公开(公告)号：US07558952B2

公开(公告)日：2009-07-07

申请号：US10788417

申请日：2004-03-01

申请人： Yoko Kumagai ,  Takahiro Fujishiro ,  Tadashi Kaji ,  Shingo Hane ,  Hitoshi Shimonosono

发明人： Yoko Kumagai ,  Takahiro Fujishiro ,  Tadashi Kaji ,  Shingo Hane ,  Hitoshi Shimonosono

IPC分类号： H04L9/00

CPC分类号： H04L9/3268 ,  H04L9/007 ,  H04L9/3265

摘要： A validation authority for certificates searches for and verifies paths and certificate revocation lists periodically, and classifies the paths into valid paths and invalid paths in accordance with the results of the validations, so as to register the paths in databases beforehand. Besides, in a case where a request for authenticating the validity of a certificate has been received from an end entity, the validation authority judges the validity of the public key certificate by checking in which of the valid-path database and the invalid-path database a path corresponding to the request is registered. On the other hand, in a case where the path corresponding to the validity authentication request is not registered in either of the databases, the validity of the public key certificate is authenticated by performing path search and validation anew.

摘要翻译： 证书的验证机构定期搜索和验证路径和证书撤销列表，并根据验证结果将路径分类为有效路径和无效路径，以便事先在数据库中注册路径。 此外，在从终端实体接收到认证证书的有效性的请求的情况下，验证机构通过检查有效路径数据库和无效路径数据库中的哪一个来判断公钥证书的有效性 登记与请求对应的路径。 另一方面，在与有效认证请求对应的路径未登记在任一数据库中的情况下，通过重新进行路径搜索和验证来认证公钥证书的有效性。

公开(公告)号：US20090089866A1

公开(公告)日：2009-04-02

申请号：US12239058

申请日：2008-09-26

申请人： Akifumi Yato ,  Tadashi Kaji ,  Dan Yamamoto ,  Shinichi Irube ,  Naoki Hayashi

发明人： Akifumi Yato ,  Tadashi Kaji ,  Dan Yamamoto ,  Shinichi Irube ,  Naoki Hayashi

IPC分类号： H04L9/32 ,  G06F7/04 ,  G06F17/30

CPC分类号： H04L63/083 ,  G06F21/6218 ,  H04L29/12132 ,  H04L61/1552 ,  H04L63/102

摘要： An access authorization system is provided, which can reduce the user wait time until the provision of a user-requested service. The access authorization system of the present invention specifies the next service to be provided to a UT (a client-side communication device) after the service currently being provided to the UT, and then executes process to make an authorization decision in advance regarding the next service with respect to the user of the UT, before the UT requests the next service.

摘要翻译： 提供了访问授权系统，其可以减少用户等待时间，直到提供用户请求的服务。 本发明的访问授权系统在当前提供给UT的服务之后指定要提供给UT（客户端通信设备）的下一个服务，然后执行关于下一个的事先进行授权决定的处理 在UT请求下一个服务之前，对UT的用户进行服务。

公开(公告)号：US20090067439A1

公开(公告)日：2009-03-12

申请号：US12205154

申请日：2008-09-05

申请人： Dan Yamamoto ,  Tadashi Kaji ,  Akifumi Yato ,  Takahiro Fujishiro ,  Shinichi Irube

发明人： Dan Yamamoto ,  Tadashi Kaji ,  Akifumi Yato ,  Takahiro Fujishiro ,  Shinichi Irube

IPC分类号： H04L12/56

CPC分类号： H04L63/061 ,  H04L65/1006 ,  H04L65/1069

摘要： A method and a system for speeding up session establishment are provided, wherein the time required to establish a session is reduced, even in the case where a session management server requires a large amount of time to process respective functions required for establishing the session (such as making a decision regarding whether to permit or deny provision of a service, or generating a session key).The session management server is provided with means for conducting, in parallel, processing to issue processing requests for respective functions required for establishing a session (such as making a decision regarding whether to permit or deny provision of a service, or generating a session key) and processing to forward a communication message transmitted by a communications device or another session management server attempting to establish a session.

