Abstract: A control device that controls a transfer device, includes a memory and a processor coupled to the memory and configured to evaluate, for each of a plurality of processing rules to be used to process a packet in the transfer device, a processing load caused upon identification of a packet matching the processing rule, based on the type of an application requirement identifying the packet to which the processing rule is applied, generate, as a table to be used by the transfer device, a rule table storing the plurality of processing rules in order from the lowest processing load to the highest processing load, and transmit, to the transfer device, a control packet to request the transfer device to set the rule table.

Abstract: A relay device includes a communicator configured to transmit and receive a message to and from the communication device, and a processor configures to acquire a public key of a communication device that is a transmission source of the message from the node and authenticates a signature included in the message with the acquired public key, wherein the processor causes, when receiving a communication message including communication data to be transmitted to a second communication device by a first communication device, the processor to perform authentication on the communication message, and the communicator transmits the communication message to the second communication device when the authentication is successful.

Abstract: A communication apparatus configured to acquire information in a distributed ledger shared in a network, the communication apparatus includes a memory; and a processor coupled to the memory and configured to acquire one or more digital certificates used by a user of another apparatus to apply to the communication apparatus from the other apparatus, acquire type information that identifies a combination of the user and the type of information certified by the one or more digital certificates, by using the distributed ledger, acquire certificate issue history that is recorded in the distributed ledger in association with the type information, and determine whether the issue history contains information of another digital certificate that has not been acquired from the other apparatus.

Abstract: A communication device includes circuitry configured to acquire a digital certificate including information associated with a first attribute from a first device coupled to any of a plurality of devices sharing a distributed ledger having recorded therein a correspondence between an attribute of user information included in the digital certificate and a definition of the attribute, receive a request for information associated with a second attribute from a second device coupled to any of the plurality of devices, acquire a first definition associated with the first attribute, and a second definition associated with the second attribute, from any of the plurality of devices, and transmit a digital certificate including information associated with the first attribute to the second device together with a message notifying that the first attribute and the second attribute have the same definition, when the first definition and the second definition match.

Abstract: A non-transitory computer-readable recording medium stores therein a communication program for causing a communication apparatus which participates in a data distribution network to execute a process including: generating history information of transactions by analyzing a distributed ledger that is shared among apparatuses which participate in the data distribution network, and that records information of the transactions having been performed through the data distribution network; calculating credit-worthiness of each of users who has performed transactions through the data distribution network, by using the history information; and transmitting the calculated credit-worthiness, in response to a request from a terminal configured to perform transactions via the communication apparatus, to the terminal.

Abstract: A communication method is used in a communication system that includes a plurality of nodes. Two or more authentication nodes among the plurality of nodes respectively receive account information of a user and a public key of the user from the user. The two or more authentication nodes respectively transmit a massage that indicates the account information is correct and the public key of the user to the plurality of nodes when it is decided that the account information is correct. Each of the plurality of nodes registers the public key of the user in a public key list that stores public keys of users who have been allowed to participate in the communication system, when detecting according to messages received from other nodes that a specified number of authentication nodes or more have decided that the account information is correct.

Abstract: A communication device provides data to a data acquiring node based on a consensus of a plurality of participating nodes. The communication device includes a processor. The processor divides the data into N data components. N is an integer equal to or larger than two. When the N data components are stored in different storage areas, the processor encrypts addresses of storage areas in which the data components are respectively stored with respective public keys of N participating nodes among the plurality of participating nodes. The processor transmits access right information that indicates the data acquiring node has a right to access the data and the encrypted N addresses to the plurality of participating nodes.

Abstract: A control device that controls a transfer device, includes a memory and a processor coupled to the memory and configured to evaluate, for each of a plurality of processing rules to be used to process a packet in the transfer device, a processing load caused upon identification of a packet matching the processing rule, based on the type of an application requirement identifying the packet to which the processing rule is applied, generate, as a table to be used by the transfer device, a rule table storing the plurality of processing rules in order from the lowest processing load to the highest processing load, and transmit, to the transfer device, a control packet to request the transfer device to set the rule table.

Abstract: A communication device including a memory, and a processor coupled to the memory and the processor configured to determine a transmission order such that at least one of a maximum value of a common key generation time from among two or more communication devices and a number of times of key generation processing by the two or more communication devices becomes a minimum value, instruct another communication device from among the two or more communication devices to transmit a partial key in accordance with the transmission order determined, and transmit a partial key generated, in accordance with the determined transmission order.

