Hitachi, Ltd.

Alaxala Networks Corporation

Hidemitsu Higuchi

Kazuaki Tsuchiya

Toshikazu Yasue

Naoya Ikeda

Ken Watanabe

Takahisa Miyamoto

Shinichi Hamamoto

Yoshifumi Atarashi

Munechika Sumikawa

Sunao Sawada

Shinji Nozaki

Yukihide Inagaki

Shigeki Yoshino

Yoshitaka Sainomoto

Yukio Shimamoto

Toru Horimoto

Motohide Nomi

Takeshi Aimoto

Takashi Isobe

Yoshinori Watanabe

Takeshi Shibata

Tatsuya Watanuki

Yukio Nakata

Makoto Kitani

Tomoyuki Iijima

Atsushi Kobayashi

Shinsuke Suzuki

Yasunori Yamamoto

Takao Miyabe

Hirotaka Sunami

A communication apparatus including: a plurality of physical ports to be coupled to different terminals via a network; a plurality of authentication processing units configured to execute an authentication process; and a controller configured to determine which one of the physical ports on which a packet was received from a terminal, to specify a preset authentication process corresponding to the determined physical port on which a packet was received, and to distribute the specified authentication process of the packet from the terminal to an authentication processing unit for executing.

Apparatus and system effectively using a plurality of authentication servers

An authentication switch monitors a failure of an external server, and redirect information to a Web server that holds authentication information registration screen data is provided to a terminal using a monitoring result. A life-and-death monitoring control unit for monitoring life and death of an external Web server is disposed within an authentication switch to monitor the life and death of the external Web server. An authentication processing unit within the authentication switch switches the redirect information on the basis of a life-and-death monitoring table of the external Web server provided in the life-and-death monitoring control unit in response to an authentication request from the terminal, and enables web authentication even when the external Web server is in failure.

Authentication switch and network system

It is provided an authentication method for realizing a network authentication function for an authentication system, the authentication system including an authentication server for authenticating a terminal used by a user, and a switch for mediating an authentication sequence between the terminal and the authentication server. The authentication method includes steps of: providing, by the switch, identification information for identifying the switch to the authentication server in the authentication sequence; authenticating, by the authentication server, an authentication request transmitted from the terminal; transmitting, by the authentication server, an authentication result of the authentication to the switch based on the provided identification information on the switch; and authenticating, by the switch, access from the terminal based on the authentication result received from the authentication server.

Authentication method, transfer apparatus, and authentication server

A packet routing apparatus has a plurality of routing units, connected by a first connecting mechanism. The plurality of routing units comprise a first routing unit, connected to at least one port, and a second routing unit, connected to an extended function processor. The first routing unit transmits a packet, received from the port, to another first routing unit and/or a second routing unit. The second routing unit transmits the packet, received from the first connecting mechanism, to the extended function processor.

Packet routing apparatus

A network relay device includes a communication unit, an authentication processing unit, a DHCP snooping processing unit, and a terminal search processing unit. The authentication processing unit creates first information specifying an authenticated terminal device according to web authentication, and manages whether relay of communication data between a terminal device and a node on the specified network is permissible based on the first information. The DHCP snooping processing unit executes snooping of DHCP communication data between a terminal device and a DHCP server, and creates second information specifying a layer 3 address allocated to each terminal device. The terminal search processing unit specifies an authenticated terminal device based on the first information, specifies a layer 3 address allocated to the specified authenticated terminal device based on the second information, and causes the communication unit to send, to the specified layer 3 address, confirmation communication data.

Terminal connection status management with network authentication

Provided is a network management system for managing a plurality of packet relay devices, the network management system comprising: the plurality of packet relay devices constituting networks; and a display device for displaying configurations of the networks, in a case where it is determined that a virtual packet relay device identifier of the virtual packet relay device that is assigned a second-network identifier associated with the extracted second-network identifier is registered in a first-network configuration table, a first-work identifying module is configured to associate a first-network identifier that is associated with the virtual packet relay device identifier with the obtained configuration information, and register the association between the first-network identifier and the obtained configuration information in the first-network configuration table.

Network management system and management computer

In an apparatus, there are provided an IP transmitting and receiving unit for transmitting and receiving an IPv4 packet and an IPv6 packet; an IP header converting unit for performing a mutual conversion of the IPv4 packet and the IPv6 packet by an IP header conversion; a DNS substituting unit for receiving a domain information capturing request sent from an IPv4 terminal or an IPv6 terminal and substituting its process; an IPv4 address capturing unit for capturing an IPv4 address from a DHCP server; and an IP address conversion information holding unit for holding an IPv6 address of the IPv6 terminal and the IPv4 address captured by the IPv4 address capturing unit in correspondence to each other. Thus, a communication with the IPv4 terminal can be executed without preliminarily fixedly allocating the IPv4 address to the IPv6 terminal.

Communicating method between IPv4 terminal and IPv6 terminal and IPv4-IPv6 converting apparatus

A network controller, capable of high-speed extraction of malicious traffic from networks and determining characteristics of such traffic, includes a unit for accumulating a number of packets for each arbitrary itemset included in the header portions of packets to be transferred, and a unit for determining whether the accumulated value obtained by the accumulating unit exceeds a predetermined threshold, and determines the types of packets to be transferred from accumulated values of the itemset and an itemset different from the itemset when the number of packets exceed a threshold.

Network controller and control method with flow analysis and control function

A packet communication method and a packet communication system capable of making an IPv4-compatible application operating on an information processing apparatus communicate with another information processing apparatus connected to an IPv6 network without using an address translation router. In the information processing apparatus connected to the IPv6 network, an IPv4-to-IPv6 protocol conversion control function is incorporated in a LAN driver. A protocol conversion control module receives an IPv4 packet from a protocol control module. When a send destination IPv4 address contained in a header of the packet is registered in an address translation table incorporated in the protocol conversion control module, an IPv6 address is generated to be sent onto a LAN. Unless the send destination IPv4 address contained in the packet header is registered in the address translation table incorporated in the protocol conversion control module, the IPv4 packet as received is intactly sent onto the LAN.

Packet communication method and apparatus and a recording medium storing a packet communication program

Prior art quarantine networks were implemented by two methods, the IEEE802.1x method and the DHCP method, but these methods both have different problems. The problem with the IEEE802.1x method is that it is difficult to make the transition from an existing management framework. The problem with the DHCP method is that it is difficult to prevent attacks on the network itself, and to repeat client quarantine. The present invention implements client login authentication and client security status quarantine independently, and controls layer-2 connectivity based on the respective results. This permits quarantine using an existing management framework, as well as enhancing network protection by layer-2 connection control and permitting repeat quarantine of the client using the same IP address. Moreover, by incorporating other layer-2 connectivity control mechanisms, flexible layer-2 connectivity control outside the quarantine network can also be implemented.

Method and system for network access control

A communications apparatus for converting an IPv4 multicast packet transmit from an IPv4 terminal into an IPv6 multicast packet and transmitting the converted IPv6 multicast packet to one of a plurality of IPv6 networks. The communications apparatus has information indicating to which IPv6 network the IPv4 multicast packet to undergo conversion processing is to be transmitted. The communications apparatus then converts the received IPv4 multicast packet into an multicast packet and transmits the converted IPv6 multicast packet to an IPv6 network where it is required to be sent.

Growing community of inventors

Ebina, Japan

Hidemitsu Higuchi