摘要翻译： 提供了一种用于加速会话建立的方法和系统，其中即使在会话管理服务器需要大量时间来处理建立会话所需的各种功能的情况下，建立会话所需的时间被减少（例如 作为决定是否允许或拒绝提供服务，还是生成会话密钥）。 会话管理服务器被提供有用于并行处理以发出用于建立会话所需的相应功能的处理请求（例如作出关于是否允许或拒绝提供服务的决定或生成会话密钥）的装置， 以及处理以转发由通信设备或尝试建立会话的另一会话管理服务器发送的通信消息。

公开(公告)号：US20080158597A1

公开(公告)日：2008-07-03

申请号：US11987551

申请日：2007-11-30

申请人： Yoko Hashimoto ,  Takahiro Fujishiro ,  Tadashi Kaji ,  Akifumi Yato ,  Kazuyoshi Hoshino

发明人： Yoko Hashimoto ,  Takahiro Fujishiro ,  Tadashi Kaji ,  Akifumi Yato ,  Kazuyoshi Hoshino

IPC分类号： G06F3/12

CPC分类号： G06F3/1226 ,  G06F3/1204 ,  G06F3/1222 ,  G06F3/1288 ,  G06F21/608 ,  G06F2221/2111

摘要： To minimize risk of printing-out to a printer located at an improper base, where a network is established between the bases, terminal devices, a server, printers, and a management device which manages printers are provided. The management device manages position information of the printers installed in bases. Every time printing is requested, the management device extracts printer candidates located close to a terminal device and asks a user of the terminal device to select one of the printer candidates. The user visually confirms the installation locations of the extracted printer candidates included in a list and selects an appropriate printer for each printing. Accordingly, risk of erroneously printing using a printer installed in an improper base can be reduced.

摘要翻译： 为了最小化打印到位于基地之间建立网络的打印机的打印机的风险，提供终端设备，服务器，打印机和管理打印机的管理设备。 管理设备管理安装在基地的打印机的位置信息。 每次打印请求时，管理装置提取位于终端设备附近的打印机候选，并请求终端设备的用户选择一个打印机候选。 用户可视地确认包括在列表中的提取的打印机候选的安装位置，并为每次打印选择适当的打印机。 因此，可以减少使用安装在不正确基座中的打印机进行错误打印的风险。

公开(公告)号：US20080098221A1

公开(公告)日：2008-04-24

申请号：US11907260

申请日：2007-10-10

申请人： Yoko Hashimoto ,  Takahiro Fujishiro ,  Tadashi Kaji ,  Osamu Takata ,  Kazuyoshi Hoshino

发明人： Yoko Hashimoto ,  Takahiro Fujishiro ,  Tadashi Kaji ,  Osamu Takata ,  Kazuyoshi Hoshino

IPC分类号： H04L9/32

CPC分类号： G06Q20/3674 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/0869 ,  H04L67/1002 ,  H04L67/1006 ,  H04L67/1008 ,  H04L67/1029

摘要： To solve problems in that a load on a VPN device is large in a case where the number of terminal devices increases in encrypted communication using a VPN technique, and that only communication between the terminal device and the VPN device is encrypted, thus disabling end-to-end encrypted communication, a communication system is provided, including: a terminal device; a plurality of blades; and a management server that manages the blades, in which: the management server selects a blade, authenticates the terminal device and the selected blade, and mediates encrypted communication path establishment between the terminal device and the selected blade; the terminal device and the blade perform encrypted communication without the mediation of the management server; and the management server requests a validation server to authenticate each terminal.

