Hitachi, Ltd.

Hiromi Isokawa

Makoto Kayashima

Norio Suzuki

Hiroshi Nakagoe

Shinichi Tsunoo

Takatoshi Kato

Takashi Tsunehiro

Hiroyuki Higaki

Hiroki Yamazaki

Kazushi Nakagawa

Tomotada Naito

Nobuaki Onodera

Yasuji Ishida

Toru Senoo

A confidential information setting apparatus includes: a communication unit that acquires an encryption key and condition information, which is a condition for setting a secret key to a terminal, from a memory unit of a server and acquires a terminal ID, which is an identifier for uniquely identifying the terminal, and the secret key associated with the terminal ID and encrypted from a memory unit of a user apparatus; an encryption processing unit that decrypts the encrypted secret key with the encryption key; and a control unit that judges whether the decrypted secret key can be set to the terminal or not, based on the condition information and sets the secret key to the terminal when a result of the judgment indicates that the secret key can be set to the terminal.

Confidential information setting method, confidential information setting system, and confidential information setting apparatus

The present invention efficiently displays in a tree structure form a file operation history. A file storage identifier, an operation identifier, and a count are stored as additional meta-information in an alternate data stream with respect to each file stored in a client terminal file system. The operation identifier manages a number of operations (operation generations). The count manages copy frequencies. This meta-information is also sent to a management apparatus, and used for displaying the file operation history in a tree structure form.

Computer system management method and client computer

The content of operations is identified and an alert is generated to an operation having a high risk of information leakage. An agent monitors, for example, operations performed with respect to a dialogue displayed on a client PC. If a file is selected by an operation performed with respect to the displayed dialogue, the agent assigns an identifier indicating a source for the file to the file. If the file is sent as an attached file, the agent identifies an output destination for the attached file as well as the source for the attached file; and if the output destination for the attached file is an external Web server and the source for the attached file is a mail server, the agent generates an alert by determining that an unauthorized operation has been executed; and then sends the generated alert to a management server.

Unauthorized operation detection system and unauthorized operation detection method

An application distribution control system is made up of an information processing apparatus including a data collecting part that collects and stores data of a use state when using an application of an application distribution server into a memory and a data moving part that moves the use state data to a client terminal; the client terminal including a data setting part that receives the use state data from the information processing apparatus to set a use state of the application in accordance with the use state data and a request transmitting part that transmits a use request for the application to the application distribution server; and the application distribution server including a service providing part that receives the use request for the application from the client terminal to allow for the use of the application through the network.

Application distribution control system, application distribution control method, information processing apparatus, and client terminal

A client computer detects a user operation for transmitting data to a server or a storage device, determines whether the detected user operation is a fraudulent manipulation, and, if the determination is a positive result, performs security processing which is processing related to security of data to be transmitted. If the data is data within a group to which the user belongs and a destination of the data is a server or a storage device outside the group, the determination is a positive result.

Fraudulent manipulation detection method and computer for detecting fraudulent manipulation

A network quarantine management system eliminates registration or updating work of a quarantine-exempted device and prevents a fraudulent device from abusing authorized network information registered as a quarantine-exempted device and from impersonation. When a quarantine management system detects network connection of a new device, the system judges the type (printer, NAS, etc.) of the device by port scanning. The system enables the device to communicate with another device coupled to a business network without an inspection for connecting the device to the business network, if the newly coupled device is judged to be of an authorized type. The device type judgment is conducted whenever a connection is made and is repeatedly conducted after establishment of the connection to check that the type is of an authorized type and, if the type is found to be an unauthorized type, the device is isolated for inspection.

Method for device quarantine and quarantine network system

A thin client terminal that can perform information processing in an off-line state is provided. A thin client terminalsends a request for registration of data to be used off-line and designation of application software to be used off-line to a management serverthrough a remote computer. The management serverregisters the data and application software according to the request. The thin client terminalrequests the management serverto acquire the requested data and application software, receives the data and application software, and stores the received data and application software into a storage medium

Application software and data management method, management system, and thin client terminal, management server and remote computer used therefor

In an integrated management system for providing a network system having a plurality of computers with a security function and managing a plurality of target products, implementation of the management system itself is facilitated by providing the management system with setting information templates prepared for respective target products, a management program for managing setting information files of target products actually used in a target network, an edit program for editing setting information files, and an install program for installing setting information files created by using the management program and the edit program in respective target devices.

Growing community of inventors

Sagamihara, Japan

Hiromi Isokawa