Hitachi, Ltd.

Renesas Electronics Corporation

Takahiro Fujishiro

Tadashi Kaji

Kazuyoshi Hoshino

Osamu Takata

Shingo Hane

Yoko Hashimoto

Yoko Kumagai

Masahiko Furuya

Akane Sato

Masami Uzawa

Keisuke Takeuchi

Satoru Tezuka

Akifumi Yato

Hitoshi Shimonosono

Yasuhiro Takahashi

Susumu Matsui

Yutaka Miyazaki

Taro Saito

Tomoharu Morio

Hideaki Suzuki

Masayuki Sakata

Takayuki Uchida

Shinji Nakamura

Yuki Horita

Toshiaki Kono

Takashi Kawauchi

Akane Suzuki

Masami Ogawa

Kazuya Monden

Kohei Sawada

Chinatsu Sato

Shinichi Irube

Erika Tanaka

Hisanori Mishima

Dan Yamamoto

Takanobu Oikawa

Izumi Anayama

Hiromi Nagano

Tadaoki Uesugi

Takeshi Akutsu

Yuko Sawai

Sensor data immediately after the issuance of an alarm does not exhibit the peculiarity of a failure, with the result that the wrong component is sometimes erroneously identified as the failure component. A failure component identification unit provided in a maintenance device collects an alarm issued when a measurement value exceeds a range of a measurement threshold value in an apparatus being a maintenance target. The failure component identification unit identifies the failure component on the basis of the measurement value exhibiting a condition indicating a peculiarity of the failure. An identification reliability determination unit determines the reliability of the component identification result obtained by a failure component identification unit. When it is determined that the reliability of the identification result is low, a presentation unit presents measures to enhance the reliability of the identification result until the measurement value exhibits a condition indicating the peculiarity of the failure.

Maintenance device, presentation system, and program

On the basis of revocation information of a certificate, information of a certification authority and of the certificate issued by the certification authority from a terminal device, and information of a cryptographic algorithm, validity of the certificate from the terminal device is determined. If the certificate is valid, a validation result treating the certificate as valid is created, and using information of the cryptographic algorithm from the terminal device and information of the cryptographic algorithm used for the signature of the certification authority which has been imparted to the revocation information of the certificate, a selection list of cryptographic algorithms used for the response signature to impart to the verification result of the certificate is created to determine the cryptographic algorithm used for the response signature to impart the verification result of the certificate on the basis of the created list and the cryptographic algorithms capable of being accommodated by the verification server.

Determination method for cryptographic algorithm used for signature, validation server and program

A validation server using HSM, which reduces required process time from receiving a validation request to responding with a validation result, and comprises a first software cryptographic moduleand a second software cryptographic moduleon a validation serverwhose HSM is coupled with an I/F part. According to the validation server, load states of HSM, the first software cryptographic moduleand the second software cryptographic moduleare monitored by a cryptographic module monitor unit, and when cryptographic calculations in a validation process of certificates are conducted, the cryptographic calculations are executed by using the least loaded cryptographic module selected at a cryptographic module selector unit

Validation server, validation method, and program

In response to a validation request that includes second information identifying the certificate authority, key information of the certificate authority at issuance of the public key certificate, and information identifying the public key certificate, if the second information identifying the certificate authority included in the validation request corresponds to the first information identifying the certificate authority included in the authority certificate, and the information identifying the public key certificate included in the validation request does not exist in the revocation information, the validation server creates a validation result indicating that the public key certificate corresponding to the information identifying the public key certificate included in the validation request is valid.

Method of validation public key certificate and validation server

A validation authority for certificates searches for and verifies paths and certificate revocation lists periodically, and classifies the paths into valid paths and invalid paths in accordance with the results of the validations, so as to register the paths in databases beforehand. Besides, in a case where a request for authenticating the validity of a certificate has been received from an end entity, the validation authority judges the validity of the public key certificate by checking in which of the valid-path database and the invalid-path database a path corresponding to the request is registered. On the other hand, in a case where the path corresponding to the validity authentication request is not registered in either of the databases, the validity of the public key certificate is authenticated by performing path search and validation anew.

