公开(公告)号：US07610632B2

公开(公告)日：2009-10-27

申请号：US11089715

申请日：2005-03-25

申请人： Naoshi Higuchi

发明人： Naoshi Higuchi

IPC分类号： G06F21/00 ,  G06F9/44

CPC分类号： G06F21/125 ,  H04L9/3247

摘要： Before providing a software body I, a determination program I is prepared to determine whether a software body II should be authenticated for combination and use with the software body I, and is provided with the software body I. A platform executes the determination program I before the platform employs the software body I with the software body II, and only when the determination results represent the permission for combination and use, the platform permits the software II to be combined and used with the software body I.

摘要翻译： 在提供软件体I之前，准备一个确定程序I，以确定软件体II是否应被认证用于与软件体I的组合和使用，并且被提供给软件体I.平台在之前执行确定程序I 该平台使用软件体II与软件体II，只有当确定结果表示组合和使用的许可时，该平台允许软件II与软件体1组合使用。

公开(公告)号：US20070066294A1

公开(公告)日：2007-03-22

申请号：US11523584

申请日：2006-09-20

申请人： Naoshi Higuchi

发明人： Naoshi Higuchi

IPC分类号： H04M3/00

CPC分类号： H04L69/16 ,  H04L67/327 ,  H04L69/162

摘要： In a TCP/UDP communication system, a communication process begins with a receipt of a communication request from an application program that does not specify a predetermined communication parameter such as source port number. A port number is dynamically assigned to the communication request to the communication request. The communication process is then suspended and communication control data associated with the application program is supplemented with the assigned source port number to generate supplemented communication control data. The communication process is then resumed to establish communication over a communications network, and the established communication is controlled according to the supplemented communication control data.

摘要翻译： 在TCP / UDP通信系统中，通信过程开始于从未指定诸如源端口号的预定通信参数的应用程序接收到通信请求。 端口号被动态分配给通信请求的通信请求。 然后暂停通信过程，并且利用所分配的源端口号来补充与应用程序相关联的通信控制数据，以产生补充的通信控制数据。 然后恢复通信过程以通过通信网络建立通信，并且根据补充的通信控制数据来控制建立的通信。

公开(公告)号：US09219750B2

公开(公告)日：2015-12-22

申请号：US13879851

申请日：2011-06-28

申请人： Takuya Murakami ,  Naoshi Higuchi

发明人： Takuya Murakami ,  Naoshi Higuchi

IPC分类号： G06F17/00 ,  H04L29/06 ,  G06F21/42

CPC分类号： H04L63/20 ,  G06F21/42 ,  H04L63/0272 ,  H04L63/102 ,  H04L65/104 ,  H04L65/1069

摘要： A communication control apparatus that controls communication via a network between a first communication apparatus for communicating via a virtual communication channel and a second communication apparatus for transmitting a communication request with the first communication apparatus including a storage unit that stores access control policy defining allowance or denial of access to the first communication apparatus, an establishment unit that establishes the virtual communication channel with the first communication apparatus, an authentication unit that authenticates the second communication apparatus based on the communication request received from the second communication apparatus, an access control unit that refers to the access control policy and evaluates whether to allow or deny access from the authenticated second communication apparatus to the first communication apparatus, and a transfer unit that transfers the received communication request to the first communication apparatus when the access control unit evaluates that the access is allowed.

摘要翻译： 一种通信控制装置，其经由网络在通过虚拟通信信道进行通信的第一通信装置和用于与第一通信装置发送通信请求的第二通信装置之间经由网络进行通信，所述第一通信装置包括存储单元，存储单元存储限定允许或拒绝的访问控制 访问第一通信装置的建立单元，建立与第一通信装置的虚拟通信信道的建立单元，基于从第二通信装置接收的通信请求认证第二通信装置的认证单元，参考的访问控制单元 访问控制策略并评估是否允许或拒绝从认证的第二通信设备到第一通信设备的访问;以及传送单元，其将接收到的通信请求传送到第一通信应用 访问控制单元评估允许访问时的状态。

公开(公告)号：US20130239172A1

公开(公告)日：2013-09-12

申请号：US13879851

申请日：2011-06-28

申请人： Takuya Murakami ,  Naoshi Higuchi

发明人： Takuya Murakami ,  Naoshi Higuchi

IPC分类号： H04L29/06

CPC分类号： H04L63/20 ,  G06F21/42 ,  H04L63/0272 ,  H04L63/102 ,  H04L65/104 ,  H04L65/1069

摘要： A communication control apparatus that controls communication via a network between a first communication apparatus for communicating via a virtual communication channel and a second communication apparatus for transmitting a communication request with the first communication apparatus including a storage unit that stores access control policy defining allowance or denial of access to the first communication apparatus, an establishment unit that establishes the virtual communication channel with the first communication apparatus, an authentication unit that authenticates the second communication apparatus based on the communication request received from the second communication apparatus, an access control unit that refers to the access control policy and evaluates whether to allow or deny access from the authenticated second communication apparatus to the first communication apparatus, and a transfer unit that transfers the received communication request to the first communication apparatus when the access control unit evaluates that the access is allowed.

