Abstract: A communication terminal device includes a wireless communication unit, an integrity measurement request unit, a cryptographic processing unit, a pointing unit. The integrity measurement request unit generates a command to request another computer device to measure integrity. The cryptographic processing unit performs cryptographic processing concerning communication with the another computer device. The pointing unit acquires positional information when a result of the integrity measurement satisfies a predetermined condition.

Abstract: A method of estimating QoS for making a handoff trigger decision for a remote terminal in a wireless IP network is disclosed. At least a first and second probing packet is generated with an access router from a plurality of access points. The first and second probing packets are then sent from the access routers over a fixed core network having a plurality of routers to a correspondent access router and then back to the access routers. At least one collector packet is also generated and sent to follow the first and second probing packets to gather at least one predetermined QoS parameter from the routers after the first and second probing packets have left the routers. The QoS parameters are then processed with the access routers to make the handoff trigger decision preferentially along with layer two QoS parameters of the wireless hop.

Abstract: A client apparatus for utilizing services by executing service programs includes a policy holding unit, a verification unit, a verification result holding unit, and a verification result notification unit. The policy holding unit holds a service-specific verification policy pre-checked by a device verification apparatus. The verification unit verifies an operation and configuration of the client apparatus itself by using the verification policy when the service program is executed. The verification result notification unit notifies the verification result to the device verification apparatus, which requests the verification result.

Abstract: A service providing system provides a portable terminal having a wireless communication function with a service effective only in a specific area. The service providing system includes an entrance gate installed at an entrance of the specific area. The entrance gate includes specific area service notifying unit configured to notify the portable terminal of a type of service necessary in the specific area by means of wireless communication.

Abstract: A device management apparatus includes a device configuration information holding unit, a subscriber information holding unit, a security policy holding unit, a module state holding unit, and a device diagnosis unit. The security policy holding unit holds a security policy set based on the configuration based on the configuration information or the subscriber information. The device diagnosis unit examines the security policy and the module state information to make a diagnosis of a configuration of the device.

Abstract: A client apparatus to which data or a function is provided from a server apparatus, including: a monitoring unit configured to monitor monitoring target software, and detect an abnormal state or unauthorized state of the target software; a server management unit configured to manage an address of the server apparatus that is being accessed by the client apparatus; an abnormality information creation unit configured to create abnormality information from the abnormal state or the unauthorized state, which is detected by the monitoring unit; and an abnormality information notification unit configured to issue the abnormality information to the server apparatus managed by the server management unit.

Abstract: In a telecommunication system, paging areas may be automatically reconfigured as required. Paging areas can be adaptively reconfigured in accordance with changes in movement traffic of mobile hosts. The system and method work under a constraint that only a limited number of area IDs are permitted for each paging unit area. Also, the system and method work over heterogeneous access networks. Thus, according to the presently disclosed embodiments, paging areas reconfigure themselves according to changes in movement traffic of mobile hosts.

Abstract: A multitask execution system executes a plurality of tasks in parallel. The multitask execution system includes an encryption processor configured to generate a key stream unique to each task, by using key data, a task ID for identifying each task, ad an output value, the number of the key data being smaller than the number of the plurality of tasks, the output value being output from a monotonic incremental counter when each task is generated, a value of the monotonic incremental counter configured to continue to be increased without being decreased, and to encrypt data stored in a protected area in a memory space for each task by using the generated key stream.

Abstract: A task management system in an operating system executes a plurality of tasks in parallel. The task management system includes an execution standby state changer configured to generate a verifier of a task from data stored in a task address space and to store the generated verifier in a verifier storage area, when the task is changed from an executed state to an execution standby state; and an executed state changer configured to generate a verifier of the task from the data stored in the task address space and to verify matching of the generated verifier with the verifier of the task stored in the verifier storage area, when the task is changed from the execution standby state to the executed state.

Abstract: A method and system for providing a handoff trigger in a wireless communication system. A mobile handoff prediction is generated with a mobile node. At least one handoff prediction is generated with at least one access network within radio range of the mobile node. The mobile handoff prediction and the at least one network handoff prediction are transmitted to a network control server. A handoff is initiated if the mobile handoff prediction and a respective one of the at least one handoff predictions match.

Abstract: Disclosed is an original contents creation apparatus realizing a protection of original contents and derived contents in a derived contents distribution by any number of secondary providers. An original contents creation apparatus includes a limitation rule acquisition unit for acquiring a limitation rule of a case of inserting additional secondary contents into original contents, and a joining/signature unit for joining the limitation rule and a first operation rule to the original contents, the first operation rule defining an operation of a case of having detected an insertion of secondary contents violating the limitation rule, and giving an electronic signature to the original contents to which the limitation rule and the first operation rule are joined.

