专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明专利

JP2010004552A Unauthorized information detecting system and unauthorized attack node search system 有权
标题翻译：未经授权的信息检测系统和未经授权的攻击节点搜索系统
公开(公告)号：JP2010004552A
公开(公告)日：2010-01-07
申请号：JP2009185173
申请日：2009-08-07
申请人： Cyber Solutions Inc , 株式会社サイバー・ソリューションズ
发明人： KEENI GLENN MANSFIELD
IPC分类号： H04L12/66 , G06F13/00 , H04L12/70
摘要： PROBLEM TO BE SOLVED: To provide a system for detecting (D) DoS attack and tracing it, and specifying attack points which facilitates criterion for determining whether or not it is the (D) DoS attack. SOLUTION: The system is characterised by monitoring the number of field values existing in a packet transmitted through Internet circuit, and determining that an unauthorized attack is being implemented when the number of field values reach a prescribed number or a prescribed ratio within a certain time. COPYRIGHT: (C)2010,JPO&INPIT
摘要翻译：要解决的问题：提供一种用于检测（D）DoS攻击并进行跟踪的系统，并指定攻击点，这有助于确定是否是（D）DoS攻击的标准。解决方案：该系统的特征在于监视通过互联网电路传输的分组中存在的字段值的数量，并且当字段数量达到规定数量或规定的比率时，确定正在执行未经授权的攻击一定时间版权所有（C）2010，JPO＆INPIT

2. 发明专利

JP2008242959A Apparatus and method for managing information to be used, and program therefor 审中-公开
标题翻译：用于管理要使用的信息的装置和方法及其程序
公开(公告)号：JP2008242959A
公开(公告)日：2008-10-09
申请号：JP2007084572
申请日：2007-03-28
申请人： Cyber Solutions Inc , Nippon Telegraph & Telephone East Corp , Tohoku Univ , 国立大学法人東北大学 , 東日本電信電話株式会社 , 株式会社サイバー・ソリューションズ
发明人： SATO YOSHINOBU , OMORI TAKAO , TSUNODA YUTAKA , IZUMI YUJI , KATO YASUSHI , NEMOTO YOSHIAKI , OTA KOHEI , KEENI GLENN MANSFIELD
IPC分类号： G06F21/12 , G06Q10/00 , G06Q10/06 , G06Q50/00
摘要： PROBLEM TO BE SOLVED: To provide an apparatus for managing information to be used, which immediately changes the conditions for the use of taken-out data in real time when the data are used, and quickly specifies a person responsible for the use of the taken-out data. SOLUTION: Takeout package data are generated and transmitted to a terminal in an organization. When using information to be used stored in the takeout package data, information on conditions for use is received from an external terminal. When determined that the use of the information to be used is permitted on the basis of the information, a decryption key is transmitted to the external terminal to decrypt the information to be used. Information on use is received while the information to be used is used, and when the information does not satisfy the stored conditions for use, the use of the information is limited. A secret key for a manager managing the information to be used and a public key for a user using the information to be used are used for transmitting the doubly-encrypted decryption key to the external terminal. COPYRIGHT: (C)2009,JPO&INPIT
摘要翻译：要解决的问题：提供一种用于管理要使用的信息的装置，其在使用数据时立即实时改变使用取出数据的条件，并且快速指定负责使用的人的取出数据。
解决方案：生产包裹数据并将其传输到组织中的终端。当使用存储在取出包数据中的信息时，从外部终端接收关于使用条件的信息。当确定基于该信息允许使用要使用的信息时，将解密密钥发送到外部终端以对要使用的信息进行解密。当使用要使用的信息时，接收到使用信息，并且当信息不满足存储的使用条件时，信息的使用受到限制。用于管理要使用的信息的管理员的秘密密钥和使用要使用的信息的用户的公开密钥用于将双重加密的解密密钥发送到外部终端。版权所有（C）2009，JPO＆INPIT

