With respect to a communication operation between networks having no connection permission, a connection control apparatus calculates a communicatable detour communication path from a connection policy database, and in such a case that a communication operation can be carried out between these networks having no connection permission, the connection control apparatus permits the communication operation via a detour communication path after authentication.