公开(公告)号：US09935876B2

公开(公告)日：2018-04-03

申请号：US14389309

申请日：2013-03-29

申请人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Yuki Ashino ,  Takeo Ohno

发明人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Yuki Ashino ,  Takeo Ohno

IPC分类号： H04L12/28 ,  H04L12/56 ,  H04L12/741 ,  H04L12/717 ,  H04L12/751 ,  H04L12/721 ,  G06F9/455 ,  H04L12/24

CPC分类号： H04L45/74 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L41/04 ,  H04L45/02 ,  H04L45/42 ,  H04L45/70

摘要： A communication system, includes: a node that requests a processing rule for processing a packet; and a control apparatus that notifies the node of the processing rule in response to the request. The control apparatus, upon being notified of change of a connection relationship between a communication apparatus to which a packet is addressed and the node, determines a forwarding path for a packet addressed to the communication apparatus and notifies the node of a processing rule for realizing the forwarding path.

公开(公告)号：US08681803B2

公开(公告)日：2014-03-25

申请号：US13822547

申请日：2012-09-14

申请人： Yoichiro Morita ,  Masayuki Nakae ,  Masaya Yamagata ,  Takayuki Sasaki ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano

发明人： Yoichiro Morita ,  Masayuki Nakae ,  Masaya Yamagata ,  Takayuki Sasaki ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano

IPC分类号： H04L12/28

CPC分类号： H04L41/28 ,  H04L45/38 ,  H04L45/64

摘要： Authentication apparatus authenticates user using host connected to forwarding node. Policy management apparatus holds access control policy for identifying host under access control using identifier of forwarding node or identifier of user, and links identifier of host under access control and identifier of forwarding node to which host is connected, or identifier of host under access control and identifier of user using host. Forwarding node transmits to policy management apparatus identifier of host connected to own forwarding node and identifier of own forwarding node. Authentication apparatus transmits to policy management apparatus identifier of host connected to forwarding node and identifier of user. Policy management apparatus refers to access control policy and, if host connected to forwarding node is under access control, notifies content of access control to control apparatus as access control list. Control apparatus generates processing rule in accordance with access control list and sets generated processing rule in forwarding nodes.

摘要翻译： 验证设备使用连接到转发节点的主机对用户进行认证。 策略管理装置保存用于使用转发节点的标识符或用户的标识符的标识下的主机访问控制策略，以及主机所连接的主机的接入控制的标识符和主机所连接的转发节点的标识符，以及访问控制下的主机的标识符，以及 使用主机的用户标识符。 转发节点发送到连接到自己的转发节点的主机的策略管理设备标识符和自己的转发节点的标识符。 认证装置向连接到转发节点的主机和用户的标识符的策略管理装置的标识符发送。 策略管理装置是指访问控制策略，如果连接到转发节点的主机正在进行访问控制，则将访问控制的内容通知控制装置作为访问控制列表。 控制装置根据访问控制列表生成处理规则，并在转发节点中设置生成的处理规则。

公开(公告)号：US09882962B2

公开(公告)日：2018-01-30

申请号：US14391169

申请日：2012-04-09

申请人： Yoichi Hatano ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Takeo Ohno

发明人： Yoichi Hatano ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Takeo Ohno

IPC分类号： H04L29/08 ,  H04L29/14 ,  H04L12/24

CPC分类号： H04L67/10 ,  H04L41/12 ,  H04L41/22 ,  H04L69/40

摘要： A visualization device is communicable with one or a plurality of host servers for hosting a virtual system, and includes an information acquisition unit for collecting configuration information on the virtual system and the host server, a storage unit for storing the configuration information therein, and a drawing unit for expressing a virtual machine and a virtual network configuring the virtual system with different axes based on the configuration information stored in the storage unit, expressing a connection relationship between a virtual machine and a virtual network by linking the lines extending from the respective axes, and grouping virtual machines in units of server on which the virtual machines operate thereby to generate drawing information for expressing the configuration of the virtual system and the host server.

公开(公告)号：US09755918B2

公开(公告)日：2017-09-05

申请号：US14345218

申请日：2012-09-14

申请人： Kentaro Sonoda ,  Yasuhiro Mizukoshi ,  Hideyuki Shimonishi ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki

发明人： Kentaro Sonoda ,  Yasuhiro Mizukoshi ,  Hideyuki Shimonishi ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki

IPC分类号： H04L1/00 ,  H04L12/26 ,  H04L12/823 ,  H04L12/801

CPC分类号： H04L43/028 ,  H04L47/14 ,  H04L47/32

摘要： A communication terminal comprises: first means that communicates with a network system that includes a forwarding apparatus forwarding a packet and a control apparatus informing the forwarding apparatus of a processing rule prescribing a packet processing method; second means that determines a processing operation to be executed by the network system from among packet processing operations to be executed by the communication terminal; and third means that informs the forwarding apparatus of a processing rule corresponding to the determined packet processing operation.