3. 发明专利

JP2006115432A Unauthorized information detection system and unauthorized attack source search system 有权
标题翻译：未经授权的信息检测系统和未经授权的攻击源搜索系统
公开(公告)号：JP2006115432A
公开(公告)日：2006-04-27
申请号：JP2004307953
申请日：2004-10-22
申请人： Cyber Solutions Inc , 株式会社サイバー・ソリューションズ
发明人： KEENI GLENN MANSFIELD
IPC分类号： G06F13/00 , H04L12/66 , H04L12/70 , H04L29/06
CPC分类号： H04L63/1408 , H04L63/1458 , H04L69/22 , H04L69/28 , H04L2463/146
摘要： PROBLEM TO BE SOLVED: To provide a system for detecting and tracing a (D) Dos attack, and specifying an attack source, which simplifies the criterion to determine a (D) Dos attack. SOLUTION: The number of values of certain fields within headers of packets transmitted via an Internet line is monitored. When the number of the values of the fields has reached a predetermined number or a predetermined ratio within a predetermined time, it is decided that an unauthorized attack is present. COPYRIGHT: (C)2006,JPO&NCIPI
摘要翻译：要解决的问题：提供一种用于检测和跟踪（D）Dos攻击并指定攻击源的系统，这简化了确定（D）Dos攻击的标准。
解决方案：监视通过Internet线路传输的数据包头部中某些字段的值的数量。当字段的值的数量在预定时间内达到预定数量或预定比率时，确定存在未经授权的攻击。版权所有（C）2006，JPO＆NCIPI

4. 发明专利

JP2004282364A Packet tracing method and packet tracing program 有权
标题翻译：分组跟踪方法和分组跟踪程序
公开(公告)号：JP2004282364A
公开(公告)日：2004-10-07
申请号：JP2003070328
申请日：2003-03-14
申请人： Cyber Solutions Inc , Ntt Data Corp , 株式会社エヌ・ティ・ティ・データ , 株式会社サイバー・ソリューションズ
发明人： OTANI HISAMICHI , KEENI GLENN MANSFIELD
IPC分类号： H04L12/70 , H04L12/56
摘要： PROBLEM TO BE SOLVED: To trace a packet even in a network in which information included in each packet can be rewritten. SOLUTION: A packet printing device 400A generates PPa_1 for specifying a packet 250 which is not rewritten yet by a packet conversion device 500 for rewriting information (an IP address, a port number, etc.) included in a packet (250 (250')) flowing into a network to be monitored at the time of passage and PPb_1 for specifying a rewritten packet 250' and respectively stores the PPa_1 and the PPb_1 in 1st and 2nd PP storage parts 406A, 406B included in the packet storage device 400A. At the time of receiving a retrieval request including the PPa_1 for specifying a tracing target packet from a tracing manager 300, the packet printing device 400A retrieves the 1st PP storage part 406A or the 2nd PP storage part 406B and transmits the retrieved result to the tracing manager 300. COPYRIGHT: (C)2005,JPO&NCIPI
摘要翻译：要解决的问题：即使在可以重写每个分组中包括的信息的网络中也追踪分组。解决方案：分组打印设备400A生成用于指定分组转换设备500未被重写的分组250的用于重写分组中包括的信息（IP地址，端口号等）的分组250的PPa_1（250（ 250'））流入要通过时监视的网络，并且PPb_1用于指定重写包250'，并分别将PPa_1和PPb_1存储在包存储在包存储装置400A中的第1和第2 PP存储部分406A，406B中。在从跟踪管理器300接收包括用于指定跟踪目标分组的PPa_1的检索请求时，分组打印装置400A检索第一PP存储部分406A或第二PP存储部分406B，并将检索到的结果发送到跟踪经理300.版权所有（C）2005，JPO＆NCIPI

5. 发明专利

JP2004147222A Method, program and device for tracking multi-protocol packet 有权
公开(公告)号：JP2004147222A
公开(公告)日：2004-05-20
申请号：JP2002311751
申请日：2002-10-25
申请人： Cyber Solutions Inc , Ntt Data Corp , 株式会社エヌ・ティ・ティ・データ , 株式会社サイバー・ソリューションズ
发明人： TANOSHIMA SHINICHIRO , INOUE USHIO , HOJO TAKESHI , KEENI GLENN MANSFIELD
IPC分类号： H04L12/70 , H04L29/06 , H04L12/56
摘要： PROBLEM TO BE SOLVED: To easily perform fine communication attainment check and specification of a failed place by every communication protocol at low cost. SOLUTION: This device for tracking multi-protocol packet is provided with an investigation packet setting device 300 which sets an investigation packet 450 to be transmitted from a packet transmitter 400 to a transmitting destination device 180D by every communication protocol, the packet transmitter 400 which transmits the investigation packet 450 to the transmitting destination device 180D and a management system device 500 which transmits a retrieval request including packet specification information (a hush value) to be generated from a copy of the investigation packet 450 passed networks 100A to 100E to packet printing devices 200A to 200E which hold pieces of the packet specification information, respectively and the management system device 500 specifies a tracking route of the investigation packet 450 by every communication protocol on receiving each retrieval result corresponding to the retrieval request in each of the packet printing devices 200A to 200E. COPYRIGHT: (C)2004,JPO

