Fujitsu Corporation

Sanyo Electric Co., Ltd.

Hitachi, Ltd.

Pioneer Corporation

Victor Company of Japan, Limited

Sharp Corporation

Hitachi Global Storage Technologies Japan, Ltd.

Sharp Kabushiki Kaisha Corporation

Renesas Electronics Corporation

Renesas Technology Corp.

Phoenix Technologies Ltd.

Nippon Columbia Co., Ltd.

Fijitsu Limited

Phoenix Technologies K.k. of Tokyo

Takayuki Hasebe

Yoshihiro Hori

Ryota Akiyama

Naoya Torii

Takahisa Hatakeyama

Toshiaki Hioki

Takeaki Anazawa

Masahiko Takenaka

Miwa Kanamori

Tadaaki Tonegawa

Jun Kamada

Seigo Kotani

Makoto Yoshioka

Jun Yajima

Shigeki Furuta

Seigou Kotani

Masayuki Hatanaka

Tatsuya Hirai

Noboru Iwayama

Kenichiro Tada

Masahiro Matsuda

Takatoshi Yoshikawa

Hiroshi Takemura

Takaoki Sasaki

Masafumi Tsuru

Masataka Takahashi

Takeo Ohishi

Ryoji Ohno

Souichi Okada

Atsushi Sakai

Hideyuki Hirano

Takehiko Hayashi

Yuichi Kanai

Yasuhiko Abe

Takeaki Terada

Tatsuro Matsumoto

Akihiro Tozaki

Takashi Yoshioka

Kiyoshi Kohiyama

Kenichi Sasaki

Tsutomu Matsumoto

Hiroaki Kato

Hiroaki Kikuchi

Hidefumi Maruyama

Bintatsu Noda

Yusuke Yamanaka

Yuji Kijima

Takeshi Hatano

Haruhiko Tsunoda

Masao Fujiwara

Takashi Tokutani

Tetsuhiro Chiba

Junji Nakata

Toshihiro Hori

Taizou Kinoshita

Morito Yamamoto

Takashi Matsushima

An attack detection device includes: a receiver configured to receive messages that are periodically transmitted from a communication device in a network; and a processor. The processor predicts a number of messages to be received by the receiver in a specified monitor range based on a transmission cycle of the messages so as to generate a predicted value. The processor counts a number of messages received by the receiver in the specified monitor range so as to generate a count value. The processor detects an attack in the network according to a result of a comparison between the predicted value and the count value.

Device and method for detecting attack in network

An attack detection device includes: a receiver configured to receive a massage that includes target identification information transmitted in a network; and a processor. The processor predicts a number of massages to be received by the receiver in a specified monitor period based on a transmission cycle so as to generate a predicted value. The processor counts a number of massages received by the receiver in the monitor period so as to generate a count value. When the count value is larger than the predicted value and smaller than or equal to a reference value that is obtained by adding an early-arrival acceptable value to the predicted value, the processor decides whether the network has been attacked according to a result of a comparison between the predicted value and the count value after an early-arrival grace period corresponding to the early-arrival acceptable value elapses.

An attack detection device executes a process that includes receiving a message periodically transmitted from a communication device in a network, calculating a reception range for receiving a message including identification information in a reference message selected from the received messages by using a transmission period of a message identified by the identification information, the message being transmitted two or more periods after the reference message, storing the reception range associated with an order of reception of a message predicted to be received in the reception range when the reference message is used as a reference, and determining that an attack on the network is detected when a reception time of the received message including the identification information is not within the reception range associated with the order of reception of the received message in a case where the reference message is used as a reference.

Attack detection device, attack detection method, and non-transitory computer-readable recording medium

An attack detection device includes a transceiver and a processor. The transceiver receives a message from a communication device in a network. The processor calculates, according to a reception time of a first message in periodic messages that are periodically transmitted in a specified transmission cycle in the network, a reception range for a target message in the periodic messages that are received after the first message by the transceiver. When the transceiver receives a second message that is associated with information indicating that the second message is transmitted at a time interval shorter than the transmission cycle outside of the reception range after the reception time of the first message, the processor updates the reception range for a target message in the periodic messages that are received after the second message by the transceiver according to a reception time of the second message and the transmission cycle.

A communication relay device that is situated between a corresponding communication node and a bus in a communication network in which a plurality of communication nodes mutually perform a data communication through the bus. A storage configured to store therein pieces of identification information that are likely to be included in data transmitted by the corresponding communication node. A processor configured to perform first authentication processing between the communication relay device and a management device that is connected to the bus, and to perform second authentication processing according to a result of comparing identification information included in data transmitted by the corresponding communication node with the pieces of identification information stored in the storage. A transceiver configured to report, to the management device, a result of the second authentication processing when the first authentication processing has been successful.

