DISKLESS CLIENT AUTHENTICATION SYSTEM, AUTHENTICATION SERVER, PROGRAM, AND DISKLESS CLIENT AUTHENTICATION METHOD

1 . A diskless client authentication system configured to include an authentication server of a diskless client and a filter on a communication path between the diskless client and a file server storing a startup file of the diskless client, wherein

the filter permits or prohibits communication between the diskless client and the file server according to an instruction of the authentication server, and

the authentication server includes:

a storage unit including a client management database that stores identification information of the diskless client and an authentication state in association with each other;

an address assignment unit, including one or more processors, configured to execute a process of assigning a network address to the diskless client;

an authentication unit, including one or more processors, configured to execute a process of authenticating the diskless client to which the network address has been assigned;

a filter control unit, including one or more processors, configured to instruct the filter to permit or prohibit communication between the diskless client and the file server; and

a client control unit, including one or more processors, configured to:

instruct, when the diskless client to which the network address has been assigned is in an unauthenticated state with reference to the client management database, the authentication unit to execute the process of authenticating the diskless client, and

instruct the filter control unit to permit communication between the diskless client and the file server when the process of authenticating is successful.

2 . The diskless client authentication system according to claim 1 , wherein

when instructing the filter control unit to permit communication between the diskless client and the file server, the client control unit is configured to instruct the diskless client to restart.

3 . The diskless client authentication system according to claim 1 , wherein

in any of a case of receiving a notification of release of an assigned network address from the diskless client,

a case of reaching an assignment expiration of the network address, and

a case of receiving a disconnection instruction from the diskless client,

the client control unit is configured to instruct the filter control unit to prohibit communication between the diskless client and the file server, and set an authentication state of the diskless client as unauthenticated.

4 . The diskless client authentication system according to claim 1 , wherein

the filter is configured to permit or prohibit passage of communication data exchanged between the diskless client and the file server based on at least one of a physical address, a network address, and protocol identification information of the diskless client and the file server.

5 . An authentication server that is on a communication path between a diskless client and a file server that stores a startup file of the diskless client, is communicatively connected to a filter that permits or prohibits communication between the diskless client and the file server, and authenticates the diskless client, the authentication server comprising:

a storage unit including a client management database that stores identification information of the diskless client and an authentication state in association with each other;

an address assignment unit, including one or more processors, configured to execute a process of assigning a network address to the diskless client;

an authentication unit, including one or more processors, configured to execute a process of authenticating the diskless client to which the network address has been assigned;

a filter control unit, including one or more processors, configured to instruct the filter to permit or prohibit communication between the diskless client and the file server; and

a client control unit, including one or more processors, configured to:

when the diskless client to which the network address has been assigned is in an unauthenticated state with reference to the client management database, instruct the authentication unit to execute the process of authenticating the diskless client, and

instruct the filter control unit to permit communication between the diskless client and the file server when the process of authenticating is successful.

6 . A program for causing a computer to function as the authentication server according to claim 5 .

7 . A diskless client authentication method of an authentication server that is on a communication path between a diskless client and a file server that stores a startup file of the diskless client, is communicatively connected to a filter that permits or prohibits communication between the diskless client and the file server, and authenticates the diskless client,

wherein the authentication server includes

a storage unit including a client management database that stores identification information of the diskless client and an authentication state in association with each other, and the diskless client authentication method comprises:

executing a process of assigning a network address to the diskless client;

authenticating a diskless client to which a network address has been assigned when the diskless client is in an unauthenticated state with reference to the client management database; and

instructing the filter to permit communication between the diskless client and the file server when the authentication of the diskless client is successful.