公开(公告)号：US20210281482A1

公开(公告)日：2021-09-09

申请号：US16316074

申请日：2016-07-21

Applicant: NEC CORPORATION

Inventor： Takayuki SASAKI ,  Daniele Enrico ASONI ,  Adrian PERRIG

IPC: H04L12/24 ,  H04L12/721 ,  H04L12/861

Abstract: A communication apparatus comprises a rollback control unit to create a second process to roll back a currently working first process thereto; a storage to store states shared by the first and the second processes, the second process taking over a state(s) stored in the storage unit; a buffer; and a timing control unit that controls of timing of rollback. The rollback control unit starts event buffering to store in the buffer all of an event(s) received during when the first process is processing and destined to the first process, and upon completion of the processing of the event by the first process, the rollback control unit performs switching of a working process from the first process to the second process, sends the event(s) stored therein from start of the event buffering to the second process and stop event buffering.

公开(公告)号：US20210288867A1

公开(公告)日：2021-09-16

申请号：US16316083

申请日：2016-07-21

Applicant: NEC Corporation

Inventor： Takayuki SASAKI ,  Daniele Enrico ASONI ,  Adrian PERRIG

IPC: H04L12/24 ,  G06F9/455

Abstract: A communication apparatus comprises a rollback control unit that rolls back a first process to a second process; and a storage unit to store one or more network states shared by the first process and the second process, the second process enabled to take over or more network states from the first process; wherein the rollback control unit includes a network state control unit that controls to provide delayed updating of at least one of the one or more network states taken over by the second process.

公开(公告)号：US20210281577A1

公开(公告)日：2021-09-09

申请号：US16334405

申请日：2016-09-20

Applicant: NEC Corporation

Inventor： Takayuki SASAKI ,  Daniele Enrico ASONI ,  Adrian PERRIG

IPC: H04L29/06 ,  G06F21/53 ,  H04L9/08

Abstract: A monitoring unit verifies authentication information of a packet received and a rule verification unit verifies authentication information of a rule that matches the packet. The monitoring unit generates authentication information for a packet to be forwarded according to the rule having authentication information verified.

公开(公告)号：US20220358211A1

公开(公告)日：2022-11-10

申请号：US17620804

申请日：2019-06-25

Applicant: NEC Corporation

Inventor： Astha JADA ,  Toshiki KOBAYASHI ,  Takayuki SASAKI ,  Daniele Enrico ASONI ,  Adrian PERRIG

IPC: G06F21/54 ,  G06F21/53

Abstract: A semiconductor device (100) includes: a determination unit (110) configured to determine whether an avoidance condition of inspection of control flow integrity is satisfied (e.g., a degree of similarity with a previous input value is in a predetermined range) based on determination auxiliary information, which is at least an input value in a target code block to be executed among a plurality of code blocks in a predetermined program, and an inspection unit (120) configured to avoid inspection of control flow integrity in the target code block when it is determined that the avoidance condition is satisfied.

公开(公告)号：US20220245054A1

公开(公告)日：2022-08-04

申请号：US17618930

申请日：2019-06-25

Applicant: NEC Corporation

Inventor： Astha JADA ,  Toshiki KOBAYASHI ,  Takayuki SASAKI ,  Daniele Enrico ASONI ,  Adrian PERRIG

IPC: G06F11/36

Abstract: A semiconductor device (100) includes: first storage means (110) storing, in advance, a plurality of pieces of execution order inspection information (111˜11n) used for inspection of an execution order of a plurality of code blocks in a predetermined program, second storage means (120), which is a cache for the first storage means, and prediction means (130) for predicting a storage area of the execution order inspection information based on prediction auxiliary information in a first code block of the plurality of code blocks and a control flow graph of the program, the storage area being a prefetch target to be prefetched from the first storage means to the second storage means.

公开(公告)号：US20180165156A1

公开(公告)日：2018-06-14

申请号：US15573033

申请日：2015-05-11

Applicant: NEC Corporation

Inventor： Takayuki SASAKI ,  Adrian PERRIG ,  Srdjan CAPKUN ,  Claudio SORIENTE ,  Ramya Jayaram MASTI ,  Jason LEE

IPC: G06F11/14 ,  H04L29/06 ,  G06F21/44

CPC classification number: G06F11/1402 ,  G06F9/461 ,  G06F9/52 ,  G06F11/14 ,  G06F11/1438 ,  G06F21/44 ,  G06F21/577 ,  G06F21/606 ,  H04L29/06632 ,  H04L29/06755 ,  H04L45/56 ,  H04L45/742 ,  H04L63/12

Abstract: A communication apparatus comprising: a plurality of communication processes, each performing communication process on a flow associated thereto; a plurality of network interfaces, each of the network interfaces adapted to be connected to a network; a dispatcher that receives a packet from the network interface and dispatches the packet to an associated communication process, based on a dispatch rule that defines association of a flow to a communication process to which the flow is dispatched; and a control unit that performs control to roll back each of the communication processes using saved image thereof.

公开(公告)号：US20180159716A1

公开(公告)日：2018-06-07

申请号：US15572871

申请日：2015-05-11

Applicant: NEC Corporation

Inventor： Takayuki SASAKI ,  Adrian PERRIG ,  Srdjan CAPKUN ,  Claudio SORIENTE ,  Ramya Jayaram MASTI ,  Jason LEE

IPC: H04L29/06 ,  G06F21/53

Abstract: A communication apparatus comprising a plurality of communication processes, each of the communication processes configured to be executed in an environment allocated thereto and isolated from each of one or more environments arranged for remaining one or more processes, each of the communication processes performing communication processing on a flow associated thereto, a network interface connected to a network; a dispatcher that dispatches a packet to the communication process based on a dispatch rule that defines association of a flow with a communication process.