Duaxes Corporation

Other

National Institute of Advanced Industrial Science and Technology

Koken Company, Limited

Bits Co., Ltd.

Mitsugu Nagoya

Genta Iha

Kazumi Sakamaki

Kenji Toda

Toshihiro Katashita

Atsushi Suzuki

Takeshi Inui

Kimie Katagiri

Tadamasa Takayama

Yasunori Terashima

Mitsuji Matsumoto

A communication management system includes: a normal signature list which stores a list of signatures of normal communication; a search circuit which acquires communication data and searches the normal signature list to check if the signature of the communication data appears in the list; and a warning unit which issues a warning when communication data does not match any signature in the normal signature list. An operator terminal includes: a determination result acquisition unit which indicates whether or not communication data against which a warning has been issued is normal; and a normal signature list update unit which, when communication data against which a warning has been issued is found to be normal, adds the signature of the communication data to the normal signature list.

Communication management system and communication management method

A communication management system comprises a first rule database storing a rule for extracting specific communication data among communication data; a search unit searching the first rule database to check if the communication data complies with a rule stored therein; an output unit which, when the communication data complies with the rule stored in the first rule database, outputs the communication data; an update unit accepting a change in a rule and updating it; a second rule database storing the updated rule changed by the update unit; and a database server transmitting the updated rule from the second rule database to the first rule database, and reflects in real time, the change in a rule.

A communication management system includes a terminal which has a peer to peer connection to communicate with a node conducting peer to peer communication, a content detector which, when the terminal receives from the node a content of which distribution should be controlled, detects identification information of the content, and a communication control apparatus which refers to the detected identification information to control transmission of the content of which distribution should be controlled.

Communication management system, communication management method and communication control device

The present invention provides a technique for improving the security of access to contents. A virus/phishing site list contains a list of URLs of phishing sites, which masquerade as valid websites and are provided with an attempt to acquire private information including card numbers, PIN numbers and passwords, from users illegally. When a communication control unit receives, via a network, a packet that contains communication data for requesting access to a content, a search circuit compares the URL of the content to be accessed included in the communication data, with URLs of phishing sites included in the virus/phishing site list. If the address of the content to be accessed matches a URL of a phishing site, a process execution circuit will prohibit the access to the content.

Communication control device and communication control system

A communication control apparatus includes a database which stores identification information of a party on the other end of communication with whom communication should be controlled, a search circuit which acquires communication data for requesting a connection to a party on the other end of communication and searches the database for the identification information of the party on the other end of communication, and a control unit which, if the identification information of the party on the other end of communication is found in the database, transmits a connection termination request to a terminal of the transmission source, and further transmits a connection request thereto so as to establish, in place of the party on the other end of communication, a connection with the terminal of the transmission source of the communication data and controls communication between the transmission source and the party on the other end of communication.

Communication control device and communication control method for an emergency call over the internet

The present invention provides a technique for managing P2P communication appropriately. Each P2P node constituting a P2P network in a communication management system conducts P2P communication with another P2P node. A P2P node has a P2P connection to communicate with a P2P node. A node detector refers to communication data transmitted from or to a P2P node to detect identification information of a P2P node, and registers the information in a P2P node database. A communication control system possessed by an ISP refers to identification information stored in the P2P node database, so as to detect and perform filtering on P2P communication between P2P nodes.

Communication management system, communication management method, and communication control device

The present invention provides a technique for enabling a high-speed communication control apparatus. A packet processing circuit of a communication control apparatus includes a user database, a virus list, a whitelist, a blacklist and a common category list. Upon acquisition of a request for access to a content, matching between information on a user who has sent the access request and the user database is performed by a search circuit, so as to authenticate the user. When the user is authenticated, the search circuit performs matching between the URL of the content to be accessed and the virus list, whitelist, blacklist and common category list. A process execution circuit controls the permission for the access based on the search result of the search circuit and determination conditions stored in a second database. The packet processing circuit is configured with a wired logic circuit.

The present invention provides a technique for enabling high-speed binary search. A binary search circuitsearches a database, which stores pieces of data aligned in ascending or descending order, for comparison target data by binary search. Comparison circuitsA,B andC compare pieces of data read out from databasesA,B andC with the comparison target data. A control circuitZ inputs each piece of data at the 1/2, 2/2, . . . , and (2&#x2212;1)/2positions in the search range of the databaseinto 2&#x2212;1 comparison circuits respectively and allows the comparison circuits to compare the pieces of data thus input with the comparison target data, so as to perform n searchs simultaneously in parallel.