6. 发明专利

JP2008206041A Service provision determination system, service providing unit and method, and program 审中-公开
标题翻译：服务提供决策系统，服务提供单位和方法以及程序
公开(公告)号：JP2008206041A
公开(公告)日：2008-09-04
申请号：JP2007042270
申请日：2007-02-22
申请人： Cyber Solutions Inc , Nippon Telegraph & Telephone East Corp , Tohoku Univ , 国立大学法人東北大学 , 東日本電信電話株式会社 , 株式会社サイバー・ソリューションズ
发明人： SATO YOSHINOBU , OMORI TAKAO , TSUNODA YUTAKA , IZUMI YUJI , KATO YASUSHI , NEMOTO YOSHIAKI , OTA KOHEI , KEENI GLENN MANSFIELD
IPC分类号： H04M3/42 , H04W88/02
摘要： PROBLEM TO BE SOLVED: To provide a service provision determination system for providing service to a unit whose position cannot be detected, only when it is determined in a specific position.
SOLUTION: A service providing unit transmits voice data, and arrival time T1 to send it from the own unit to a service use unit is computed. Sound data generated by the service use unit, is received from an absolute position detection device, which has received the sound, and the total arrival time T after transmission of the voice data until the reception of the sound, is computed. Based on the total arrival time T, the arrival time T1, and the maximum arrival time T3, arrival time T2 after the sound is generated until the position detection device receives the generated sound, is computed. When the arrival time T2 is below a predetermined threshold, transmission of the absolute position, detected by the absolute position detection device, is required. When the absolute position is received from the absolute position detection device, the service provision to the service use unit is allowed.
COPYRIGHT: (C)2008,JPO&INPIT
摘要翻译：要解决的问题：提供一种服务提供确定系统，用于仅在确定在特定位置时才向不能检测位置的单元提供服务。解决方案：服务提供单元发送语音数据，并计算到达时间T1，以将其从自身单元发送到服务使用单元。从已经接收到声音的绝对位置检测装置接收到由服务使用单元产生的声音数据，并且计算出发送语音数据直到接收到声音之前的总到达时间T. 基于总到达时间T，到达时间T1和最大到达时间T3，产生声音到位置检测装置接收到产生的声音之后的到达时间T2。当到达时间T2低于预定阈值时，需要传输由绝对位置检测装置检测到的绝对位置。当从绝对位置检测装置接收到绝对位置时，允许向服务使用单元提供服务。版权所有（C）2008，JPO＆INPIT

7. 发明专利

JP2004147223A Method for searching packet passage route, method for specifying unauthorized attacking origin and program for making computer execute the same method 有权
公开(公告)号：JP2004147223A
公开(公告)日：2004-05-20
申请号：JP2002311752
申请日：2002-10-25
申请人： Cyber Solutions Inc , Ntt Data Corp , 株式会社エヌ・ティ・ティ・データ , 株式会社サイバー・ソリューションズ
发明人： OTANI HISAMICHI , KEENI GLENN MANSFIELD
IPC分类号： H04L12/70 , H04L12/22 , H04L12/56
摘要： PROBLEM TO BE SOLVED: To enhance accuracy of packet passage search and to specify an attacking origin of unauthorized access in the case of establishing a packet passage route. SOLUTION: A TTL (time to live) value retrieved by a certain packet printing device (PP device A) is compared with a TTL value retrieved by the other packet printing device (PP device B) to which a retrieval request is transmitted on the basis of the PP device A, whether or not the TTL values are in an ascending order in retrieval order is judged, whether or not route related information to the PP device A exists in the PP device B is judged, a first piece of passage time information retrieved by the PP device A is compared with a second piece of passage time information retrieved by the PP device B, whether or not they are in a descending order in the retrieval order is judged and whether or not a target packet for tracing passes the packet printing device is judged by using at least one of judgment processing of the TTL values, judgment processing of the route related information and judgment processing of the passage time information. COPYRIGHT: (C)2004,JPO

