Fujitsu Corporation

Kazumine Matoba

Hitoshi Ueno

Kenichi Abiru

Kouichirou Amemiya

Masaaki Takase

Makoto Kubota

Tomoyuki Sone

A system includes a first device configured to provide a first service usable by a first user, a second device configured to provide a second service usable by a second user, and a third device configured to include a memory and a processor coupled to the memory. The processor is configured to receive a first instruction from the first user, the first instruction for disclosing information about the first service to the second user, transmit authentication information to the second user based on the reception of the first instruction, and disclose information collected from the first service to the second user when receiving an access using the authentication information from the second user.

System, method of disclosing information, and apparatus

The network separation device, comprising: a processor configured to perform as a selector, a first relay device and a second relay device; the selector that selects a packet relayed between networks; the first relay device that includes first routing information and outputs to the selector a first packet; the second relay device that includes second routing information and outputs to the selector a second packet, wherein: the selector holds a relay rule of an application layer, selects a first relay packet, and outputs the first relay packet to the second relay device; the second relay device relays the first relay packet to an apparatus registered in the second routing information; the selector selects a second relay packet and outputs the second relay packet to the first relay device; and the first relay device relays the second relay packet to an apparatus registered in the first routing information.

Network separation method and network separation device

A disclosed method include: receiving, an identifier of a user, an identifier of contents associated with the user and identification data concerning a sensor that read the identifier of the user; reading an identifier of a node associated with the received identification data or a combination of the received identification data and the received identifier of the user, from a data storage unit storing an identifier of a node that will cache contents to be outputted to a display device provided at a different position from a position of a sensor in association with identification data concerning the sensor or a combination of identification data concerning the sensor and an identifier of a user; and transmitting the received identifier of the user and an identifier of contents associated with the user to a node whose identifier was read.

Distributed cache control technique

A method of content delivery executed by a computer is provided. The computer specifies an identifier of a content associated with an user identifier, an identifier of a device at a delivery destination of the content, and time until data of the content is delivered to the device at the delivery destination, when event data including the user identifier read by a sensor is received. The computer calculates, from the specified time, a clock time to start content sending to the device at the delivery destination of the content or a clock time to start data sending to a device that carries out the content sending, and stores these data, and sends the stored data to the device of the delivery destination, at a clock time that is stored in the data storage unit.

Method of content delivery, information processing device, and information processing system

A disclosed system includes a first computer that stores data, a display apparatus that is capable of reading a user identifier, a second computer, and plural third computers. The second computer includes a data storage unit storing first correlation data to correlate a user identifier with at least one third computer, and a controller that refers to the first correlation data upon detecting an event data, identifies a third computer correlated with a first user identifier included in the event data, and transmits the first user identifier to the identified third computer. Each third computer includes a receiver that receives the first user identifier, a storing unit that obtains from the first computer, and stores data identified based on the received first user identifier, and a controller to transmit data corresponding to a second user identifier, which was received from the display apparatus, based on the second user identifier.

Distributed cache system for delivering contents to display apparatus

The control node, on the basis of the connection information between the distribution nodes and the load information of the distribution nodes, determines a distribution node of the distribution destination to which one of a plurality of distribution nodes subsequently distributes the data, and the data type which is distributed to the distribution node of the distribution destination. The control node distributes node information which specifies the distribution node of the determined distribution destination and type information which specifies the determined data type. The distribution node receives the node information and the type information distributed from the control node. The distribution node, when it receives the data distributed from the other distribution nodes, selects the data of the type specified by the type information from the received data. The distribution node transmits the data of the selected type to the distribution node specified by the node information.

Distribution system, distribution method, and memory medium thereof

A load balancing apparatus stores a transfer rule in which a path control identifier for identifying a path for a message sent from a client device is associated with relay device information for specifying a relay device that creates the path control identifier. When receiving a message from the client device, the load balancing apparatus determines whether the message contains the path control identifier. If the load balancing apparatus determines that the path control identifier is contained, the load balancing apparatus specifies, from the transfer rule, relay device information with which the path control identifier is associated and then sends the message to a relay device that is specified by the specified relay device information. In contrast, if the load balancing apparatus determines that the path control identifier is not contained, the load balancing apparatus sends the message to the relay device specified in accordance with a predetermined condition.

