专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09075410B2 Abnormality detection for isolating a control system 有权
标题翻译：用于隔离控制系统的异常检测
公开(公告)号：US09075410B2
公开(公告)日：2015-07-07
申请号：US13365533
申请日：2012-02-03
申请人： Akira Ohkado , Yukihiko Sohda , Masami Tada , Tadashi Tsumura
发明人： Akira Ohkado , Yukihiko Sohda , Masami Tada , Tadashi Tsumura
IPC分类号： G05B9/02 , G06F11/00 , G05B19/048 , H04L29/06 , G06F21/55
CPC分类号： G05B19/048 , G06F21/552 , H04L63/1425
摘要： A mechanism is provided for effectively detecting an abnormality occurring in a control system and isolating the control system in which abnormality is acknowledged. The mechanism receives, from one or more control systems in the plurality of control systems, respective abnormality notifications for respective counter control systems to be monitored by the plurality of control systems. The mechanism adds up abnormality notifications transmitted from respective monitoring sections of the plurality of control systems so as to evaluate the reputation of a control system suspected to have an abnormality. The mechanism causes a protected area for operating the control system suspected to have an abnormality to restrict outbound traffic from at least the inside of the protected area, when an indication is identified that the control system is abnormal according to criteria from a result of the evaluation.
摘要翻译：提供一种用于有效地检测控制系统中发生的异常并隔离异常被确认的控制系统的机构。该机构从多个控制系统中的一个或多个控制系统接收由多个控制系统监控的各个计数器控制系统的各自的异常通知。该机构将从多个控制系统的各监视部发送的异常通知相加，以评估疑似异常的控制系统的信誉。该机制导致受保护区域操作怀疑有异常的控制系统，以至少在保护区内部限制出站流量，当根据评估结果的标准确定控制系统异常的指示时。

2. 发明授权

US08726085B2 Anomaly detection to implement security protection of a control system 有权
标题翻译：异常检测实现控制系统的安全保护
公开(公告)号：US08726085B2
公开(公告)日：2014-05-13
申请号：US13365594
申请日：2012-02-03
申请人： Kazuhito Akiyama , Akira Ohkado , Yukihiko Sohda , Masami Tada , Tadashi Tsumura
发明人： Kazuhito Akiyama , Akira Ohkado , Yukihiko Sohda , Masami Tada , Tadashi Tsumura
IPC分类号： G06F11/00
CPC分类号： G06F21/50 , G05B19/0428 , G06F11/07 , G06F21/552 , G06F21/554 , G06F21/577 , G06F2221/2145 , G06F2221/2151 , H04L63/1425
摘要： An anomaly detection mechanism is provided that detects an anomaly in a control network, and includes an identifying unit to receive event information on an event that occurs, and to identify a group including a resource related to the event information by referring to a configuration management database for retaining dependence relationships between processes and resources including a control system; a policy storing unit to store one or more policies each of which associates one or more actions with a condition defining a situation suspected to have an anomaly; an adding unit to acquire group-related information needed for application to the one or more policies, and to add the acquired information to the event information; and a determining unit to apply the event information to the one or more policies and to determine the one or more actions associated with the matched condition as one or more actions to be taken.
摘要翻译：提供了一种异常检测机制，其检测控制网络中的异常，并且包括识别单元，用于接收关于发生的事件的事件信息，并且通过参考配置管理数据库来识别包括与事件信息相关的资源的组用于保持过程和资源之间的依赖关系，包括控制系统; 策略存储单元，用于存储一个或多个策略，每个策略将一个或多个动作与定义怀疑具有异常的情况的条件相关联; 添加单元，用于获取应用于所述一个或多个策略所需的组相关信息，并将所获取的信息添加到所述事件信息中; 以及确定单元，用于将所述事件信息应用于所述一个或多个策略，并且将与所述匹配条件相关联的所述一个或多个动作确定为要采取的一个或多个动作。