Binary search circuit and method

The present invention provides a technique for determining processing to be performed at high speed. When processing to be performed is determined through multiple condition judgments and branches, a comparison target extraction circuit extracts from acquired data multiple pieces of determination data used for the condition judgments and branches and connects the pieces to generate comparison target data. A first database and a second database store reference data generated by connecting a possible value of each of multiple pieces of determination data and also store a processing content to be performed, in which the reference data and the processing content are related to each other. A binary search circuit collectively conducts multiple condition judgments and branches by searching the first database for comparison target data and outputs a processing content to be performed.

Determining device and determining method for determining processing to be performed based on acquired data

Network device testing equipment capable of testing network devices using small size packets and for a transferring ability and a filtering ability at a media speed is described. A configuration is adopted in which a Field Programmable Gate Array (FPGA) included in a transmitter or receiver on one or both of transmitting and receiving sides is connected directly to a physical layer chip of a network and computers on both the transmitting and receiving sides are connected thereto. Each of the FPGAs of the transmitter and receiver has a circuit which has an integrated function of transmitting a packet pattern generation function and a packet-receiving function, thereby enabling a test and an inspection in real time. When inspecting the filtering function, a hash table storing therein a hash value and a list of occurrence frequencies for hash values is utilized. In order to avoid the hash values of different packets from having a same value, the hash function is configured so as to avoid that the same hash value is given to different packets or, when packet values have a common hash value, the packet is re-shaped into a packet having a different hash value.

FPGA-based network device testing equipment for high load testing

A data processing system includes a data processing unit which processes data acquired and a plurality of data retaining units which store databases used to process the data. Each of the plurality of data retaining units stores a primary database in common and stores the respective shares of a secondary database. The primary database stores a list of IDs for identifying data to be processed by any one of the plurality of data processing units. Each of the data processing units is notified of a range of IDs that the data processing unit handles, among the list of IDs stored in the primary database, and, when acquiring a packet containing an ID that lies within the range of IDs, the data processing unit processes the packet.

Data processing system

A CRC value calculator enables throughput to be improved while keeping down the increase in the size of the circuitry. This is achieved by using (n+1) basic CRC circuits to configure a CRC value calculator in which the width of the data processed during one clock cycle is m2bits. For example, when m2bits is the data width processed per calculator cycle, the CRC value calculator of this invention is configured by using selectors to serially connect a CRC circuit that processes every m2bits, a CRC circuit that processes every m2bits, . . . , and a CRC circuit that processes every m2bits. This configuration makes it possible to calculate a correct CRC value even when the remainder of an input network frame is not a multiple of m2bits. Selectors are used to select CRC circuit output according to process data width. Reduction of the operating frequency is avoided by using registers to form a pipeline between CRC circuits.

Cyclic redundancy checking value calculator

An object of the present invention is to provide an apparatus, a method, and a system for virus detection which can find even an unknown virus easily with no OS dependency. To achieve the foregoing object, the present invention provides a virus detection apparatus including an inspection computer to be connected to a mail server. The inspection computer includes file opening means for opening an attachment of e-mail transferred from said mail server, an I/O port for establishing interface connection with a PC, the PC being connected to the inspection computer to send and receive e-mail to/from the mail server through the inspection computer, virus inspecting means for detecting data of the attachment opened by said file opening means for access to said I/O port to inspect virus invasion, and warning means for outputting a warning signal from the virus inspecting means when access to the I/O port is detected.

Apparatus, method, and system for virus detection

A method of duplicating servers and a duplicated server system that make seamless transition of service in case of server failures possible. The duplicated server system comprises first and second servers that are connected to a network and have the same network address, communication means for making high-speed communication between both servers possible, and switchover controller that designates the first server as the primary server put in operation for other computers and the second server as the secondary server in normal condition. When the first server receives a service request addressed to the system, it passes the service request to the application for processing. The first server sends the recovery data output by the application to the second server by means of the communication means. If the processing related to the service request involves an update of the data held on the server system, the second server executes the application using the recovery data sent from the first server to keep the data held on both servers identical. Service requests and the results of the processing are stored in the stacks in both servers in duplicate.

Server duplexing method and duplexed server system

A method of duplicating protocol for making identical the order of reception and contents of packets on the two computers of a duplicated computer system with respect to packets of specific types of communication. On the first computer, each packet taken in is checked to determine whether the packet is a packet of the specific types of communication before protocol processing. If the packet is a packet of the specific types of communication, the packet is passed to the protocol processing process and added to a virtual queue created in its shared memory. On the second computer, if the packet is a packet of the specific types of communication, the packet is discarded, and the one at the head of the virtual queue in its shared memory is passed to the protocol processing process.

Protocol duplicating configuration and method for replicating and order of reception of packets on a first and second computers using a shared memory queue

Growing community of inventors

Tokyo, Japan

Mitsugu Nagoya