Network node machine and information network system

Abstract

In the global information sharing and distributing service system, the public use of idle resources can be propelled and sufficient security can be guaranteed on the resources for private use. A node machine configuring an information network includes resources located in a private zone available to private use, resources located in a public zone for public service use, and a private resource security management unit for management of the security of the resources located in the private zone.

1 . A node machine configuring a network, comprising: 
 resources located in a private zone for private use;    resources located in a public zone for use in a public service; and    a private resource security management unit managing security of the resources located in the private zone between the private zone and the public zone.    
   
   
       2 . The machine according to  claim 1 , further comprising 
 a node security management unit operated in the network node machine and realizing a security barrier function between the private zone and the public zone using said private resource security management unit.    
   
   
       3 . The machine according to  claim 2 , wherein 
 node security management units operating in a plurality of respective network node machines form a community, and the community has a hierarchical structure.    
   
   
       4 . The machine according to  claim 3 , wherein 
 in the hierarchical structure of the community, said node security management unit in the network node machine corresponding to each community comprises a community security management unit having an interface function with a higher community.    
   
   
       5 . The machine according to  claim 4 , wherein 
 said community security management unit manages permissibility of subscription of said node security management unit to the community.    
   
   
       6 . The machine according to  claim 5 , further comprising 
 an access permission attribute condition storage unit storing an attribute condition for an access permission determination to a public policy describing a condition including resources to be presented for a public service after subscription corresponding to an attribute of said node security management unit requesting subscription of the community, wherein    said community security management unit manages permissibility of subscription to a community using the stored contents.    
   
   
       7 . The machine according to  claim 4 , wherein 
 said community security management unit manages accessibility to resources located in the private zone of the network node machine corresponding to a community to which said unit belongs from the node security management unit of another community.    
   
   
       8 . The machine according to  claim 7 , wherein 
 said network node machine in which said community security management unit operates further comprises    an access permission attribute condition storage unit storing an attribute condition for an access permission determination in response to an attribute of said node security management unit of the other community requesting access to the resources located in the private zone of the community to which the machine belongs, wherein    said community security management unit manages accessibility using the stored contents.    
   
   
       9 . The machine according to  claim 4 , wherein 
 said network node machine in which said community security management unit operates further comprises    a community management data storage unit storing information about a higher community and a lower community and a logical address corresponding to a communications path in which security is confirmed in a hierarchical structure of the communities, wherein    said community security management unit manages security of a community using the stored contents.    
   
   
       10 . An information network system, comprising: 
 resources located in a private zone for private use;    resources located in a public zone for use in a public service; and    a private resource security management unit managing security of the resources located in the private zone between the private zone and the public zone, wherein    said system is configured by node machines connected to each other over a network.    
   
   
       11 . A network node machine configuring a network, comprising: 
 resources located in a private zone for private use;    resources located in a public zone for use in a public service; and    private resource security management means for managing security of the resources located in the private zone between the private zone and the public zone.    
   
   
       12 . An information network system, comprising: 
 resources located in a private zone for private use;    resources located in a public zone for use in a public service; and    private resource security management means for managing security of the resources located in the private zone between the private zone and the public zone, wherein    said system is configured by node machines connected to each other over a network.