摘要翻译： 一种通信控制装置，其经由网络在通过虚拟通信信道进行通信的第一通信装置和用于与第一通信装置发送通信请求的第二通信装置之间经由网络进行通信，所述第一通信装置包括存储单元，存储单元存储限定允许或拒绝的访问控制 访问第一通信装置的建立单元，建立与第一通信装置的虚拟通信信道的建立单元，基于从第二通信装置接收的通信请求认证第二通信装置的认证单元，参考的访问控制单元 访问控制策略并评估是否允许或拒绝从认证的第二通信设备到第一通信设备的访问;以及传送单元，其将接收到的通信请求传送到第一通信应用 访问控制单元评估允许访问时的状态。

公开(公告)号：US20080232402A1

公开(公告)日：2008-09-25

申请号：US12050361

申请日：2008-03-18

申请人： NAOSHI HIGUCHI ,  Tutomu Murase

发明人： NAOSHI HIGUCHI ,  Tutomu Murase

IPC分类号： H04J3/16

CPC分类号： H04L45/00 ,  H04L45/02

摘要： Suspendable candidate link group determining device 204 determines a suspendable candidate link group consisting of communication links whose communication in an upper layer is suspended, and outputs it. Link-incapable-of-handling-suspension excluding device 205 removes a communication link to an adjacent relay apparatus incapable of handling a suspended status from the communication link group of suspendable candidates output by the suspendable candidate link group determining device 204 based on information stored in link suspension manager 203, to obtain a communication link group to be suspended, and outputs information indicating the communication link group to be suspended. Suspension device 206 releases communication resources for a lower layer for each communication link for the communication link group to be suspended, which is indicated by information output from the link-incapable-of-handling-suspension excluding device 205.

摘要翻译： 可挂起的候选链路群决定装置204判断由上层的通信被中止的通信链路构成的可挂起的候选链路群，并输出。 链路不能处理 - 不包括设备205的移动装置除去基于存储在可挂起候选链路群组确定装置204中的信息的从可挂起候选链路群组确定装置204输出的不可挂起候选者的通信链路组中不能处理暂停状态的相邻中继装置的通信链路 链接暂停管理器203，以获得要暂停的通信链路组，并且输出指示要暂停的通信链路组的信息。 悬挂装置206释放用于要暂停的通信链路组的每个通信链路的下层的通信资源，该信息由从不具有无连接的处理 - 挂起排除装置205输出的信息指示。

公开(公告)号：US08126444B2

公开(公告)日：2012-02-28

申请号：US11523584

申请日：2006-09-20

申请人： Naoshi Higuchi

发明人： Naoshi Higuchi

IPC分类号： H04M3/00

CPC分类号： H04L69/16 ,  H04L67/327 ,  H04L69/162

摘要： In a TCP/UDP communication system, a communication process begins with a receipt of a communication request from an application program that does not specify a predetermined communication parameter such as source port number. A port number is dynamically assigned to the communication request. The communication process is then suspended and communication control data associated with the application program is supplemented with the assigned source port number to generate supplemented communication control data. The communication process is then resumed to establish communication over a communications network, and the established communication is controlled according to the supplemented communication control data.

摘要翻译： 在TCP / UDP通信系统中，通信过程开始于从未指定诸如源端口号的预定通信参数的应用程序接收到通信请求。 端口号被动态分配给通信请求。 然后暂停通信过程，并且利用所分配的源端口号来补充与应用程序相关联的通信控制数据，以产生补充的通信控制数据。 然后恢复通信过程以通过通信网络建立通信，并且根据补充的通信控制数据来控制建立的通信。

公开(公告)号：US07762460B2

公开(公告)日：2010-07-27

申请号：US11060394

申请日：2005-02-17

申请人： Naoshi Higuchi

发明人： Naoshi Higuchi

IPC分类号： G06K7/00

CPC分类号： G06K7/10544 ,  G06K7/0004 ,  G06K7/0008

摘要： The service terminal 1 which contains bar code reader 2, RF-ID reader 3 and information processing block is moved to a medium containing the bar code and RF-ID tag. Both of the bar code reader 2 and RF-ID reader 3 are set to the positions that information can be read from the bar code and RF-ID tag. In this case, the information processing block controls the bar code reader 2 and RF-ID reader 3 to read information from the bar code and RF-ID tag.