Load balancing apparatus and load balancing method

A flow state monitoring part obtains a frame that is output from firewall units using former and new rules, and monitors a flow state to which each of the former and new rules is applied. When the flow has ended for both the former and new rules, the flow state monitoring part notifies a frame holding part of the end of the frame. Upon receiving the notice of the end of the flow, the frame holding part outputs two captured information items each including a group of frames for the flow in accordance with each rule to a flow comparison part. The flow comparison part compares the two captured information items, and abandons those captured information items if they completely coincide with each other. If there is a difference, the flow comparison part outputs those captured information items.

Rule verification apparatus and rule verification method

A relay node functions as a master node or a slave node and includes a status monitoring means, an update requesting means, a master transferring means, and a master accepting means. The status monitoring means monitors a status of a connection related to communication data. The update requesting means transmits a first update request to a first node upon the relay node receiving first communication data while the first node functioning as the master node. The master transferring means determines whether to transfer authority of the master node to a second node in accordance with a status of a first connection upon the relay node receiving a second update request from the second node. The master transferring means transmits a first master transfer notification to the second node. The master accepting means prepares to become the master node upon the relay node receiving a second master transfer notification.

Relay node

In a firewall device protecting a specific network against an attack from an external network, a filtering object identifying portion identifies whether or not received data includes filtering object data, a filtering execution/inexecution selector transmits to a source device of the received data, when the received data includes the filtering object data, a selection request of a desire for a filtering execution or inexecution of the received data, does not select the filtering execution of the received data from the source device on a condition that a selection response indicates a desire for the filtering inexecution and the source device is authenticated, but selects the filtering execution under other conditions, and a filtering processor filters the selected received data.

Firewall device

A method of realizing uniqueness assurance includes: selecting a server to which a first message is to be transferred from multiple servers and transferring the first message to the selected server when the first message is received from a terminal apparatus by a load sharing apparatus; storing a second message that should be transferred to the same server as that of the first server when the second message is received from the terminal apparatus by the load sharing apparatus after the first message is transferred; generating uniqueness assurance information corresponding to the communication protocols corresponding to a session generated by the server to which the first message is transferred, the uniqueness assurance information indicating the correspondence between the session and the message corresponding to the session; and transferring the second message in accordance with the generated uniqueness assurance information if the stored second message exits.

Method of realizing uniqueness assurance and method of determining message destination

A relay unit includes: a storing unit storing a first correspondence relation between interface information of a client and a tenant identifier of the client, and a second correspondence relation among the tenant identifier, connection information about a connection with a server, and a state of connection with the server; a tenant identifying unit obtaining the tenant identifier from the first correspondence relation; a connection identifying unit creating the first connection information and adding the correspondence relation among the created first connection information, the obtained tenant identifier, and the state to a busy state into the second correspondence relation; and a connection creating unit creating a connection with the server and transmitting the obtained tenant identifier and the message to the server, wherein the connection identifying unit sets the state to an unused state in response to a reply message from the server.

Relay unit

The relay device, comprising an address correspondence holding section which holds, for each of the terminals, the IP address and real MAC address of the terminal and a virtual MAC address being a MAC address that is virtual; a proxy reply section which, when a first ARP request frame that seeks the acquisition of the virtual MAC address from the terminal is received, reads the virtual MAC address of the corresponding terminal from the address correspondence holding section and sends back the virtual MAC address to the terminal; a MAC address conversion section which receives a first frame addressed to the virtual MAC address when the first frame is sent and received between the terminals, performs conversion of the virtual MAC address and real MAC address for the MAC address of the first frame, and sends back a converted second frame; and a security check section.

Relay device, path control method, and path control program

It is an object to increase a processing-enabled user count and traffic size by avoiding frames from being discarded without any increase in buffer size within a bandwidth control device. A bandwidth control device includes a response measuring module measuring a size of a response frame and calculating, based on the measured size, a predictive traffic size as a size of the traffic of the response frame predicted to be received as a response to a request frame, and a bandwidth control module controlling a traffic rate of the response frame corresponding to the request frame by controlling a traffic rate of the request frame on the basis of the calculated predictive traffic size.

Bandwidth control device and bandwidth control method

An encryption communication system, comprising a communication relay device that connects a first network and a second network, for encrypting a communication within the first network and a communication within the second network in a network system configured so that communications are performed between a client in the first network and a server in the second network via the communication relay device, wherein the communication relay device comprises key generation unit generating an encryption key and a decryption key with respect to the client, and key transfer unit transmitting the encryption key and the decryption key to the server, and the server comprises frame receiving unit decrypting a receipt frame by use of the decryption key, and frame transmitting unit encrypting the frame by use of the encryption key and thus transmitting the frame.

Growing community of inventors

Kawasaki, Japan

Kazumine Matoba