3. 发明申请

US20120209411A1 Abnormality Detection for Isolating a Control System 有权
标题翻译：用于隔离控制系统的异常检测
公开(公告)号：US20120209411A1
公开(公告)日：2012-08-16
申请号：US13365533
申请日：2012-02-03
申请人： Akira Ohkado , Yukihiko Sohda , Masami Tada , Tadashi Tsumura
发明人： Akira Ohkado , Yukihiko Sohda , Masami Tada , Tadashi Tsumura
IPC分类号： G05B9/02
CPC分类号： G05B19/048 , G06F21/552 , H04L63/1425
摘要： A mechanism is provided for effectively detecting an abnormality occurring in a control system and isolating the control system in which abnormality is acknowledged. The mechanism receives, from one or more control systems in the plurality of control systems, respective abnormality notifications for respective counter control systems to be monitored by the plurality of control systems. The mechanism adds up abnormality notifications transmitted from respective monitoring sections of the plurality of control systems so as to evaluate the reputation of a control system suspected to have an abnormality. The mechanism causes a protected area for operating the control system suspected to have an abnormality to restrict outbound traffic from at least the inside of the protected area, when an indication is identified that the control system is abnormal according to criteria from a result of the evaluation.
摘要翻译：提供一种用于有效地检测控制系统中发生的异常并隔离异常被确认的控制系统的机构。该机构从多个控制系统中的一个或多个控制系统接收由多个控制系统监控的各个计数器控制系统的各自的异常通知。该机构将从多个控制系统的各监视部发送的异常通知相加，以评估疑似异常的控制系统的信誉。该机制导致受保护区域操作怀疑有异常的控制系统，以至少在保护区内部限制出站流量，当根据评估结果的标准确定控制系统异常的指示时。

4. 发明申请

US20120210158A1 Anomaly Detection to Implement Security Protection of a Control System 有权
标题翻译：实现控制系统安全保护的异常检测
公开(公告)号：US20120210158A1
公开(公告)日：2012-08-16
申请号：US13365594
申请日：2012-02-03
申请人： Kazuhito Akiyama , Akira Ohkado , Yukihiko Sohda , Masami Tada , Tadashi Tsumura
发明人： Kazuhito Akiyama , Akira Ohkado , Yukihiko Sohda , Masami Tada , Tadashi Tsumura
IPC分类号： G06F11/07
CPC分类号： G06F21/50 , G05B19/0428 , G06F11/07 , G06F21/552 , G06F21/554 , G06F21/577 , G06F2221/2145 , G06F2221/2151 , H04L63/1425
摘要： An anomaly detection mechanism is provided that detects an anomaly in a control network, and includes an identifying unit to receive event information on an event that occurs, and to identify a group including a resource related to the event information by referring to a configuration management database for retaining dependence relationships between processes and resources including a control system; a policy storing unit to store one or more policies each of which associates one or more actions with a condition defining a situation suspected to have an anomaly; an adding unit to acquire group-related information needed for application to the one or more policies, and to add the acquired information to the event information; and a determining unit to apply the event information to the one or more policies and to determine the one or more actions associated with the matched condition as one or more actions to be taken.
摘要翻译：提供了一种异常检测机制，其检测控制网络中的异常，并且包括识别单元，用于接收关于发生的事件的事件信息，并且通过参考配置管理数据库来识别包括与事件信息相关的资源的组用于保持过程和资源之间的依赖关系，包括控制系统; 策略存储单元，用于存储一个或多个策略，每个策略将一个或多个动作与定义怀疑具有异常的情况的条件相关联; 添加单元，用于获取应用于所述一个或多个策略所需的组相关信息，并将所获取的信息添加到所述事件信息中; 以及确定单元，用于将所述事件信息应用于所述一个或多个策略，并且将与所述匹配条件相关联的所述一个或多个动作确定为要采取的一个或多个动作。