Communication relay device, communication network, and communication relay method

A communication system includes a first communication device that determines, using identification information on a frame, whether to receive the frame, and a second communication device that belongs to a network identical to the first communication device. A report frame includes a detection of an attack on the network and target identification information that is identification information included in a frame used to perform the attack. When the first communication device receives a report frame from the second communication device, the first communication device sets the frame including the target identification information to be an authentication processing target. Upon transmitting a transmission frame set to be the authentication processing target, the first communication device transmits authentication information generated from the transmission frame along with the transmission frame.

Communication system, communication method, and communication device

A communication monitoring device is used in a network that includes a plurality of nodes. The communication monitoring device includes: a plurality of ports; and a processor. The processor is configured to execute a procedure including: detecting an abnormal frame from among received frames, a first arrival port at which the abnormal frame has arrived, and an order in which the abnormal frame arrived in received frames that have arrived at any of the plurality of ports, and transmitting order information that indicates the detected order to a node connected to the first arrival port.

Device and method for monitoring communication in network including a plurality of nodes

An advertisement management device generates and manages advertisement information and an advertisement identifier, a tag management unit generates a tag identifier and tag information unique to the tag identifier, and manages the tag identifier, the tag information, and the advertisement identifier generated by the advertisement management device in associated manner. The tag management unit sends the tag identifier and the advertisement identifier to the radio tag. A reader reads the tag identifier and the advertisement identifier from the radio tag, sends the tag identifier to the tag management unit, and sends the advertisement identifier to the advertisement management unit. The tag management unit sends tag information corresponding to the tag identifier received from the reading unit to a display unit, and the advertisement management unit sends advertisement information corresponding to the advertisement identifier received from the reading unit to the display unit.

Method, system, and computer product for managing radio-tag, managing advertisement, and using radio tag

A storage medium on which is recorded a program for causing an information processing device. The program executes, an access right management information obtainment process for obtaining access right management information, a violation detection process for obtaining a policy from a policy storing unit for storing the policy set for the resource or the access to the resource, for checking whether or not the access right management information complies with the policy, and for detecting access right management information, a policy compliance level calculation process for calculating a risk score in accordance with a degree of risk of the violation, and for calculating a level of compliance with the policy.

Access control policy compliance check process

A management apparatus comprising memory to store owner information, dependence relationship information, and authorized user information are associated with file information identifying the secret file, an authorized user determination unit to determine whether a source user of the browse request is registered as the authorized user of the browse request file, a dependent file specifying unit to specify a dependent file having a dependence relationship with the browse request file by referring to the dependence relationship information when the source user is authorized; and a browse permission response transmitting unit to transmit the browse permission response to the source user based on whether or not the source user is registered as the authorized user of the dependent file by referring to the authorized user information.

Management apparatus

Encrypted music data and additional information necessary for accessing a server () are copied from a CD-ROM () onto a memory card (). The memory card () receives via a digital portable phone network the distribution of a contents decoding key (Kc) necessary for decoding encrypted music data and control information data (AC) for limiting the number of accesses to the memory card from the server ().

Data distributing system and recording medium used for it

A storing unit stores a plurality of pieces of tag information to be stored in a single radio-frequency-identification tag. A responding unit transmits, in response to a request from a reader/writer, part of the stored tag information to the reader/writer.

Method and apparatus for managing tag information, and computer product

A memory card () stores access restriction information (AC) to a license information hold unit () arranged in a TRM area. Access restriction information (AC) has information for example of a frequency of reproduction allowed and a number of licenses owned. A controller () in reproducing and transferring content initially confirms access restriction information (AC) and thereafter effects reproduction and transfer and after the reproduction and transfer are effected updates access restriction information (AC), as required, for storage in a license information hold unit ().

Data distribution system and recording device for use therein

In an information reproducing apparatus having an open architecture, a secure module stores first information, and has a structure which does not allow access to the first information from outside, and a memory has a structure which can be accessed from outside. A decryption unit loaded in the memory decrypts an encryption applied to the first information by using a predetermined key. A key supply unit implemented in the secure module supplies the predetermined key to the decryption unit. An authentication unit implemented in the secure module supplies second information to the decryption unit, refers to third information returned in response to the second information, and checks for authenticity of the decryption unit. A key-supply stop unit implemented in the secure module stops supply of the predetermined key by the key supply unit when the authentication unit does not authenticate the decryption unit.

Information reproducing apparatus and secure module

A memory management unit manages a memory that stores a code, and sets that the memory that stores the code to be executed is valid to make a processor execute the code stores a verification key used to verify a validity of the code in a verification-key storing unit. When the code is stored in the memory and ready to be executed by the processor, the memory management unit verifies the validity of the code using the verification key stored in the verification-key storing unit and verification information assigned to the code. The memory management unit controls to set that the memory is valid when the validity is verified by the verifying unit, and not to set that the memory is valid when the validity is not verified by the verifying unit.

Memory management unit, code verifying apparatus, and code decrypting apparatus

Growing community of inventors

Kawasaki, Japan

Takayuki Hasebe