公开(公告)号：US20180191614A1

公开(公告)日：2018-07-05

申请号：US15909087

申请日：2018-03-01

Applicant: NEC Corporation

Inventor： Kentaro SONODA ,  Hideyuki SHIMONISHI ,  Toshio KOIDE ,  Yoichi HATANO ,  Masayuki NAKAE ,  Masaya YAMAGATA ,  Yoichiro MORITA ,  Takayuki SASAKI ,  Yuki ASHINO ,  Takeo OHNO

IPC: H04L12/741 ,  H04L12/721 ,  H04L12/717 ,  G06F9/455 ,  H04L12/751 ,  H04L12/24

CPC classification number: H04L45/74 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L41/04 ,  H04L45/02 ,  H04L45/42 ,  H04L45/70

Abstract: A communication system includes a communication apparatus configured to process a packet, and a controller configured to set the communication apparatus for processing a packet. The controller includes a memory storing instructions, and a processor configured to execute program instructions to determine a forwarding path for a packet addressed to a virtual machine based on an access rule indicating connectivity between virtual machines in accordance with an arrangement of the virtual machine, and set the communication apparatus for processing the packet.

公开(公告)号：US20170161120A1

公开(公告)日：2017-06-08

申请号：US15327563

申请日：2015-07-17

Applicant: NEC Corporation

Inventor： Takayuki SASAKI ,  Takeo HAYASHI ,  Kentaro SONODA ,  Yoichi HATANO ,  Toshiki WATANABE

IPC: G06F9/54

CPC classification number: G06F9/541 ,  G06F9/468 ,  G06F21/629

Abstract: This invention provides an information processing system for controlling, in the management of network resources, with a desired accuracy and at a lower cost, whether to perform operations for the network resources. The information processing system comprises a means that performs a determination as to whether to execute an Application Programming (API) called up by an operating subject and used for controlling the network resources, said determination being performed on the basis of a correspondence among the operating subject, a tenant that is a set consisting of the network resources for which the operating subject has been permitted to perform operations, and the API for which the execution by the operating subject has been permitted. This means then controls the execution of the API on the basis of a result of the determination.

公开(公告)号：US20170034166A1

公开(公告)日：2017-02-02

申请号：US15124787

申请日：2015-02-16

Applicant: NEC Corporation

Inventor： Kentaro SONODA ,  Takayuki SASAKI ,  Yoichi HATANO ,  Toshiki WATANABE ,  Takeo HAYASHI

IPC: H04L29/06 ,  G06F21/44

CPC classification number: H04L63/0876 ,  G06F21/44 ,  G06F21/56 ,  H04L12/6418 ,  H04L63/08 ,  H04L63/1441

Abstract: A network management apparatus that connects to a terminal by way of a communication apparatus, includes: a legitimate information generation unit configured to generate legitimate identification information that is identification information to identify the terminal on a network that the network management apparatus manages, the legitimate identification information being managed as legitimate information by the network management apparatus; a fake information generation unit configured to generate fake identification information that is different from the legitimate identification information and that cannot be used as it is for communication with another terminal; a management unit configured to manage the legitimate identification information and the fake identification information in association with each other; and a registration unit configured to register the fake identification information to the terminal.

Abstract translation: 一种通过通信装置连接到终端的网络管理装置，包括：合法信息生成部，生成作为识别信息的合法识别信息，以识别网络管理装置管理的网络上的终端，合法识别 由网络管理装置作为合法信息管理的信息; 假信息生成单元，其被配置为生成与所述合法识别信息不同的假标识信息，并且不能像原样用于与另一终端通信; 管理单元，被配置为相互关联地管理合法识别信息和伪造识别信息; 以及注册单元，其被配置为向所述终端注册所述假识别信息。

公开(公告)号：US20200021641A1

公开(公告)日：2020-01-16

申请号：US16582803

申请日：2019-09-25

Applicant: NEC CORPORATION

Inventor： Yoichi HATANO ,  Hideyuki Shimonishi ,  Kentaro Sonoda ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Takeo Ohno

IPC: H04L29/08 ,  H04L29/14 ,  H04L12/24

Abstract: A visualization device is communicable with one or a plurality of host servers for hosting a virtual system, and comprises an information acquisition unit for collecting configuration information on the virtual system and the host server, a storage unit for storing the configuration information therein, and a drawing unit for expressing a virtual machine and a virtual network configuring the virtual system with different axes based on the configuration information stored in the storage unit, expressing a connection relationship between a virtual machine and a virtual network by linking the lines extending from the respective axes, and grouping virtual machines in units of server on which the virtual machines operate thereby to generate drawing information for expressing the configuration of the virtual system and the host server.