Method, product and apparatus for accelerating public-key certificate validation

The present invention enables dynamic route switching according to link quality, while maintaining the quality of a plurality of routes. According to quality information received from a second network control entity, if the control unit of a network management station has determined that the quality of communication over a particular link has degraded, the control unit assigns a link whose current throughput satisfies a bandwidth required for a service defined in the service contract and whose response time satisfies minimum response time defined in the service contract to each service in descending order of priority.

Network management station, network control system, and network management method

A certificate validation method for causing a certificate validation server to receive a certificate validation request from a given terminal device, build a certification path of from a first certificate authority (CA) to a second CA, perform validation of the certification path, and send a validation result to the terminal which issued the certificate validation request is disclosed. The validation server detects either a key update of any given CA or a compromise of the given CA, acquires a certificate of relevant CA and first certificate status information and second certificate status information, stores the acquired information in a storage unit or, alternatively, updates the information stored in the storage based on the acquired information, and performs the building of a certification path and validation of the certification path by use of the information of the storage unit.

Certificate validation method and certificate validation server and storage medium

Both a management server and a validation server are installed. Both a terminal and a terminal register setting information which is usable in an encrypted communication in the management server. When carrying out the encrypted communication, the management server searches the registered setting information for coincident setting information. The management server generates keys for the encrypted communications which can be used by the terminals, and delivers these generated keys in combination with the coincident setting information. The management server authenticates both the terminals in conjunction with the validation server. Since the terminals trust such results that the management server has authenticated the terminals respectively, these terminals need not authenticate the respective communication counter terminals.

Management server, communication apparatus and program implementing key allocation system for encrypted communication

The present invention provides a vehicle communication system by which even when the number of other vehicles around a traffic line is increased, it is possible to prevent occurrence of a situation that there are located vehicles the number of which is larger than the capacity of a communicable network, and it is possible to secure communications with the other vehicles. Even when it is determined that a host vehicle enters in a traffic line and a plurality of other vehicles the number of which is larger than a threshold value are located in front and rear virtual regions of the host vehicle, a transmission power is reduced to the extent that communications between the host vehicle and one of the other vehicles that is located furthest in the virtual regions can be secured.

Vehicle communication system

An encrypted communication system is provided, in which an encryption key for use in encrypted communication and settings information for the encrypted communication are distributed to each of a plurality of communication devices performing encrypted communication within a group, and in which traffic generated by distributing the encryption key and the like can be reduced. In the encrypted communication system according to the present invention, information including a key for use in the intra-group encrypted communication or a seed which generates the key is distributed to the communication devices belonging to the group that are participating (e.g., logged in) in the intra-group encrypted communication.

Encrypted communication system, communication status management server, encrypted communication method, and communication status management method

In a data communication method and a data communication system, a session control message designating a destination server with identification information unique to application is transferred to the destination via a session management server. When an application program or encrypted communication software on a client issues a connection request designating a destination with identification information unique to application, the client or the session management server automatically converts the identification information into a desired resource identifier identifiable a domain to thereby determine a domain as the destination of the received connection request message.

Data communication method and data communication system

To minimize risk of printing-out to a printer located at an improper base, where a network is established between the bases, terminal devices, a server, printers, and a management device which manages printers are provided. The management device manages position information of the printers installed in bases. Every time printing is requested, the management device extracts printer candidates located close to a terminal device and asks a user of the terminal device to select one of the printer candidates. The user visually confirms the installation locations of the extracted printer candidates included in a list and selects an appropriate printer for each printing. Accordingly, risk of erroneously printing using a printer installed in an improper base can be reduced.

Device and system for assisting printer selection through a network

The present invention is to prevent user's attribute information from being distributed, in the case where it is to be determined whether or not the attribute information (for example, age, address, and the like) of the user satisfies a service providing condition, when a communication session is established across multiple session managing servers. According to the present invention, attribute information of a user who is using a client logging in a session managing server, and attribute information of a service operating on the client are managed, a condition (SEP) to establish a communication session among multiple session managing servers related to the session establishment is shared, and the session managing server which manages the attribute information compares the attribute information and the SEP to make an access judgment, in order to determine whether or not the communication session is to be established.

Mediating system and method to establish communication session, allowing private information to be protected

Growing community of inventors

Yokohama, Japan

Takahiro Fujishiro