Hitachi, Ltd.

Satoru Tezuka

Shigeru Miyake

Kenichi Kihara

Satoshi Miyazaki

Hiroshi Furukawa

Keizo Mizuguchi

Takahiro Fujishiro

Yoko Kumagai

Satoru Matsumura

Keiichi Nakane

Hideomi Idei

Chiho Kitahara

Shihoko Taguchi

Yousuke Tsuyuki

Yutaka Miyazaki

Hikari Namba

Tomoharu Morio

Alberto Suzano

Akio Shigeta

Koichi Kimura

Ryoichi Sasaki

Naomichi Nonaka

Tadashi Kaji

Takashi Yoshimaru

Kuniaki Tabata

Kenji Kawakita

Seiichi Susaki

Shotaro Tamayama

Hiromichi Itoh

Yukio Nakata

Katsuyuki Umezawa

Toru Horimoto

Atsushi Kobayashi

Akira Mineo

Takashi Kagei

Akira Kito

Shingo Utsuki

Tomohiro Morisada

Hideaki Ishida

Kenji Kawaguchi

Yoshihiro Kamata

Takashi Akaosugi

Junji Inaba

Katsuhiro Ono

Yoshiyuki Kurosaki

Takanobu Oikawa

Reiko Iwasaki

Izumi Anayama

Yoichiro Sakurai

A time period which is expended since a request for the authentication of the validity of a public key certificate till the authentication of the validity, is shortened. A certificate validity authentication center VC periodically searches for and verifies paths which extend from a bridge certification authority CAto individual terminal admitting certification authorities CA, and it registers the paths whose verifications have held good, in a path database in association with the respective terminal admitting certification authorities CA. Besides, in a case where the request for the authentication of the validity of a certificate has been made by an end entity EE, whether or not a path associated with the terminal admitting certification authority CA which admits the end entity, and a path associated with the terminal admitting certification authority CA which has issued the certificate being a subject for the request are registered in the path database is checked, and the subject certificate is judged valid only when both the paths are registered.

Certificate validity authentication method and apparatus

A public key certificate generation method includes the steps of: sending a certificate issuing request including a registration contents of a public key certificate and an information content guaranteed by the registration authority, to the issuing authority in a registration authority and generating a public key certificate including the registration contents described in the certificate issuing request the information guaranteed by the registration authority issuing contents issued by the issuing authority, and a signature to the issuing contents in the issuing authority.

Public key certificate generation method, validation method and apparatus thereof

A network management system for managing a computer network in which media switching type infrastructures and media sharing type infrastructures are combined coexistently includes a database destined for network management in which correspondences established among information concerning physical interconnections of individual equipment on the network, information concerning logical network configuration such as that of virtual network, and information concerning the users who make use of the network are stored, identifying devices for identification of the individual equipment on the network and physical addresses intrinsic to network ports, respectively, and retrieval engines for searching information of the physical addresses of the network ports with queries for the logical addresses.

Virtual network displaying system

A network managing method which divides a network to be managed into a plurality of virtual closed area networks, and defines management information on the virtual closed area networks separately in a plurality of logical hierarchies. A virtual LAN/network space defines a connection state among closed area networks, a closed area space defines attribute information on nodes within a closed area network, and a virtual service defines logical arrangement information on nodes in the overall network. The management information is distributively stored in each node and utilized for MAC control. When the configuration of the network is changed due to movements of nodes, an administrator inputs the contents of the change from the manager of each layer, so that the manager communicates with a node containing corresponding management information to instruct the node to update management information.

Network managing method and system

For realizing a system for uniformly operating and managing a network system capable of managing a plurality of types of logical networks for one network entity composed of a plurality of objects, information on network topologies is collected from each of the plurality of objects. Display data is created for each of a plurality of types of logical network topologies for each object in accordance with the collected information on network topologies. A control is conducted in accordance with the created display data so as to display a physical connection relationship, a logical connection relationship, and a virtual connection relationship on a virtual screen. Also, for providing a database display method capable of displaying information contained in a database in a state suitable to display characteristics of the data, data in the database is two-dimensionally displayed in a two-dimensional display area, and all or a portion of the two-dimensionally displayed data is three-dimensionally displayed in a three-dimensional display area. A projection view of the three-dimensional display is also displayed in a projection view display area. The user can manipulate any of the displays in the respective display areas, and the manipulation is reflected to the remaining displays.