5. 发明申请

US20120297452A1 PROVIDING PROTECTION AGAINST UNAUTHORIZED NETWORK ACCESS 有权
标题翻译：提供对未经授权的网络访问的保护
公开(公告)号：US20120297452A1
公开(公告)日：2012-11-22
申请号：US13560471
申请日：2012-07-27
申请人： Seiji Munetoh , Akira Ohkado , Yukihiko Sohda , Masami Tada
发明人： Seiji Munetoh , Akira Ohkado , Yukihiko Sohda , Masami Tada
IPC分类号： G06F21/20
CPC分类号： G06F21/554 , G06F9/45533 , G06F21/74 , G06F2221/2127 , H04L63/1491
摘要： A system includes a detection unit configured to detect unauthorized access to one or more information processing apparatuses that are virtually implemented by virtual machines executed by a computer; an authorized network configured to transfer authorized access to the one or more information processing apparatuses from an external network; a honeypot network configured to transfer unauthorized access to the information processing apparatuses from the external network; and a control unit configured to connect the information processing apparatuses for which no unauthorized access has been detected to the authorized network, and connect the information processing apparatuses for which unauthorized access has been detected to the honeypot network; wherein the control unit shifts, in response to detecting unauthorized access by the detection unit, the corresponding information processing apparatus into a decoy mode in which the detected unauthorized access is disconnected from a normal operation.
摘要翻译：一种系统，包括：检测单元，被配置为检测对由计算机执行的虚拟机虚拟实现的一个或多个信息处理设备的未授权访问; 授权网络，被配置为从外部网络传送对所述一个或多个信息处理设备的授权访问; 蜜罐网络，被配置为从外部网络传送对信息处理设备的未经授权的访问; 以及控制单元，被配置为将没有未经授权的访问的信息处理设备连接到授权网络，并且将已经检测到未经授权的访问的信息处理设备连接到蜜罐网络; 其中所述控制单元响应于检测到所述检测单元的未经授权的访问而将所述对应的信息处理设备移动到所述检测到的未授权访问与正常操作断开的诱饵模式。

6. 发明申请

US20120254951A1 PROVIDING PROTECTION AGAINST UNAUTHORIZED NETWORK ACCESS 有权
公开(公告)号：US20120254951A1
公开(公告)日：2012-10-04
申请号：US13419554
申请日：2012-03-14
申请人： Seiji Munetoh , Akira Ohkado , Yukihiko Sohda , Masami Tada
发明人： Seiji Munetoh , Akira Ohkado , Yukihiko Sohda , Masami Tada
IPC分类号： G06F21/00
CPC分类号： G06F21/554 , G06F9/45533 , G06F21/74 , G06F2221/2127 , H04L63/1491
摘要： A system includes a detection unit configured to detect unauthorized access to one or more information processing apparatuses that are virtually implemented by virtual machines executed by a computer; an authorized network configured to transfer authorized access to the one or more information processing apparatuses from an external network; a honeypot network configured to transfer unauthorized access to the information processing apparatuses from the external network; and a control unit configured to connect the information processing apparatuses for which no unauthorized access has been detected to the authorized network, and connect the information processing apparatuses for which unauthorized access has been detected to the honeypot network; wherein the control unit shifts, in response to detecting unauthorized access by the detection unit, the corresponding information processing apparatus into a decoy mode in which the detected unauthorized access is disconnected from a normal operation.

7. 发明授权

US08677484B2 Providing protection against unauthorized network access 有权
标题翻译：提供防止未经授权的网络访问的保护
公开(公告)号：US08677484B2
公开(公告)日：2014-03-18
申请号：US13419554
申请日：2012-03-14
申请人： Seiji Munetoh , Akira Ohkado , Yukihiko Sohda , Masami Tada
发明人： Seiji Munetoh , Akira Ohkado , Yukihiko Sohda , Masami Tada
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： G06F21/554 , G06F9/45533 , G06F21/74 , G06F2221/2127 , H04L63/1491
摘要： A system includes a detection unit configured to detect unauthorized access to one or more information processing apparatuses that are virtually implemented by virtual machines executed by a computer; an authorized network configured to transfer authorized access to the one or more information processing apparatuses from an external network; a honeypot network configured to transfer unauthorized access to the information processing apparatuses from the external network; and a control unit configured to connect the information processing apparatuses for which no unauthorized access has been detected to the authorized network, and connect the information processing apparatuses for which unauthorized access has been detected to the honeypot network; wherein the control unit shifts, in response to detecting unauthorized access by the detection unit, the corresponding information processing apparatus into a decoy mode in which the detected unauthorized access is disconnected from a normal operation.
摘要翻译：一种系统，包括：检测单元，被配置为检测对由计算机执行的虚拟机虚拟实现的一个或多个信息处理设备的未授权访问; 授权网络，被配置为从外部网络传送对所述一个或多个信息处理设备的授权访问; 蜜罐网络，被配置为从外部网络传送对信息处理设备的未经授权的访问; 以及控制单元，被配置为将没有未经授权的访问的信息处理设备连接到授权网络，并且将已经检测到未经授权的访问的信息处理设备连接到蜜罐网络; 其中所述控制单元响应于检测到所述检测单元的未经授权的访问而将所述对应的信息处理设备移动到所述检测到的未授权访问与正常操作断开的诱饵模式。