Abstract: A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

Abstract: A workload estimation method estimates a workload of a network function that processes a received flow based on a rule searched for from among a plurality of rules. The method that is executed by a processor includes: obtaining information that indicates maximum throughputs of the network function respectively for the rules; measuring traffic volumes of flows that respectively match the rules; calculating ratios of the measured traffic volumes to the maximum throughputs respectively for the rules; and estimating a workload of the network function based on a sum of the ratios calculated respectively for the rules.

Abstract: A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

Abstract: A method using a communication system including a first information processing device, a first communication device, a second information processing device, a second communication device, and a control device controlling the first communication device and the second communication device, the method includes transmitting, from the first information processing device, a first packet which belongs to a first flow, a destination node of the first packet being the second information processing device, receiving, by the second communication device, the first packet, and discarding the first packet, identifying the first information processing device which is a transmission source node of the first packet, transmitting a second packet of which a destination node is the first information processing device, receiving, by the first communication device, the second packet, setting the first rule to the first communication device.

Abstract: A transmission apparatus includes a digital circuit that has an input circuit into which packets are input at indefinite intervals; a measuring circuit that measures an interval during which no packet is input into the input circuit; a determiner circuit that determines, based on the interval measured by the measuring circuit, whether to insert a given frame between packets input into the input circuit; and a transmitter that inserts, based on a result of determination by the determiner circuit, the given frame between the packets input into the input circuit and sequentially transmits the packets with the given frame therebetween.

Abstract: An MC-ONU is an ONU installed at a subscriber's home. The MC-ONU includes: a receiving unit which receives signals transmitted from an OLT at a telecommunications carrier site which has not established a link; a determining unit which determines the OLT, which has not established a link, to be a remote-end device in point-to-point communication on the condition that the signal received for a predetermined period of time is idle signal only; and a transmitting unit which starts transmitting signals to the OLT from the subscriber's home on the condition that it has been determined by the determining unit that the OLT is the remote-end device in point-to-point communication.

Abstract: A transmission apparatus includes a digital circuit that has an input circuit into which packets are input at indefinite intervals; a measuring circuit that measures an interval during which no packet is input into the input circuit; a determiner circuit that determines, based on the interval measured by the measuring circuit, whether to insert a given frame between packets input into the input circuit; and a transmitter that inserts, based on a result of determination by the determiner circuit, the given frame between the packets input into the input circuit and sequentially transmits the packets with the given frame therebetween.

Abstract: A management computer (21) is placed in a home country, and an instructor terminal (31) and a driver terminal (32) are placed in a delivery area overseas. The management computer (21) generates screen information, displayed in a domestic language and including a delivery instruction for a package, and transmits the screen information toward the instructor terminal (31) and the driver terminal (32). The instructor terminal (31) or the like, specifies a language, to be used in an area to which a delivery destination belongs, from the address of the delivery destination included in the delivery instruction in the received screen information, and translates the screen information in the specified language, then displays it. When a display language is designated, the instructor terminal (31) or the like translates the screen information in the designated language and displays it.

Abstract: An MC-ONU is an ONU installed at a subscriber's home. The MC-ONU includes: a receiving unit which receives signals transmitted from an OLT at a telecommunications carrier site which has not established a link; a determining unit which determines the OLT, which has not established a link, to be a remote-end device in point-to-point communication on the condition that the signal received for a predetermined period of time is idle signal only; and a transmitting unit which starts transmitting signals to the OLT from the subscriber's home on the condition that it has been determined by the determining unit that the OLT is the remote-end device in point-to-point communication.

Abstract: A management computer (21) is placed in a home country, and an instructor terminal (31) and a driver terminal (32) are placed in a delivery area overseas. The management computer (21) generates screen information, displayed in a domestic language and including a delivery instruction for a package, and transmits the screen information toward the instructor terminal (31) and the driver terminal (32). The instructor terminal (31) or the like, specifies a language, to be used in an area to which a delivery destination belongs, from the address of the delivery destination included in the delivery instruction in the received screen information, and translates the screen information in the specified language, then displays it. When a display language is designated, the instructor terminal (31) or the like translates the screen information in the designated language and displays it.