公开(公告)号：US20150078169A1

公开(公告)日：2015-03-19

申请号：US14345218

申请日：2012-09-14

申请人： Kentaro Sonoda ,  Yasuhiro Mizukoshi ,  Hideyuki Shimonishi ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki

发明人： Kentaro Sonoda ,  Yasuhiro Mizukoshi ,  Hideyuki Shimonishi ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki

IPC分类号： H04L12/26 ,  H04L12/801 ,  H04L12/823

CPC分类号： H04L43/028 ,  H04L47/14 ,  H04L47/32

摘要： A communication terminal comprises: first means that communicates with a network system that includes a forwarding apparatus forwarding a packet and a control apparatus informing the forwarding apparatus of a processing rule prescribing a packet processing method; second means that determines a processing operation to be executed by the network system from among packet processing operations to be executed by the communication terminal; and third means that informs the forwarding apparatus of a processing rule corresponding to the determined packet processing operation.

摘要翻译： 通信终端包括：第一装置，其与包括转发分组的转发装置的网络系统和通知转发装置的控制装置进行通信，该处理规则规定分组处理方法; 第二装置，从通信终端执行的分组处理操作中确定由网络系统执行的处理操作; 第三装置向转发装置通知与所确定的分组处理操作相对应的处理规则。

公开(公告)号：US20140341219A1

公开(公告)日：2014-11-20

申请号：US14344297

申请日：2012-09-14

申请人： Kentaro Sonoda ,  Yasuhiro Mizukoshi ,  Hideyuki Shimonishi ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki

发明人： Kentaro Sonoda ,  Yasuhiro Mizukoshi ,  Hideyuki Shimonishi ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki

IPC分类号： H04L12/747 ,  H04L29/06

CPC分类号： H04L45/742 ,  H04L41/0893 ,  H04L43/026 ,  H04L47/125 ,  H04L63/0227 ,  H04L69/22

摘要： A communication terminal comprises: first unit that communicates with a network system that includes a forwarding apparatus forwarding a packet and a control apparatus informing the forwarding apparatus of a processing rule prescribing a packet processing method; second unit that determines a processing operation to be executed by the network system from among packet processing operations to be executed by the communication terminal; and third unit that requests the control apparatus to inform the forwarding apparatus of a processing rule corresponding to the determined packet processing operation.

摘要翻译： 通信终端包括：与包括转发分组的转发装置的网络系统通信的第一单元和通知转发装置的规定分组处理方法的处理规则的控制装置; 第二单元，其从由所述通信终端执行的分组处理操作中确定要由所述网络系统执行的处理操作; 以及第三单元，其请求所述控制装置向所述转发装置通知与所确定的分组处理操作相对应的处理规则。

公开(公告)号：US20130195112A1

公开(公告)日：2013-08-01

申请号：US13822547

申请日：2012-09-14

申请人： Yoichiro Morita ,  Masayuki Nakae ,  Masaya Yamagata ,  Takayuki Sasaki ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano

发明人： Yoichiro Morita ,  Masayuki Nakae ,  Masaya Yamagata ,  Takayuki Sasaki ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano

IPC分类号： H04L12/24

CPC分类号： H04L41/28 ,  H04L45/38 ,  H04L45/64

摘要： Authentication apparatus authenticates user using host connected to forwarding node. Policy management apparatus holds access control policy for identifying host under access control using identifier of forwarding node or identifier of user, and links identifier of host under access control and identifier of forwarding node to which host is connected, or identifier of host under access control and identifier of user using host. Forwarding node transmits to policy management apparatus identifier of host connected to own forwarding node and identifier of own forwarding node. Authentication apparatus transmits to policy management apparatus identifier of host connected to forwarding node and identifier of user. Policy management apparatus refers to access control policy and, if host connected to forwarding node is under access control, notifies content of access control to control apparatus as access control list. Control apparatus generates processing rule in accordance with access control list and sets generated processing rule in forwarding nodes.