Network managing method, medium and system

A distributed object system comprising at least one object distributing server, at least one client terminal and at least one server object execution server according to the present invention, including: an object distributing server for storing an object program to which an electronic signature is affixed; a client terminal including means for down-loading the object program from the object distributing server, means for verifying the electronic signature affixed to the object program, means for executing the client object program when the completeness of the object program is confirmed and the user of the client terminal beforehand permits execution of the client object program which is electronically signed by a signatory, and means for transmitting the electronic signature affixed to the object program to a server object execution server; and a server object execution server including means for verifying the signature received, and means for supplying services to the user of the client terminal when the completeness of the object program is confirmed and the user and the object program permit use of the services in advance, which makes it possible to prevent a client object which is down-loaded to a client terminal through a network and executed therein from carrying out unjustified processing (not intended by a user using the client terminal) by using authority of the user.

Distributed object system and service supply method therein

A network managing method which divides a network to be managed into a plurality of virtual closed area networks, and defines management information on the virtual closed area networks separately in a plurality of logical hierarchies. A virtual LAN/network space defines a connection state among closed area networks, a closed area space defines attribute information on nodes within a closed area network, and a virtual service defines logical arrangement information on nodes in the overall network. The management information is distributively stored in each node and utilized for communication control and so on. When the configuration of the network is changed due to movements of nodes and so on, an administrator inputs the contents of update from the manager of each layer, so that the manager communicates with a node containing corresponding management information to instruct the node to update the management information.

An integrated network installation system which comprises an execution section having function specification means for specifying a network function of an information processor connected to a network, and preparation means for preparing installation data corresponding to the network function of the information processor specified by the specification means and a display section for connecting the information processor to the network based on the installation data from the execution section, and displaying it.

Integrated network installation system

In a network development support system, it is supported that logical hierarchic structure, physical parameters, and logical parameters of a network are integrally designed in an environment in which relationships therebetween can be confirmed. Definition of logical hierarchic structure of the network is accepted in the form of a tree of containers in a container tree window. Physical and logical parameters are accepted in physical and logical object windows, respectively. The physical and logical object windows are created in association with containers of the container trees.

Network development support system

A network operating information setting system includes a design device, an automatic setting device and a network device. The design device has the function of producing a command chain of information which an operator designs using a GUI (Graphical User Interface) in order to store the command chain thus produced in a storage medium such as a floppy disk. In addition, the design device also has the function of reading out data from the storage medium in order to display the data thus read out. The automatic setting device has the function of reading out the command chain from the storage medium in order to transmit the command chain thus read out to the network device through a data transmission line. In this connection, an inverse command chain may be produced which is used to restore the network operating information to the original information in the network device. In addition, the automatic setting device has both the function of reading out data from the network device and the function of producing production commands for the data thus read out from the data.

Network operating information system having design device and automatic

Parameters representing types of machines to be connected to a network, connection types thereof to the network, and operation modes thereof in the network system are set from an information processing apparatus. The obtained parameters are written as parameter files on a recording medium. In each network machine, a network system is automatically constructed by referencing the files. Consequently, the parameter setting operations for the installation of the machine are simplified and there is achieved automation of operations in each network machine.

Network integrated construction system, method of installing network

A system is provided for building, operating, and managing a virtual network which integrates the configuration, the operation, and the management of plural information devices connected to a network. The system includes agents for operating, and managing information devices in the respective devices, a physical manager for building, operating, and managing the information devices, and a logical manager for logically building, operating, and managing the information devices. The agent operates to control the settings and the change of the information device in which the agent is mounted and communicates the information with the physical manager. The physical manager operates to manage the agent of each information device and communicates the information with a user and the logical manager. The logical manager operates to build, operate, and manage the directory services, the users, and so forth and, when these directories and user are newly set or changed, to communicate the information about the new settings and the change with the physical manager.

Management system for updating network managed by physical manager to

An integrated network installation system which comprises an execution section having function specification means for specifying a network function of an information processor connected to a network, and preparation means for preparing installation data corresponding to the network function of the information processor specified by the specification means and a display section for connecting the information processor to the network based on the installation data from the execution section and displaying it.

Support system for constructing an integrated network

Growing community of inventors

Yokohama, Japan

Satoru Tezuka