8. 发明专利

JP2004030287A Bi-directional network intrusion detection system and bi-directional intrusion detection program 有权
公开(公告)号：JP2004030287A
公开(公告)日：2004-01-29
申请号：JP2002186299
申请日：2002-06-26
申请人： Cyber Solutions Inc , Ntt Data Corp , 株式会社エヌ・ティ・ティ・データ , 株式会社サイバー・ソリューションズ
发明人： KUWATA YOSHITAKA , OTANI HISAMICHI , HOJO TAKESHI , KEENI GLENN MANSFIELD
IPC分类号： G06F13/00 , H04L12/66
摘要： PROBLEM TO BE SOLVED: To provide a bi-directional network intrusion detection system and a bi-directional intrusion detection program capable of increasing detecting precision by comparing intrusion detection information with a response to intrusion for automatic verification.
SOLUTION: A bi-directional network intrusion detection system(NIDS) 1 monitors an inbound traffic 101 received from an external network(NW) 10, and detects any intrusion and attack. Furthermore, this system 1 monitors an outbound traffic 102 transmitted from an internal network(NW) 11, and detects a response to the detected intrusion. Then, the detected intrusion and a response to this are verified, and when it is determined that the internal network 11 or a host connected to the internal network 11 is influenced, intrusion detection information is outputted.
COPYRIGHT: (C)2004,JPO

9. 发明专利

JP2004030286A Intrusion detection system and intrusion detection program 审中-公开
公开(公告)号：JP2004030286A
公开(公告)日：2004-01-29
申请号：JP2002186298
申请日：2002-06-26
申请人： Cyber Solutions Inc , Ntt Data Corp , 株式会社エヌ・ティ・ティ・データ , 株式会社サイバー・ソリューションズ
发明人： KUWATA YOSHITAKA , OTANI HISAMICHI , YAMASHIRO RIKI , KEENI GLENN MANSFIELD
IPC分类号： G06F21/20 , G06F13/00 , G06F15/00 , H04L12/22 , H04L12/66
摘要： PROBLEM TO BE SOLVED: To provide an intrusion detection system and an intrusion detection program capable of collecting intrusion detection information generated from a plurality of intrusion detecting devices, and surely giving instruction on a preventing means by preparing a black list. SOLUTION: Intrusion detecting devices(NIDS) 10-1 to 10-3 detect packet information transmitted to a monitoring internal network, and analyzes the configuring contents, and detects any illegal access, and generates intrusion detection information. An alert collecting device 20 collects the intrusion detection information, and executes totaling and scoring, and calculates attack scores. Then, a black list 30 including the instructions on a defending means is prepared based on the calculated scores, and outputted. COPYRIGHT: (C)2004,JPO

10. 发明专利

JP2003309607A Anti-profiling apparatus and its program 有权
标题翻译：反概况设备及其程序
公开(公告)号：JP2003309607A
公开(公告)日：2003-10-31
申请号：JP2002115340
申请日：2002-04-17
申请人： Cyber Solutions Inc , Ntt Data Corp , 株式会社エヌ・ティ・ティ・データ , 株式会社サイバー・ソリューションズ
发明人： OTANI HISAMICHI , KUWATA YOSHITAKA , TANOSHIMA SHINICHIRO , KEENI GLENN MANSFIELD
IPC分类号： H04L12/66
摘要： PROBLEM TO BE SOLVED: To provide an anti-profiling apparatus for determining validity in a reception packet, and controlling information for provision to prevent the leakage of information in collecting the information with an illegal access as a purpose, or to provide false information, and also to provide an anti- profiling program. SOLUTION: A handling method determination processing part 15 receives a packet via a packet obtaining processing part 14, and decides a reception packet processing system based on a determination rule 11. Then a black list 12 is collated with a processed packet history 13 to determine the validity of the received packet. Based on the determination result, a processing is performed by selecting one of the following four, namely, a regular response transferred from an internal network is returned via a packet reception processing part 17, a minimum information generation processing part 20 generates limited information for response, a pseudo-reply generation processing part 18 generates false information for transmission, or no response is performed. COPYRIGHT: (C)2004,JPO
摘要翻译：要解决的问题：提供一种用于确定接收分组中的有效性的防轮廓设备，以及用于防止在以非法访问为目的收集信息时泄漏信息的控制信息，或提供虚假的信息，并提供防剖图程序。解决方案：处理方法确定处理部分15经由分组获得处理部分14接收分组，并且基于确定规则11来确定接收分组处理系统。然后，将黑名单12与处理的分组历史13进行核对以确定接收到的分组的有效性。基于判定结果，通过选择以下四个之一进行处理，即经由分组接收处理部17返回从内部网络传送的常规响应，最小信息生成处理部20生成用于响应的有限信息伪应答生成处理部18生成用于发送的虚假信息，或者不执行应答。版权所有（C）2004，JPO

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式