摘要翻译： 包含条形码读取器2，RF-ID读取器3和信息处理块的服务终端1移动到包含条形码和RF-ID标签的介质。 条形码读取器2和RF-ID读取器3都被设置为可以从条形码和RF-ID标签读取信息的位置。 在这种情况下，信息处理块控制条形码读取器2和RF-ID读取器3从条形码和RF-ID标签读取信息。

公开(公告)号：US20090178110A1

公开(公告)日：2009-07-09

申请号：US12281507

申请日：2007-03-01

申请人： Naoshi Higuchi

发明人： Naoshi Higuchi

IPC分类号： G06F21/00

CPC分类号： G06F13/387

摘要： The communication control device of the present invention includes: a communication parameter acquisition means (105) for acquiring communication parameters that specify the transmission origin of an outside apparatus based on existence information of the outside apparatus that is received from a communication network, an apparatus identifier acquisition means (104) for acquiring from the outside apparatus an apparatus identifier that is an identifier for the outside apparatus, a policy determination means (106) for determining a communication policy for permitting or prohibiting communication with the outside apparatus that is specified by the apparatus identifier, a communication selection rule combining means (107) for combining communication selection rules based on the communication policy and communication parameters, and a communication pass control means (108) for passing or blocking communication with the outside apparatus based on the communication selection rules that have been combined by the communication selection rule combining means.

摘要翻译： 本发明的通信控制装置包括：通信参数获取装置，用于根据从通信网络接收到的外部装置的存在信息获取指定外部装置的发送原点的通信参数;装置标识符 用于从外部设备获取作为外部设备的标识符的设备标识符的获取装置（104），用于确定用于允许或禁止与该设备指定的外部设备的通信的通信策略的策略确定装置（106） 标识符，用于基于通信策略和通信参数组合通信选择规则的通信选择规则组合装置（107）和用于根据通信选择规则通过或阻止与外部设备的通信的通信通过控制装置（108） 有b 通过通信选择规则组合装置组合。

公开(公告)号：US20050216414A1

公开(公告)日：2005-09-29

申请号：US11089715

申请日：2005-03-25

申请人： Naoshi Higuchi

发明人： Naoshi Higuchi

IPC分类号： G06F21/24 ,  G06F1/00 ,  G06F12/14 ,  G06F21/00 ,  G06F21/22 ,  G06K17/00 ,  G06K19/073 ,  H04K1/00 ,  H04L9/32

CPC分类号： G06F21/125 ,  H04L9/3247

摘要： Before providing a software body I, a determination program I is prepared to determine whether a software body II should be authenticated for combination and use with the software body I, and is provided with the software body I. A platform executes the determination program I before the platform employs the software body I with the software body II, and only when the determination results represent the permission for combination and use, the platform permits the software II to be combined and used with the software body I.

摘要翻译： 在提供软件体I之前，准备一个确定程序I，以确定软件体II是否应被认证用于与软件体I的组合和使用，并且被提供给软件体I.平台在之前执行确定程序I 该平台使用软件体II与软件体II，只有当确定结果表示组合和使用的许可时，该平台允许软件II与软件体1组合使用。

公开(公告)号：US20100325077A1

公开(公告)日：2010-12-23

申请号：US12526345

申请日：2008-02-19

申请人： Naoshi Higuchi

发明人： Naoshi Higuchi

IPC分类号： G06N5/02

CPC分类号： G06F12/1483 ,  G06F9/468 ,  G06F9/545 ,  G06F21/53 ,  G06F2209/542

摘要： Provided is an operating system enabling, in an application formed of a plurality of programs including a library program, a rule to be applied that enables determination whether to allow processing of a system call called by the application.An address on a memory into which a program is loaded is stored so as to be correlated with the program as an address range set, each program is loaded into a memory in the processing of starting an application to store an address range set in an address range set storing unit, upon receiving a call-up of a system call from the application, various kinds of processing are executed, and an operation rule which describes allowance/non-allowance of use of a system call by a program forming the application is stored to determine, based on an operation rule corresponding to a program of a calling source of the system call, whether to execute processing called by a system call processing unit.

摘要翻译： 提供了一种操作系统，其能够在由包括库程序的多个程序形成的应用程序中实现能够确定是否允许处理由应用程序调用的系统调用的要应用的规则。 存储加载有程序的存储器上的地址，以便与作为地址范围的程序相关联，每个程序在启动应用程序的处理中加载到存储器中，以存储设置在地址中的地址范围 范围集合存储单元，在从应用程序接收到系统调用的呼叫时，执行各种处理，并且描述通过形成应用程序的程序使用系统调用的允许/不允许的操作规则是 存储以基于与系统呼叫的呼叫源的程序相对应的操作规则来确定是否执行由系统呼叫处理单元调用的处理。