公开(公告)号：US20160205099A1

公开(公告)日：2016-07-14

申请号：US14913457

申请日：2014-08-19

Applicant: NEC CORPORATION

Inventor： Remi NUMAJIRI ,  Takayuki SASAKI ,  Yoichiro MORITA ,  Hideyuki SHIMONISHI ,  Kentaro SONODA ,  Yoichi HATANO

IPC: H04L29/06 ,  H04L12/911

CPC classification number: H04L63/10 ,  H04L12/6418 ,  H04L12/66 ,  H04L47/70 ,  H04L63/1441 ,  H04L63/20

Abstract: A control execution apparatus is provided with a communication unit that makes an inquiry concerning a packet processing method with respect to a predetermined control instruction apparatus, and a packet processing unit that processes packets based on an instruction from the control instruction apparatus. The control instruction apparatus is provided with a communication history management unit that manages communication history between nodes via the control execution apparatus, a node state determination unit that determines, making reference to the communication history of the communication history management unit, whether or not a node that is a transmission source or a transmission destination of the packet for which an inquiry concerning a processing method was received, is on a side that provides a service to another node, and a control instruction unit that prohibits, when at least the node is on the side that provides a service to another node, new communication from the node in question to the other node.

Abstract translation: 控制执行装置具有通信单元，该通信单元针对预定的控制指令装置进行关于分组处理方法的查询，以及分组处理单元，其基于来自控制指令装置的指令来处理分组。 所述控制指示装置设置有经由所述控制执行装置管理节点之间的通信历史的通信历史管理单元，参照所述通信历史管理单元的通信历史来确定是否存在节点 即接收到关于处理方法的查询的分组的发送源或发送目的地在向另一个节点提供服务的一方，以及控制指示单元，其在至少节点开启时禁止 向另一个节点提供服务的一方，从所述节点到另一个节点的新通信。

公开(公告)号：US20180131754A1

公开(公告)日：2018-05-10

申请号：US15860712

申请日：2018-01-03

Applicant: NEC Corporation

Inventor： Yoichi HATANO ,  Hideyuki SHIMONISHI ,  Kentaro SONODA ,  Masayuki NAKAE ,  Masaya YAMAGATA ,  Yoichiro MORITA ,  Takayuki SASAKI ,  Takeo OHNO

IPC: H04L29/08 ,  H04L29/14 ,  H04L12/24

CPC classification number: H04L67/10 ,  H04L41/12 ,  H04L41/22 ,  H04L69/40

Abstract: A visualization device is communicable with one or a plurality of host servers for hosting a virtual system, and includes an information acquisition unit for collecting configuration information on the virtual system and the host server, a storage unit for storing the configuration information therein, and a drawing unit for expressing a virtual machine and a virtual network configuring the virtual system with different axes based on the configuration information stored in the storage unit, expressing a connection relationship between a virtual machine and a virtual network by linking the lines extending from the respective axes, and grouping virtual machines in units of server on which the virtual machines operate thereby to generate drawing information for expressing the configuration of the virtual system and the host server.

公开(公告)号：US20160182510A1

公开(公告)日：2016-06-23

申请号：US14905687

申请日：2014-07-16

Applicant: NEC CORPORATION

Inventor： Kentaro SONODA ,  Hideyuki SHIMONISHI ,  Yoichi HATANO ,  Takayuki SASAKI

IPC: H04L29/06 ,  H04L12/24

CPC classification number: H04L63/0876 ,  H04L41/0893

Abstract: A apparatus management system includes: a forwarding node(s) that supplies identification information that uniquely identifies an individual terminal to a terminal management apparatus that manages the identification information; and the terminal management apparatus that discloses the identification information about a terminal to a corresponding user, requests the user to register himself/herself as a user of the terminal from a second terminal different from the terminal, and holds associates the terminal in association with the user.

Abstract translation: 一种装置管理系统，包括：向管理该识别信息的终端管理装置提供唯一地识别各个终端的识别信息的转发节点; 以及将终端的识别信息公开给对应的用户的终端管理装置，请求用户从与终端不同的第二终端自己注册为终端的用户，并且保持与终端相关联 用户。