Access control method, access control apparatus, and access control program

摘要

When an access control apparatus 1 receives an update request for session information of a user terminal 3, the access control apparatus having received the update request identifies multiple access control apparatuses storing therein the session information of the user terminal 3 on the basis of an identifier of the user terminal. Further, the access control apparatus 1 having received the update request sends a new update request for the session information of the user terminal 3 to each of the multiple identified access control apparatuses. Each of the access control apparatuses having received the new update request updates a session-data storage part of the access control apparatus having received the new update request in association with an update time.

主权项

1. An access control method for a system comprising access control apparatuses connected bidirectionally in a communication network, each of the access control apparatus including session-data storage which stores session information of a user terminal, the access control method comprising the steps:
an access control apparatus receives an update request for session information of a user terminal; the access control apparatus having received the update request identifies access control apparatuses storing therein the session information of the user terminal on the basis of an identifier of the user terminal; the access control apparatus having received the update request sends another update request for the session information of the user terminal to each of the identified access control apparatuses; each of the access control apparatuses having received said another update request updates the session-data storage of the access control apparatus having received said another update request by associating session information of the user terminal and an update time with the identifier of the user terminal; if successfully updating the session-data storage, each of the access control apparatuses having received said another update request sends another update response indicating the completion of the update in reply to said another update request to the access control apparatus having received the update request; upon receipt of said another update response from a predetermined number or more of the access control apparatuses having received said another update request, the access control apparatus having received the update request sends an update response indicating the completion of the update in reply to the update request; when service is to be provided to the user terminal, any one of the access control apparatuses receives a reference request for the session information of the user terminal from a service processing system; the access control apparatus having received the reference request identifies the access control apparatuses storing therein the session information of the user terminal on the basis of the identifier of the user terminal; the access control apparatus having received the reference request sends another reference request for the session information of the user terminal to each of the identified access control apparatuses; each of the access control apparatuses having received said another reference request acquires the session information of the user terminal and the update time thereof from the session-data storage of the access control apparatus having received said another reference request and sends the session information and the update time to the access control apparatus having received the reference request; and the access control apparatus having received the reference request compares the pieces of session information of the user terminal and the update times thereof received from the access control apparatuses having received said another reference request to extract the latest session information, and sends the latest session information to the service processing system as a reference response to the reference request.