with the terminal device and transmits the communication operation determination information to the terminal device for recording in the terminal device, A management system characterized by comprising: The process operation determination means is a management system characterized by stopping the operation of a process that attempts to perform communication that has been determined to be inappropriate by the communication operation determination means.

8. A terminal device capable of communicating with a management server device, Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means determines whether the operation of a detected process is appropriate based on process operation determination information transmitted from the management server device and recorded in the recording unit, and stops any process that is determined to be unsuitable for operation. A communication start detection means for detecting the start of communication in the terminal device, A communication operation determination means determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information transmitted from the management server device and recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. In a terminal device equipped with, The terminal device is characterized in that the process operation determination means stops the operation of a process that attempts to perform communication that has been determined to be unsuitable by the communication operation determination means.

9. An agent program for realizing a terminal device that can communicate with a management server device using a computer, wherein the computer is Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means determines whether the operation of a detected process is appropriate based on process operation determination information transmitted from the management server device and recorded in the recording unit, and stops any process that is determined to be unsuitable for operation. A communication start detection means for detecting the start of communication in the terminal device, In an agent program that functions as a communication operation determination means for determining whether the operation of a detected communication is appropriate based on communication operation determination information transmitted from the management server device and recorded in the recording unit, and stopping communications that are determined to be inappropriate for operation, The process operation determination means is an agent program characterized by stopping the operation of a process that attempts to perform communication that has been determined to be inappropriate by the communication operation determination means.

10. In the program of claim 9, The communication operation determination means of the terminal device is a program that updates the process operation determination information so as to stop the operation of the process if it determines that the communication attempted by the process is inappropriate.

11. In the program of claim 9, If the communication operation determination means of the terminal device determines that the communication attempted by the process is inappropriate, it transmits to the management server device that the communication attempted by the process is inappropriate. The process operation determination information setting means of the management server device is a program that, upon receiving that the communication attempted by the process is inappropriate, updates the process operation determination information to stop the operation of the process on the terminal device thereafter, and transmits it to the terminal device.

12. A management system comprising a terminal device to be managed and a management server device capable of communicating with said terminal device, The aforementioned terminal device is Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means that determines whether the operation of a detected process is appropriate based on process operation determination information recorded in the recording unit, and stops any process that is determined to be inappropriate for operation, A communication start detection means for detecting the start of communication in the terminal device, The system includes a communication operation determination means that determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. The aforementioned management server device is A process operation determination information setting means that communicates with the terminal device and transmits the process operation determination information to the terminal device for recording in the terminal device, A communication operation determination information setting means that communicates with the terminal device and transmits the communication operation determination information to the terminal device for recording in the terminal device, A management system characterized by comprising: The communication operation determination means of the terminal device is characterized in that, for a communication that is deemed unsuitable for operation, it refers to setting information recorded in association with the process that attempted to perform the communication and decides whether to stop or permit the communication.

13. A terminal device capable of communicating with a management server device, Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means determines whether the operation of a detected process is appropriate based on process operation determination information transmitted from the management server device and recorded in the recording unit, and stops any process that is determined to be unsuitable for operation. A communication start detection means for detecting the start of communication in the terminal device, A communication operation determination means determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information transmitted from the management server device and recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. In a terminal device equipped with, The terminal device is characterized in that, with respect to a communication that is deemed unsuitable for operation, the communication operation determination means refers to the setting information recorded in association with the process that attempted to perform the communication, and decides whether to stop or permit the communication.

14. An agent program for realizing a terminal device that can communicate with a management server device using a computer, wherein the computer is Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means determines whether the operation of a detected process is appropriate based on process operation determination information transmitted from the management server device and recorded in the recording unit, and stops any process that is determined to be unsuitable for operation. A communication start detection means for detecting the start of communication in the terminal device, In an agent program that functions as a communication operation determination means for determining whether the operation of a detected communication is appropriate based on communication operation determination information transmitted from the management server device and recorded in the recording unit, and stopping communications that are determined to be inappropriate for operation, The communication operation determination means of the terminal device is characterized in that, with respect to a communication that is deemed unsuitable for operation, the agent program refers to the configuration information recorded in association with the process that attempted to perform the communication and decides whether to stop or allow the communication.

15. In the program of claim 14, The aforementioned communication operation determination information indicates whether or not the server device at the communication destination is appropriate to perform the communication operation. The communication operation determination means of the terminal device is a program that, when it determines that a communication is unsuitable for operation, updates the communication operation determination information to make the server device of the communication destination an appropriate communication destination if it permits such communication.