摘要翻译： 为了解决在使用VPN技术的加密通信中终端装置的数量增加，VPN终端装置与VPN装置之间的通信被加密的情况下，VPN装置的负载大的问题， 端到端加密通信，提供通信系统，包括：终端装置; 多个叶片; 以及管理服务器，其中：所述管理服务器选择刀片，对所述终端设备和所选择的刀片进行认证，并且中介所述终端设备与所选刀片之间的加密通信路径建立; 终端设备和刀片在没有管理服务器的中介的情况下执行加密的通信; 并且管理服务器请求验证服务器来认证每个终端。

公开(公告)号：US20070288754A1

公开(公告)日：2007-12-13

申请号：US11729947

申请日：2007-03-30

申请人： Tadashi Kaji ,  Kazuyoshi Hoshino ,  Keisuke Takeuchi ,  Osamu Takata ,  Takahiro Fujishiro ,  Akifumi Yato

发明人： Tadashi Kaji ,  Kazuyoshi Hoshino ,  Keisuke Takeuchi ,  Osamu Takata ,  Takahiro Fujishiro ,  Akifumi Yato

IPC分类号： H04L9/00 ,  G06F15/16

CPC分类号： H04L67/14 ,  H04L61/15 ,  H04L63/0428 ,  H04L63/0823 ,  H04L65/1006 ,  H04L65/105

摘要： An encrypted communication method, and a system for the method, can transfer a session control message designated by identification information inherent to an application to a connection destination through a session management server. When an application program of a client or encrypted communication software issues a connection request in the form designating an application server by identification information inherent to each application, the identification information is automatically changed to a desired address-of-record capable of domain identification and a transfer destination domain of a reception message is judged.

摘要翻译： 加密通信方法和该方法的系统可以通过会话管理服务器将由应用所固有的识别信息指定的会话控制消息传送到连接目的地。 当客户端或加密通信软件的应用程序以指定应用服务器的形式的连接请求发布每个应用所固有的标识信息时，识别信息被自动地改变成能够进行域识别的所需地址记录， 判断接收消息的传送目的地域。

公开(公告)号：US20070274525A1

公开(公告)日：2007-11-29

申请号：US11711892

申请日：2007-02-28

申请人： Osamu Takata ,  Tadashi Kaji ,  Takahiro Fujishiro ,  Kazuyoshi Hoshino ,  Keisuke Takeuchi

发明人： Osamu Takata ,  Tadashi Kaji ,  Takahiro Fujishiro ,  Kazuyoshi Hoshino ,  Keisuke Takeuchi

IPC分类号： H04K1/00 ,  G06F15/16 ,  H04L9/08 ,  H04L9/14 ,  H04L9/28 ,  H04L9/32

CPC分类号： H04L63/065

摘要： An encrypted communication system is provided, in which an encryption key for use in encrypted communication and settings information for the encrypted communication are distributed to each of a plurality of communication devices performing encrypted communication within a group, and in which traffic generated by distributing the encryption key and the like can be reduced. In the encrypted communication system according to the present invention, information including a key for use in the intra-group encrypted communication or a seed which generates the key is distributed to the communication devices belonging to the group that are participating (e.g., logged in) in the intra-group encrypted communication.

摘要翻译： 提供了一种加密通信系统，其中将用于加密通信的加密密钥和用于加密通信的设置信息分配给执行组内的加密通信的多个通信设备中的每一个，并且其中通过分发加密 钥匙等可以减少。 在根据本发明的加密通信系统中，包括用于组内加密通信的密钥或生成密钥的种子的信息被分发给属于正在参与（例如登录）的组的通信设备， 在组内加密通信中。

公开(公告)号：US20070192583A1

公开(公告)日：2007-08-16

申请号：US11317003

申请日：2005-12-27

申请人： Osamu Takata ,  Takahiro Fujishiro ,  Tadashi Kaji ,  Kazuyoshi Hoshino

发明人： Osamu Takata ,  Takahiro Fujishiro ,  Tadashi Kaji ,  Kazuyoshi Hoshino

IPC分类号： H04L9/00

CPC分类号： H04L9/0866 ,  H04L9/0891

摘要： When a cryptographic communicating part 208 of the communication support server 20 exchanges information with the information processing units 14, if the term of validity of a first key stored in a cryptographic key storing part 200 and corresponding to the identification information of the information processing unit 14 does not expire, the cryptographic communicating part 208 performs the cryptographic communication with the information processing unit 14 using the first key, without performing a process of authenticating the information processing units 14. When the term of validity of the first key expires or the first key corresponding to the identification information of the information processing units 14 is not stored, the key sharing part 202 shares the first key with the information processing units 14, and the cryptographic communicating part 208 performs the cryptographic communication with the information processing units 14 using a newly shared first key.

