利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

30 条记录 (耗时 0.018 秒)

    Communication system, control apparatus, policy management apparatus, communication method, and program
    2.
    发明授权
    Communication system, control apparatus, policy management apparatus, communication method, and program 有权
    通信系统，控制装置，策略管理装置，通信方式和程序

    公开(公告)号：US09178910B2

    公开(公告)日：2015-11-03

    申请号：US13991588

    申请日：2011-12-22

    申请人： Masaya Yamagata ,  Masayuki Nakae ,  Yoichiro Morita ,  Hideyuki Shimonishi ,  Kentaro Sonoda

    发明人： Masaya Yamagata ,  Masayuki Nakae ,  Yoichiro Morita ,  Hideyuki Shimonishi ,  Kentaro Sonoda

    IPC分类号： G06F7/04 ,  H04L29/06 ,  H04L12/927 ,  H04W12/08 ,  H04L12/24

    CPC分类号： H04L63/20 ,  H04L41/0893 ,  H04L47/808 ,  H04L63/10 ,  H04W12/08

    摘要： The present invention implements detailed access control according to access rights granted to users, by a simple configuration. A communication system includes: a plurality of forwarding nodes that process a received packet in accordance with a processing rule (packet handling operation) associating a matching rule for identifying a flow and processing content to be applied to a packet that conforms with the matching rule; a policy management apparatus provided with an access control policy storage unit that associates roles assigned to users and access rights set for each role, the policy management apparatus providing information related to access rights associated with a role of a user who is successfully authenticated, to a control apparatus; and the control apparatus that creates a path between a terminal of the user who is successfully authenticated and a resource that the user can access, based on information related to access rights received from the policy management apparatus, and sets a processing rule in a forwarding node in the path in question.

    摘要翻译： 本发明通过简单的配置实现了根据授予用户的访问权限的详细的访问控制。 通信系统包括：多个转发节点，根据处理规则（分组处理操作）处理接收到的分组，所述处理规则（分组处理操作）将用于识别流的匹配规则和处理应用于符合匹配规则的分组的内容处理内容相关联; 策略管理装置，其具有将分配给用户的角色和为每个角色设定的访问权限相关联的访问控制策略存储单元，所述策略管理装置向与所述用户的成功认证的角色相关联的访问权限提供与所成功认证的用户有关的信息， 控制装置; 以及控制装置，其基于从所述策略管理装置接收到的访问权限的信息，创建成功认证的用户的终端和所述用户可以访问的资源之间的路径，并且在所述转发节点中设置处理规则 在有问题的道路上。

    Communication system, policy management apparatus, communication method, and program
    3.
    发明授权
    Communication system, policy management apparatus, communication method, and program 失效
    通信系统，策略管理设备，通信方式和程序

    公开(公告)号：US08681803B2

    公开(公告)日：2014-03-25

    申请号：US13822547

    申请日：2012-09-14

    申请人： Yoichiro Morita ,  Masayuki Nakae ,  Masaya Yamagata ,  Takayuki Sasaki ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano

    发明人： Yoichiro Morita ,  Masayuki Nakae ,  Masaya Yamagata ,  Takayuki Sasaki ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano

    IPC分类号： H04L12/28

    CPC分类号： H04L41/28 ,  H04L45/38 ,  H04L45/64

    摘要： Authentication apparatus authenticates user using host connected to forwarding node. Policy management apparatus holds access control policy for identifying host under access control using identifier of forwarding node or identifier of user, and links identifier of host under access control and identifier of forwarding node to which host is connected, or identifier of host under access control and identifier of user using host. Forwarding node transmits to policy management apparatus identifier of host connected to own forwarding node and identifier of own forwarding node. Authentication apparatus transmits to policy management apparatus identifier of host connected to forwarding node and identifier of user. Policy management apparatus refers to access control policy and, if host connected to forwarding node is under access control, notifies content of access control to control apparatus as access control list. Control apparatus generates processing rule in accordance with access control list and sets generated processing rule in forwarding nodes.

    摘要翻译： 验证设备使用连接到转发节点的主机对用户进行认证。 策略管理装置保存用于使用转发节点的标识符或用户的标识符的标识下的主机访问控制策略，以及主机所连接的主机的接入控制的标识符和主机所连接的转发节点的标识符，以及访问控制下的主机的标识符，以及 使用主机的用户标识符。 转发节点发送到连接到自己的转发节点的主机的策略管理设备标识符和自己的转发节点的标识符。 认证装置向连接到转发节点的主机和用户的标识符的策略管理装置的标识符发送。 策略管理装置是指访问控制策略，如果连接到转发节点的主机正在进行访问控制，则将访问控制的内容通知控制装置作为访问控制列表。 控制装置根据访问控制列表生成处理规则，并在转发节点中设置生成的处理规则。

    COMMUNICATION SYSTEM, CONTROL DEVICE, COMMUNICATION METHOD, AND PROGRAM
    4.
    发明申请
    COMMUNICATION SYSTEM, CONTROL DEVICE, COMMUNICATION METHOD, AND PROGRAM 有权
    通信系统，控制设备，通信方法和程序

    公开(公告)号：US20140075510A1

    公开(公告)日：2014-03-13

    申请号：US14119827

    申请日：2012-05-22

    申请人： Yoichiro MORITA ,  Masayuki NAKAE ,  Hideyuki SHIMONISHI ,  Kentaro SONODA ,  Masaya YAMAGATA ,  NEC Corporation

    发明人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita

    IPC分类号： H04L29/06

    CPC分类号： H04L63/105 ,  H04L63/0236 ,  H04L63/20

    摘要： A communication system includes an information acquisition unit that acquires information for determining an isolation level to which a user terminal belongs, from the user terminal; an isolation level determination unit that determines an isolation level to which the user terminal belongs, based on the acquired information; an isolation level information storage unit that defines whether or not access is possible to respective access destinations for each isolation level; an access control unit that causes a forwarding node(s) to implement forwarding or dropping of a packet, in accordance with whether or not access is possible to the respective access destinations; and a forwarding node(s) that forwards a packet in accordance with control of the access control unit. Stepwise access control is realized using isolation levels.