16. In the program of claim 14, The aforementioned communication operation determination information indicates whether or not the server device at the communication destination is appropriate to perform the communication operation. If the communication operation determination means of the terminal device determines that a communication is unsuitable for operation, and permits the communication, it transmits to the management server device that the server device to which the communication is to be sent should be newly permitted. The communication operation determination information setting means of the management server device is a program that, upon receiving a notification that the server device to which communication should be newly permitted, updates the communication operation determination information to permit the server device to which communication should be permitted, and transmits the communication operation determination information to the terminal device.

17. A management system comprising a terminal device to be managed and a management server device capable of communicating with said terminal device, The aforementioned terminal device is A communication start detection means for detecting the start of communication in the terminal device, The system includes a communication operation determination means that determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. The aforementioned management server device is A communication operation determination information setting means that communicates with the terminal device and transmits the communication operation determination information to the terminal device for recording in the terminal device, A management system characterized by comprising: The management server device registers or updates the communication operation determination information based on the set information sent from the maintenance server device. The management system is characterized in that the maintenance server device records the set information, which is a set of communication destinations and processes necessary to receive services from a service provision server device on the Internet.

18. A management server device capable of communicating with terminal devices, Communication operation determination information setting means that communicates with the terminal device to monitor the communication operation of the terminal device based on communication operation determination information, and transmits the communication operation determination information to the terminal device for recording in the terminal device. In a management server device equipped with, The management server device registers or updates the communication operation determination information based on the set information sent from the maintenance server device. The aforementioned maintenance server device is characterized by recording the set information, which is a set of communication destinations and processes necessary to receive services from a service provision server device on the Internet.

19. A management server program for implementing a management server device that can communicate with terminal devices using a computer, wherein the computer is In a management server program that functions as a communication operation determination information setting means for communicating with the terminal device to monitor the communication operation of the terminal device based on communication operation determination information, and for transmitting the communication operation determination information to the terminal device for recording in the terminal device, The management server device registers or updates the communication operation determination information based on the set information sent from the maintenance server device. The maintenance server device is characterized by recording the set information, which is a set of communication destinations and processes necessary to receive services from a service provision server device on the Internet.

20. A management system comprising a terminal device to be managed and a management server device capable of communicating with said terminal device, The aforementioned terminal device is Process startup detection means for detecting the startup of a process in the terminal device, A process operation determination means that determines whether the operation of a detected process is appropriate based on process operation determination information recorded in the recording unit, and stops any process that is determined to be inappropriate for operation, A communication start detection means for detecting the start of communication in the terminal device, The system includes a communication operation determination means that determines whether the operation of a communication whose start has been detected is appropriate based on communication operation determination information recorded in the recording unit, and stops any communication that is determined to be inappropriate for operation. The aforementioned management server device is A process operation determination information setting means that communicates with the terminal device and transmits the process operation determination information to the terminal device for recording in the terminal device, A communication operation determination information setting means that communicates with the terminal device and transmits the communication operation determination information to the terminal device for recording in the terminal device, A management system characterized by comprising: The management server device registers or updates the communication operation determination information and the process operation determination information based on the set information sent from the maintenance server device. The management system is characterized in that the maintenance server device records the set information, which is a set of communication destinations and processes necessary to receive services from a service provision server device on the Internet.

21. A management server device capable of communicating with terminal devices, A process operation determination information setting means that communicates with the terminal device to monitor the operation of the process in the terminal device based on process operation determination information, and transmits the process operation determination information to the terminal device for recording in the terminal device, A communication operation determination information setting means that communicates with the terminal device to monitor the communication operation of the terminal device based on communication operation determination information, and transmits the communication operation determination information to the terminal device for recording in the terminal device, In a management server device equipped with, The management server device registers or updates the communication operation determination information and the process operation determination information based on the set information sent from the maintenance server device. The aforementioned maintenance server device is characterized by recording the set information, which is a set of communication destinations and processes necessary to receive services from a service provision server device on the Internet.

22. A management server program for implementing a management server device that can communicate with terminal devices using a computer, wherein the computer is A process operation determination information setting means that communicates with the terminal device to monitor the operation of the process in the terminal device based on process operation determination information, and transmits the process operation determination information to the terminal device for recording in the terminal device, In a management server program that functions as a communication operation determination information setting means for communicating with the terminal device to monitor the communication operation of the terminal device based on communication operation determination information, and for transmitting the communication operation determination information to the terminal device for recording in the terminal device, The management server device registers or updates the communication operation determination information and the process operation determination information based on the set information sent from the maintenance server device. The maintenance server device is characterized by recording the set information, which is a set of communication destinations and processes necessary to receive services from a service provision server device on the Internet.

Images