8. 发明授权

US08683589B2 Providing protection against unauthorized network access 有权
公开(公告)号：US08683589B2
公开(公告)日：2014-03-25
申请号：US13560471
申请日：2012-07-27
申请人： Seiji Munetoh , Akira Ohkado , Yukihiko Sohda , Masami Tada
发明人： Seiji Munetoh , Akira Ohkado , Yukihiko Sohda , Masami Tada
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： G06F21/554 , G06F9/45533 , G06F21/74 , G06F2221/2127 , H04L63/1491
摘要： A system includes a detection unit configured to detect unauthorized access to one or more information processing apparatuses that are virtually implemented by virtual machines executed by a computer; an authorized network configured to transfer authorized access to the one or more information processing apparatuses from an external network; a honeypot network configured to transfer unauthorized access to the information processing apparatuses from the external network; and a control unit configured to connect the information processing apparatuses for which no unauthorized access has been detected to the authorized network, and connect the information processing apparatuses for which unauthorized access has been detected to the honeypot network; wherein the control unit shifts, in response to detecting unauthorized access by the detection unit, the corresponding information processing apparatus into a decoy mode in which the detected unauthorized access is disconnected from a normal operation.

9. 发明申请

US20120072318A1 Mechanisms for Executing a Process in a Cloud Computing Environment 有权
标题翻译：在云计算环境中执行流程的机制
公开(公告)号：US20120072318A1
公开(公告)日：2012-03-22
申请号：US13322529
申请日：2010-05-12
申请人： Kazuhito Akiyama , Kazuo Iwano , Akira Ohkado , Tadashi Tsumura
发明人： Kazuhito Akiyama , Kazuo Iwano , Akira Ohkado , Tadashi Tsumura
IPC分类号： G06Q40/00 , G06F15/16
CPC分类号： G06Q40/12 , H04L29/06 , H04L29/08144 , H04L41/0213
摘要： Deterioration of service quality due to shortage of resources and/or increased cost of support due to excessive resources is minimized in the case where the amount of requested services may change in cloud computing. Provided are mechanisms for executing a process specified by a user in a cloud computing environment and charging the user for the process. The mechanisms include a receiving part for receiving an instruction to execute the specified process and a determining part for determining an external resource to provision from a first other computer system for a charge. The mechanisms further comprise an external resource securing part for securing the external resource on the first other computer system and an executing part for causing the external resource to execute at least a part of the specified process.
摘要翻译：在云计算中所请求的服务量可能发生变化的情况下，由于资源短缺和/或由于资源过多而造成的支持成本增加导致的服务质量恶化最小化。提供了一种用于在云计算环境中执行由用户指定的过程的机制，并为用户对该过程进行计费。这些机构包括用于接收执行指定处理的指令的接收部分和用于确定从第一其他计算机系统提供费用的外部资源的确定部分。所述机构还包括用于将所述外部资源固定在所述第一其他计算机系统上的外部资源保护部分和用于使所述外部资源执行所述指定处理的至少一部分的执行部分。

10. 发明授权

US10621551B2 Managing asset associated with work order security policy 有权
公开(公告)号：US10621551B2
公开(公告)日：2020-04-14
申请号：US13565002
申请日：2012-08-02
申请人： Yasutaka Nishimura , Takashi Ogura , Akira Ohkado , Tadashi Tsumura
发明人： Yasutaka Nishimura , Takashi Ogura , Akira Ohkado , Tadashi Tsumura
IPC分类号： G06Q10/00 , G06Q10/10 , G06Q10/06 , G07C9/00
CPC分类号： G06Q10/103 , G06Q10/06 , G07C9/00031 , G07C9/00134
摘要： A method, system and computer program of managing an access right to at least one asset associated with at least one digital work order, or to at least one element associated with the asset, and provides a system and a computer program for the same. The method includes the steps of: loading a security policy associated with the work order, the asset, or the element; starting to monitor location information of the asset or the element and a moving object, or a elapsed time of the moving object at the location; and issuing an event for managing the asset, the element or the moving object in response to the start of the work order or in response to the fact that the loaded security policy is violated by any of the locations, a change in the location, or the elapsed time at the location obtained by the monitoring.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式