Hitachi, Ltd.

Hitachi Maxell, Limited

Hitachi Consumer Electronics Co., Ltd.

Mayuko Tanaka

Yoshimichi Kudo

Shigeto Oeda

Nobuaki Kabuto

Mayumi Nakade

Hiroo Okamoto

Tadashi Kuwabara

Minoru Hasegawa

Makoto Sano

Hiroyuki Koreeda

Tsukasa Hasegawa

Makoto Aikawa

Chiyo Ohno

Chikashi Okamoto

Takanori Yukimatsu

Rodney Gordon Webster

Provided is an abnormal communication discrimination apparatus which includes an eventual feature table for the evaluation of each abnormal communication detection event, and a statistical feature table for the evaluation of each condition in which a statistical amount of abnormal communication holds. The abnormal communication discrimination apparatus calculates an eventual evaluation value from each number of records to which the abnormal communication detection events of the eventual feature table are applicable, calculates a statistical evaluation value from each number of records each of which satisfies a condition that a statistical amount of abnormal communication holds, calculates a discrimination result evaluation value by applying a weighted linear sum of the eventual evaluation value and the statistical evaluation value, and performs, on the basis of the discrimination result evaluation value, discrimination of whether abnormal communication is caused by a cyber-attack or by a failure of an apparatus of the monitoring target system.

Abnormal communication discrimination apparatus, abnormal communication discrimination method, and abnormal communication response system

In a security management system, communication paths used for communication between business devices constituting a monitoring target system and a business communication importance which is information indicating an importance of each of the communication paths are stored, communication performed in the monitoring target system is monitored, when unauthorized communication performed in the monitoring target system is detected, a communication path used for the unauthorized communication is specified, and an influence range of the unauthorized communication on the monitoring target system is specified based on the specified communication path, the communication path having a possibility of being influenced when the countermeasure is implemented is specified, an influence value which is an index indicating a degree of influence of the countermeasure on the business is obtained, and whether or not to automatically implement the countermeasure is determined based on the influence value.

Security management system and security management method

A communication monitoring and coping apparatus includes: a processor; a memory; an unauthorized communication detection unit that detects unauthorized communication in a network in which a plurality of devices are connected to communicate with each other and identifies a device involved in the detected unauthorized communication; a coping process determination unit that searches for another device that substitutes for the identified device and generates coping information, which is information of a process performed in place of the identified device, based on information on the network and information on each of processes performed by the plurality of devices; and a coping information transmission unit that transmits the generated coping information to an information processing apparatus that causes the other device to execute the process indicated by the coping information.

Apparatus for detecting unauthorized communication in a network and searching for a substitute device

An abuse using a legitimate communication used for executing a business sequence is detected. A legitimate communication determination processing unitdetermines whether or not a communication packet received by a communication destination device is a legitimate communication packet permitted by a monitoring target systembased on meta information extracted by a packet collection processing unita sequence packet identification processing unitdetermines whether or not the communication packet determined to be the legitimate communication packet by the legitimate communication determination processing unitis a communication packet constituting the business sequence, and a sequence establishment determination processing unitdetermines whether or not the business sequence related to the communication packet determined to constitute the business sequence by the sequence packet identification processing unitis established.

Communication monitoring system, communication monitoring apparatus, and communication monitoring method

A communication monitoring apparatus holds a communication pair model and the number of communications of a communication pair generated during, before, and after a determination target period, calculates the number of model communications of the other of the pair during the determination target period from the communication pair model and the number of communications of one of the pair, compares a value based on a difference between the number of communications of the other of the pair and the number of model communication with a threshold value, and if an abnormality is determined to have possibly occurred in a communication of the communication pair during the determination target period, based on the number of communications of the communication pair during a total time, and on the communication pair model, determine whether the abnormality has occurred in the communication of the communication pair.

Communication monitoring apparatus and communication monitoring method

According to the present invention, even when the operation requested through the second transmission path (or first transmission path) cannot be performed, it is possible to perform the requested operation by using the function of the device coupled to the first transmission path (or second transmission path).