摘要翻译： 当通信支持服务器20的加密通信部分208与信息处理单元14交换信息时，如果存储在密码密钥存储部分200中并对应于信息处理单元14的识别信息的第一密钥的有效期限 密码通信部208使用第一密钥执行与信息处理部14的密码通信，不进行认证信息处理部14的处理。 当第一密钥的有效期到期或与信息处理单元14的识别信息相对应的第一密钥未被存储时，密钥共享部分202与信息处理单元14共享第一密钥，密码通信部分 208使用新共享的第一密钥执行与信息处理单元14的密码通信。

公开(公告)号：US20060288120A1

公开(公告)日：2006-12-21

申请号：US11417054

申请日：2006-05-04

申请人： Kazuyoshi Hoshino ,  Tadashi Kaji ,  Osamu Takata ,  Takahiro Fujishiro ,  Kohei Sawada

发明人： Kazuyoshi Hoshino ,  Tadashi Kaji ,  Osamu Takata ,  Takahiro Fujishiro ,  Kohei Sawada

IPC分类号： G06F15/173

CPC分类号： H04L63/0428 ,  H04L29/06027 ,  H04L63/08 ,  H04L65/1006 ,  H04L67/1002 ,  H04L67/1008 ,  H04L67/1023

摘要： A server device that represents a plurality of service provision servers implements authentication and a SIP message exchange with respect to a SIP server as a representative, and notifies a service provision server of client communication information that is acquired by the SIP message exchange. The service provision server communicates with a client on the basis of the client communication information that is notified from the representative server.

摘要翻译： 表示多个服务提供服务器的服务器装置以代表SIP服务器的身份执行认证和SIP消息交换，并向服务提供服务器通知由SIP消息交换获取的客户端通信信息。 服务提供服务器基于从代表服务器通知的客户端通信信息与客户端进行通信。

公开(公告)号：US20060224717A1

公开(公告)日：2006-10-05

申请号：US11391349

申请日：2006-03-29

申请人： Yuko Sawai ,  Kazuyoshi Hoshino ,  Osamu Takata ,  Tadashi Kaji ,  Kohei Sawada

发明人： Yuko Sawai ,  Kazuyoshi Hoshino ,  Osamu Takata ,  Tadashi Kaji ,  Kohei Sawada

IPC分类号： G06F15/173

CPC分类号： H04L65/1006 ,  H04L67/00 ,  H04L67/28 ,  H04L67/2842

摘要： In inter-peer communication between an application server for providing service such as Voice over IP or contents distribution and a client using the service, the client or the application server notifies a log management server of a communication log by a log information process. The log management server verifies consistency of the notified communication log by a log compare process requested by the client or the application server. Because the log information process and the log compare process are executed periodically during inter-peer communication, the client and the application server can detect inconsistency of the communication log instantaneously and notify each other of the consistency of the communication log.

摘要翻译： 在用于提供诸如IP语音或内容分发的服务的应用服务器和使用该服务的客户端之间的对等间通信中，客户端或应用服务器通过日志信息处理向日志管理服务器通知通信日志。 日志管理服务器通过客户机或应用服务器请求的日志比较过程来验证通知的通信日志的一致性。 由于在对等间通信期间周期性地执行日志信息处理和日志比较处理，所以客户端和应用服务器可以立即检测通信记录的不一致性并且通知彼此通信日志的一致性。