Abstract: A multi signature verification system adds new additional data to original data with a signature attached thereto and verifies validity of the original data and the additional data. The system includes an electronic signature attaching apparatus including an electronic signature attaching unit attaching an electronic signature to original data previously created, acquired trapdoor hash value, and identification information, a data addition apparatus, and an electronic signature verification apparatus.

Abstract: A data storing apparatus is connected to a telecommunications apparatus to allow the telecommunications apparatus to download and install software in a reliable manner. The data storing apparatus includes a powering unit that supplies power to the telecommunications apparatus, a data communication unit connected to the telecommunications apparatus to transmit and receive data to and from the telecommunications apparatus, and a data storage that stores the data received at the data communication unit. The data stored in the data storage includes a data item downloaded by the telecommunications apparatus from an information provider via a wireless network.

Abstract: A cache handoff system for managing cacheable streaming content requested by a mobile node within a network architecture is disclosed. The network architecture includes a first subnet and a second subnet. The cache handoff system includes a first caching proxy operable in the first subnet to supply a content stream in response to a request of the mobile node operable in the first subnet. In addition, the cache handoff system includes a second caching proxy operable in the second subnet. The first caching proxy may initiate a cache handoff of the request to the second caching proxy when the mobile node relocates to the second subnet. The second caching proxy may seamlessly continue to supply the requested content stream as a function of the cache handoff.

Abstract: A data compressor of the present invention comprises: separating means for separating input data having a plurality of vertices with their respective types and values, and reference information between the vertices, into cross reference data with the reference information between the vertices, and a vertex group consisting of the plurality of vertices with the types and values, and for outputting data of the vertex group thus separated; template storing means for storing reference information between vertices having a specific pattern, as a template, wherein the template can share the reference information between the vertices, with other stored templates; template match detecting means for detecting a portion matching the template stored in the template storing means, from the cross reference data separated by the separating means; and template replacing means for replacing the match portion detected by the template match detecting means, in the cross reference data separated by the separating means, with th

Abstract: A document transformation system comprises: template storing means for storing structure information having a specific pattern, as a template; template match detecting means for importing the structure information forming the structured document, and transformation location information indicating a transformation location of the structure information, and for detecting a match portion between the structure information and the template, excepting the transformation location indicated by the transformation location information, from objects of detection, in the structure information; template replacing means for importing the structure information forming the structured document, and match information indicating the match portion, for replacing the match portion indicated by the match information, in the structure information with the template, and for outputting replaced structure information; and transforming means for importing the character string information forming the structured document, the replaced st

Abstract: The present invention provides a communication terminal, a billing apparatus, a service providing apparatus, and a program all of which operate when a service is provided via communications, to enable a billing process based on diversified billing rules to be accomplished without increasing loads on network facilities. A billing rule acquiring function 1011 of a communication terminal 100 receives a first billing rule for a communication charge required to distribute service information, from a billing server 200. The billing rule acquiring function 1011 receives, from a service providing server 300, metadata containing second billing information individually set for service information. A communication history recording section 106 records a communication history when service information is received via a communication network. A billing information generating section 110 generates billing information on provision of a service on the basis of the billing rule information and communication history.

Abstract: A structured document signature device includes an adaptation policy associator configured to associate each element forming a structured document with an adaptation policy indicating an action which can be adapted to a child element of the element or a value of the element; a hash tree constructor configured to insert a hash value of the child element of the element or a hash value of the value of the element into the structured document as an attribute value of the element, and to construct a hash tree including the hash value; a digital signature adder configured to add a digital signature to a root of the hash tree and the adaptation policy; and an output configured to output the structured document and the digital signature.

Abstract: The present invention provides a tunnel-based IP handoff process that can minimize the handoff latency associated with the standard Mobile IP registration. In the present invention, when neighboring nodes are detected, these detected nodes are identified as candidate nodes. Detection of just the existence of neighboring nodes should be possible even in situations where these neighboring nodes use different access technologies. For instance, pilot beacon signals may be taken as indication of the existence of candidate nodes although it may be impossible to compare them quantitatively if the beacon signals emanate from different access technologies. As soon as candidate nodes are identified, tunnels are established between the source node and the candidate nodes. The tunnels are used to forward data to the mobile node after a communication link between the mobile node and the source node goes down.

Abstract: A NSP network is disclosed for providing a platform service for providing data communication security in an IP-based communications network. The platform service includes connections to various private networks, a subscriber data management unit for managing information about the mobile terminals using the network, and a platform unit. The platform unit determines from the subscriber data management unit the status of the mobile terminals requesting connections to private networks and the status of the mobile terminals for which private networks target for connection. The platform unit includes applications for querying the subscriber data management unit for subscriber status, applications to command the transmission of authorization data, and applications to provide secure virtual private network communication lines for connecting the mobile terminals and the private networks.