| 摘要 |
<P>PROBLEM TO BE SOLVED: To maintain the security of a computer network system. <P>SOLUTION: The security information definition is stored in a management server 1, and an access authorization policy is stored. A client computer 2 acquires the security information definition from the management server 1 and checks a state of security of itself. A result of the check is transmitted to the management server 1, and stored in a security check result storage part 15 of the management server 1. An access authorization list determination part 16 of the management server 1 creates an access authorization list on the basis of a result of the security check and an access authorization policy, and is determined in an access control device 3. The access control device 3 abandons the communication to an access control object from a client computer 2 not found in the access authorization list. On the other hand, in a case when it is determined that the application of security update is necessary as a result of security check, a security update program is acquired from a security update providing server 4 and executed. <P>COPYRIGHT: (C)2006,JPO&NCIPI |
