Communication Management Server for Remote Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face challenges in securely and efficiently managing remote access to services provided by local network terminals, particularly in restricting usage based on location and time conditions without requiring complex network configuration changes.
Innovation Solution
A communication system that includes a secure box connected to a local network, which facilitates encrypted communication between an access source terminal and access destination terminals, using a management server to acquire and restrict access information such as location and time data to enforce usage permissions, allowing secure and simplified remote access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If remote access to local network services is permitted, then accessibility and convenience are improved, but security risks and unauthorized access possibilities increase
Solution Approach 1:
The system performs preliminary actions by acquiring location information and time information before granting access to the service. The management server checks whether the access source terminal's location and time fall within the predetermined permitted range, and only allows access when both conditions are satisfied. This preliminary verification ensures security is maintained while enabling convenient remote access.
2Reliability
If usage restrictions based on location and time are implemented, then security is improved, but system complexity and configuration difficulty increase
Solution Approach 1:
The management server acts as an intermediary between the access source terminal and the service-providing terminal. It receives access requests, checks location and time information against predetermined ranges, and controls whether to permit access. This intermediary approach simplifies the overall system by centralizing the restriction logic, avoiding complex configurations on individual terminals or network devices.
Solution Approach 2:
The system implements feedback by continuously monitoring the location and time information of access source terminals and comparing them against predetermined permitted ranges. The management server dynamically controls access based on this feedback, allowing or denying service access in real-time according to whether the current location and time fall within the authorized parameters.
3Measurement precision
If comprehensive access information verification is performed, then security and control precision are improved, but processing time and response delay increase
Solution Approach 1:
The system performs partial verification by checking only the necessary location and time information against predetermined ranges, rather than conducting exhaustive security checks. The management server acquires location information and time information, verifies whether they fall within permitted ranges, and makes access decisions based on this partial but sufficient verification, balancing precision with speed.
Data Source
AI summary
A communication system, a communication management method, and a non-transitory recording medium. The communication system communicates with an access source terminal connected to a first network, a communication apparatus and one or more access destination terminals each connected to a second network, the one or more access destination terminal being configured to provide a service by remote access, in response to a request from the access source terminal to use the service provided by the one or more access destination terminals, acquires access information including location information indicating location of the access source terminal and time information indicating usage time of the service, and restricts use of the service based on the access information and setting information, the setting information previously setting a range of the access information for permitting the use of the service provided by the one or more access destination terminals by the access source terminal.