VPN ACCESS CONTROL SYSTEM, OPERATING METHOD THEREOF, PROGRAM, VPN ROUTER, AND SERVER

摘要

To provide a VPN access control system, an operating method thereof, a non-transitory computer-readable recording medium having a program recorded thereon, a VPN router, and a server capable of reducing the effort of work of an administrator and quickly permitting remote access. A VPN access control system includes a VPN router and an image server. The VPN router executes a router authentication process based on router authentication information, and the image server executes a server authentication process based on server authentication information. The image server receives an access right granting request from a portable terminal of a registered user to which the access right has been granted and executes a first user registration process. The VPN router executes a second user registration process based on a command from the image server, and transmits an authentication information notification to a user who is an access right granting target.

主权项

1. A VPN access control system including a VPN router having an authentication function of providing access permission based on router authentication information in case where receiving an access request from a terminal of a registered user to which an access right has been granted, and a server having an authentication function of providing access permission based on server authentication information separate from the router authentication information in case where receiving the access request from the terminal of the registered user via the VPN router, the VPN access control system controlling remote access to an internal communication network to which the server is connected, from an external communication network of the VPN router,
wherein the server includes: a request reception unit that receives an access right granting request for granting the access right to a terminal of an unregistered user to which the access right has not been granted, the access right granting request being issued from the terminal of the registered user to which the access right has been granted; a first user registration unit that executes issuing of the server authentication information and first user registration for the unregistered user based on the access right granting request; and a command issuing unit that issues a command including the server authentication information and instructing the VPN router to issue the router authentication information and perform second user registration, and the VPN router includes: a second user registration unit that issues the router authentication information based on the command and executes the second user registration; and an authentication information transmission unit that transmits authentication information including the router authentication information and the server authentication information to the unregistered user.