Host Name-Based Access Control for Dynamic IP Environments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional techniques for controlling access to external terminals by filtering IP addresses are inadequate, as users must manually update permitted IP addresses when they change, leading to potential communication disruptions with servers that should remain accessible or become inaccessible.
Innovation Solution
An information processing apparatus and method that determines whether a designated host name is set in a terminal list for permitted data transmission destinations, allowing data transmission regardless of the corresponding IP address being set, ensuring connectivity even if the IP address changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IP address-based filtering is used to control access to external terminals, then access control security is improved, but the system becomes vulnerable to communication disruptions when IP addresses change
Solution Approach 1:
The patent changes the filtering parameter from IP address to host name. Instead of filtering based on numerical IP addresses that change frequently, the system filters based on host names (domain names) that remain stable. The determination unit resolves host names to IP addresses and performs filtering based on host name matching, allowing the system to maintain security while adapting to IP address changes without requiring user intervention.
2Manufacturing precision
If manual IP address updating is required when terminal IP addresses change, then filtering precision is maintained, but user operation complexity and time loss increase
Solution Approach 1:
The system performs automatic host name resolution and filtering without requiring user intervention. When data transmission is attempted, the determination unit automatically resolves the host name to an IP address, checks if the host name matches the permitted terminal list, and allows or blocks the transmission accordingly. This self-service mechanism eliminates the need for manual IP address updates while maintaining filtering precision.
3Measurement precision
If only IP addresses are permitted in the terminal list, then filtering accuracy is improved, but the system cannot adapt when opposing terminals use changed global IP addresses
Solution Approach 1:
The patent introduces host name as an intermediary between the user and the actual IP address filtering. The host name serves as a stable identifier that mediates the connection between the permitted terminal list and the actual data transmission. The determination unit resolves host names to IP addresses and performs the actual filtering, allowing the system to maintain accurate filtering while adapting to IP address changes through the host name intermediary.
Data Source
AI summary
An information processing apparatus determines, when a data transmission is executed, whether or not a host name designated as a destination of the data transmission is set to a terminal list indicating an external terminal that is permitted as a data transmission destination, and if a result of the determination is that the host name is set to the terminal list, permits data transmission irrespective of whether or not an IP address corresponding to the host name is set to the terminal list; and executes data transmission if data transmission is permitted.