摘要翻译： 验证设备使用连接到转发节点的主机对用户进行认证。 策略管理装置保存用于使用转发节点的标识符或用户的标识符的标识下的主机访问控制策略，以及主机所连接的主机的接入控制的标识符和主机所连接的转发节点的标识符，以及访问控制下的主机的标识符，以及 使用主机的用户标识符。 转发节点发送到连接到自己的转发节点的主机的策略管理设备标识符和自己的转发节点的标识符。 认证装置向连接到转发节点的主机和用户的标识符的策略管理装置的标识符发送。 策略管理装置是指访问控制策略，如果连接到转发节点的主机正在进行访问控制，则将访问控制的内容通知控制装置作为访问控制列表。 控制装置根据访问控制列表生成处理规则，并在转发节点中设置生成的处理规则。

公开(公告)号：US09419910B2

公开(公告)日：2016-08-16

申请号：US14344472

申请日：2012-09-12

申请人： Masaya Yamagata ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano ,  Masayuki Nakae ,  Yoichiro Morita ,  Takayuki Sasaki

发明人： Masaya Yamagata ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano ,  Masayuki Nakae ,  Yoichiro Morita ,  Takayuki Sasaki

IPC分类号： H04L12/26 ,  H04L12/823 ,  H04L12/801 ,  H04L12/851 ,  H04L12/935 ,  H04L12/931 ,  H04L29/06

CPC分类号： H04L47/32 ,  H04L47/12 ,  H04L47/2441 ,  H04L49/3009 ,  H04L49/505 ,  H04L63/0236 ,  H04L63/101

摘要： A communication system includes: a forwarding node(s) in which a first packet handling operation(s) for processing incoming packets is set and which processes packets in accordance with the packet handling operation(s); a first control apparatus setting the first packet handling operation(s) in the forwarding node(s); a flow control node(s) arranged upstream of the forwarding node(s); and a second control apparatus setting a second packet handling operation(s) in the flow control node(s). The flow control node(s) intercepts forwarding of packets that do not satisfy a predetermined condition(s) to the forwarding node(s) in accordance with the second packet handling operation(s).

摘要翻译： 通信系统包括：转发节点，其中设置用于处理进入分组的第一分组处理操作，并且根据分组处理操作来处理分组; 设置所述转发节点中的第一分组处理操作的第一控制装置; 设置在所述转发节点的上游的流控制节点; 以及设置流控制节点中的第二分组处理操作的第二控制装置。 流控制节点根据第二分组处理操作拦截不满足预定条件的分组到转发节点的转发。

公开(公告)号：US20150063354A1

公开(公告)日：2015-03-05

申请号：US14389309

申请日：2013-03-29

申请人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Yuki Ashino ,  Takeo Ohno

发明人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Yuki Ashino ,  Takeo Ohno

IPC分类号： H04L12/741 ,  H04L12/751 ,  H04L12/721

CPC分类号： H04L45/74 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L41/04 ,  H04L45/02 ,  H04L45/42 ,  H04L45/70

摘要： A communication system, includes: a node that requests a processing rule for processing a packet; and a control apparatus that notifies the node of the processing rule in response to the request. The control apparatus, upon being notified of change of a connection relationship between a communication apparatus to which a packet is addressed and the node, determines a forwarding path for a packet addressed to the communication apparatus and notifies the node of a processing rule for realizing the forwarding path.

摘要翻译： 一种通信系统，包括：请求处理规则以处理分组的节点; 以及响应于该请求向处理规则通知节点的控制装置。 控制装置在被通知了分组所寻址的通信装置与节点之间的连接关系的改变时，确定寻址到通信装置的分组的转发路径，并向节点通知用于实现分组的处理规则 转发路径。

公开(公告)号：US20140341019A1

公开(公告)日：2014-11-20

申请号：US14344472

申请日：2012-09-12

申请人： Masaya Yamagata ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano ,  Masayuki Nakae ,  Yoichiro Morita ,  Takayuki Sasaki

发明人： Masaya Yamagata ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Yoichi Hatano ,  Masayuki Nakae ,  Yoichiro Morita ,  Takayuki Sasaki

IPC分类号： H04L12/823

CPC分类号： H04L47/32 ,  H04L47/12 ,  H04L47/2441 ,  H04L49/3009 ,  H04L49/505 ,  H04L63/0236 ,  H04L63/101

摘要： A communication system includes: a forwarding node(s) in which a first packet handling operation(s) for processing incoming packets is set and which processes packets in accordance with the packet handling operation(s); a first control apparatus setting the first packet handling operation(s) in the forwarding node(s); a flow control node(s) arranged upstream of the forwarding node(s); and a second control apparatus setting a second packet handling operation(s) in the flow control node(s). The flow control node(s) intercepts forwarding of packets that do not satisfy a predetermined condition(s) to the forwarding node(s) in accordance with the second packet handling operation(s).

摘要翻译： 通信系统包括：转发节点，其中设置用于处理进入分组的第一分组处理操作，并且根据分组处理操作来处理分组; 设置所述转发节点中的第一分组处理操作的第一控制装置; 设置在所述转发节点的上游的流控制节点; 以及设置流控制节点中的第二分组处理操作的第二控制装置。 流控制节点根据第二分组处理操作拦截不满足预定条件的分组到转发节点的转发。