    摘要翻译： 通信系统包括从用户终端获取用于确定用户终端所属的隔离级别的信息的信息获取单元; 隔离级别确定单元，基于获取的信息确定用户终端所属的隔离级别; 隔离级别信息存储单元，其定义对于每个隔离级别是否可以访问相应的访问目的地; 访问控制单元，其使得转发节点根据是否可以访问相应的访问目的地来实现分组的转发或丢弃; 以及根据访问控制单元的控制转发分组的转发节点。 使用隔离级别实现逐步访问控制。

    Communication system, control device, policy management device, communication method, and program
    6.
    发明授权
    Communication system, control device, policy management device, communication method, and program 有权
    通信系统，控制设备，策略管理设备，通信方式和程序

    公开(公告)号：US09363182B2

    公开(公告)日：2016-06-07

    申请号：US13980029

    申请日：2011-08-30

    申请人： Hideyuki Shimonishi ,  Kentaro Sonoda ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita

    发明人： Hideyuki Shimonishi ,  Kentaro Sonoda ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita

    IPC分类号： H04L1/00 ,  H04L12/26 ,  H04L12/801 ,  H04L12/24 ,  H04L29/06

    CPC分类号： H04L47/12 ,  H04L41/0893 ,  H04L63/0227 ,  H04L63/08 ,  H04L63/104 ,  H04L63/20

    摘要： A communication system includes a control device; a forwarding node that processes, in accordance with a processing rule set by control device, a packet transmitted from a user terminal; and a policy management device that manages communication policy and notifies the control device of communication policy that corresponds to a user for whom authentication has succeeded; a setting request transmission permitting unit that, based on notification from the policy management device, sets to a forwarding node that receives a packet from the user terminal a first processing rule causing the forwarding node to make a setting request of processing rule with regard to a packet transmitted from the user terminal; and a path control unit that determines path from user terminal to access destination and sets to forwarding node along the path the second processing rule that corresponds to the path.

    摘要翻译： 通信系统包括控制装置; 转发节点，其根据由控制装置设置的处理规则处理从用户终端发送的分组; 以及管理通信策略并向所述控制设备通知与认证成功的用户对应的通信策略的策略管理设备; 设置请求发送许可单元，其基于来自所述策略管理装置的通知，对从所述用户终端接收到分组的转发节点设置使得所述转发节点针对a的处理规则进行设定请求的第一处理规则 从用户终端发送的报文; 以及路径控制单元，其确定从用户终端到接入目的地的路径，并且沿着路径将对应于路径的第二处理规则设置为转发节点。

    Communication control apparatus, communication control method, and program
    7.
    发明授权
    Communication control apparatus, communication control method, and program 有权
    通信控制装置，通信控制方法和程序

    公开(公告)号：US09288233B2

    公开(公告)日：2016-03-15

    申请号：US14126744

    申请日：2012-06-15

    申请人： Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Hideyuki Shimonishi ,  Kentaro Sonoda

    发明人： Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Hideyuki Shimonishi ,  Kentaro Sonoda

    IPC分类号： H04L29/06 ,  H04L12/911 ,  H04L12/729 ,  G06F15/16 ,  G06F17/00 ,  G06F15/173

    CPC分类号： H04L63/20 ,  H04L45/125 ,  H04L47/70

    摘要： A communication control apparatus controls communication between a first apparatus and a second apparatus connected to the first apparatus via a plurality of relay apparatuses. The communication control apparatus comprises: a communication path generation unit that refers to a control policy including access control and supplementary control that is other than the access control from the first apparatus to the second apparatus and refers to network configuration information about a network configuration among the first apparatus, the second apparatus, and the plurality of relay apparatuses and generates a communication path that matches the control policy from the first apparatus to the second apparatus and goes through at least one of the plurality of relay apparatuses; and a communication path control unit that instructs a relay apparatus(es) on the communication path among the plurality of relay apparatuses to execute the access control and the supplementary control included in the control policy.

    摘要翻译： 通信控制装置经由多个中继装置控制第一装置与连接到第一装置的第二装置之间的通信。 通信控制装置包括：通信路径产生单元，其参考包括从第一设备到第二设备的访问控制以外的访问控制和辅助控制的控制策略，并且参考关于网络配置的网络配置信息 第一装置，第二装置和多个中继装置，并且生成与来自第一装置的控制策略相匹配的通信路径到第二装置，并且通过多个中继装置中的至少一个; 以及通信路径控制单元，其指示所述多个中继装置中的所述通信路径上的中继装置执行所述控制策略中包括的所述访问控制和所述辅助控制。