Video signal transmission/reception method, display device, and decoding device

Operation controlling apparatus executing equipment operation controlling, including: an equipment management portion configured to manage control commands corresponding to plural number of control items; a video producing portion configured to produce videos corresponding to the plural number of control items; a video display portion configured to display video produced by the video producing portion laying on a control surface; a distance detector portion configured to detect distance from the video producing portion to the control surface; and a controller portion configured to control the video display portion, so that a size of the video to be displayed by the video display portion is within a size of the control surface, depending on the distance detected by the distance detector portion, and to make equipment of a control target execute the control command, which is managed by the equipment management portion, when execution of the control item is determined.

Operation controlling apparatus

A display device includes a first interface, a second interface and a display circuit. The display device transmits a first connection confirmation signal to confirm connection, via the first interface to a playback device and receives a response signal in reply to the first connection confirmation signal, transmits a second connection confirmation signal to confirm connection, via the second interface to the playback device and receives a response signal in reply to the second connection confirmation signal, and makes a function to use the first and second interfaces between the display device and the playback device available if both response signals in reply to the first and second connection confirmation signals are received.

Display device and play-back device having respective first and second interfaces

An operation controlling apparatus executing operation controlling for plural equipment connected therewith, including: an equipment management portion configured to manage a control command for each of plural numbers of control commands, for each of the plural numbers of equipments; a projector portion configured to project an image of each control item, for each of the plural numbers of equipments; a distance detector portion configured to detect distance from said projector portion to a projection surface, on which the projector portion project the image; and a controller portion configured to control the projector portion so as to change the control item to be projected by the projector portion, depending on the distance detected by the distance detector portion, and to bring the equipment of control target to execute the control command, which is managed by the equipment management portion, when execution of the control item projected is determined.

In a broadcasting receiver, the receiver is so operated as not to disturb viewing by audiences other than an operator. The broadcasting receiver has an image pickup unit for photographing images of televiewers, a face detection unit for detecting faces of the televiewers from the photographed image, an individual discrimination unit for managing detected faces discriminately, a watching concentration degree calculation unit for calculating degrees of concentration of watching a television in respect of individual discriminated faces and an operation execution decision unit for deciding a television operator and deciding execution of operation in accordance with values of watching concentration degrees of the televiewers other than the operator.

Broadcasting receiver with function to determine as to whether instruction from operator is executable

A content transmission apparatus including: an authenticator configured (i) to perform authentication, (ii) to share an authentication key, (iii) to request transmission range acknowledgement and authentication information, (iv) to receive a response, and (v) to share an exchange key; an encryptor to encrypt based on the exchange key; and a timer measuring a time interval between transmission of said request for transmission range acknowledgement and reception of a response; wherein, said authenticator measures said time interval using said timer, and if a time measurement value exceeds a predetermined value, said authenticator does not share said exchange key; and wherein, said response of said request for transmission range acknowledgement includes a data generated based on said authentication information and said authentication key, and if said data is incorrect, said authenticator does not share said exchange key.

Content transmission apparatus, content reception apparatus and content transmission method

A copyright of a content is protected by preventing creation of illegal copies of the content and the content is prevented from being transmitted beyond a range of personal use in a process to transmit the content through a LAN. Before transmission of a content, a content transmission apparatus and a content reception apparatus perform a determination of authentication information available in a predetermined command accompanying authentication information, or an authentication determination based on a time until reception of a response to a predetermined command request accompanying predetermined authentication information. If the authentication is unsuccessful, the requested content is not transmitted to the content reception apparatus. With such arrangement, it is possible to effectively protect a copyright when a content is transmitted by way of a network.

The present invention is intended to simplify the user's initial setup operation when connecting a new network device to a network in his/her house/room, and further to prevent connection of a network device that is unknown to that user. A network connection management device, when receiving a network connection request from a new network device, sends the request to other network devices connected already to the network. The request then is displayed on each respective displaying means in order to prompt the user to confirm the request. The confirmation data inputted by the user through the inputting means of any of these network devices is sent to the network connection management device, which then determines whether to permit the connection to said network. When the decision result is 'YES' (permit), the new network device is connected to the network.

Growing community of inventors

Yokohama, Japan

Mayuko Tanaka