Abstract: According to an embodiment, an information processing apparatus issues an access token in response to a token issuance request from a client. The information processing apparatus includes one or more processors configured to: receive the token issuance request from the client, the token issuance request including a nonce issued to the client, a first public key generated by the client, and a first signature for client information including the nonce; transmit, to the client, a login request including first identification information of the token issuance request, when the first signature of the token issuance request is successfully verified, using the first public key; and generate and issue a sender constrained token with the first public key as the access token, upon receipt of an authorization permission request from the client, the authorization permission request including the first identification information and authentication information of a user who uses the client.

Abstract: According to an embodiment, a server apparatus includes a first reception unit, a second reception unit, a classification unit, a second criterion selection unit, a group determination unit, and an individual determination unit. The second criterion selection unit selects, for each group and as a second criterion, a first criterion that is most likely to satisfy from among first criteria that are associated with pieces of identification information of first client apparatuses included in the group. The group determination unit determines whether first acquired data satisfies a second criterion for the group including a first client apparatus that has transmitted the first acquired data.

Abstract: According to one embodiment, an information management device includes a Bloom filter generator configured to generate a Bloom filter based on information on a revoked certificate; a data distributor configured to send the Bloom filter to an authentication device, the authentication device authenticates a device with a certificate provided by the device; and an examiner configured to determine, when an examination request is received from the authentication device, whether an certificate designated by the examination request has been revoked based on revocation management information that contains information on the revoked certificate, and to send an examination result indicating whether the designated certificate has been revoked to the authentication device.

Abstract: An embodiment of the present invention provides a new scheme for issuing a server certificate to a Web server on a private network. A certificate issuing apparatus as one embodiment of the present invention includes a first communicator, a detector, a second communicator, and an electronic signer. The first communicator communicates with a first communication device regarding issuance of a certificate. The detector detects a verification apparatus possessing a second key identical with or corresponding to a first key possessed by the first communication device. The second communicator instructs the detected verification apparatus to verify whether the first communication device is authentic. When the authenticity of the first communication device is proved by the verification which uses the second key, the electronic signer generates the certificate for the first communication device by electronically signing a certificate signing request from the first communication device by using a third key.

Abstract: According to one embodiment, a network control apparatus is connected to a first relay server connected to devices, and a second relay server. The apparatus receives a stop request to stop of the first relay server, acquires identifier information of the devices, determines the second relay server as a new connecting destination corresponding to each of the devices, which is identified by the identifier information, based on the stop request, generates authentication information for each of the devices to connect the devices and the second relay server, and controls migration by transmitting a migration instruction for connection of the one or more devices to the second relay server and the authentication information to each of the devices.

Abstract: According to an embodiment, an information processing apparatus issues an access token in response to a token issuance request from a client. The information processing apparatus includes one or more processors configured to: receive the token issuance request from the client, the token issuance request including a nonce issued to the client, first public key generated by the client, and a first signature for client information including the nonce; transmit, to the client, a login request including first identification information of the token issuance request, when the first signature of the token issuance request is successfully verified, using the first public key; and generate and issue a sender constrained token with the first public key as the access token, upon receipt of an authorization permission request from the client, the authorization permission request including the first identification information and authentication information of a user who uses the client.

Abstract: According to one embodiment, a communication device includes a first communicator capable of communicating with a server through a first network; a second communicator capable of communicating with an operation terminal of a user through a second network; a first communication processor to execute a first process; a second communication processor to receive, through the second communicator, an issue request, use identification information of the first communication processor, a first key, and a second key paired with the first key to issue a certificate signed by the second key including the identification information of the first communication processor and the first key, sign data to be signed by using a third key to generate signed data, and transmit the signed data and the certificate through the second communicator; and an authorizing processor to acquire permission information indicating permission by the user to issue the certificate.

Abstract: According to one embodiment, a communication device includes: processing circuitry configured to: generate a first code in response to a first code generation request being received, the first code generation request including address information of a service provided for a control device by a device, and transmit the first code to the device; manage such that the first code is held in association with the address information; and receive an address acquisition request including the first code from the control device, and transmit the address information associated with the first code to the control device on condition that the first code included in the address acquisition request is held.

Abstract: According to one embodiment, a communication device includes: processing circuitry configured to: generate a first code in response to a first code generation request being received, the first code generation request including address information of a service which is provided by a device to a control device, and transmit the first code to the device; manage such that the first code is held in association with the address information; and receive an address acquisition request including the first code from the control device, and transmit the address information associated with the first code to the control device on condition that the first code included in the address acquisition request is held in association with the address information.

Abstract: According to one embodiment, a connection control device includes a request acceptor to accept a connection destination determination request transmitted from a first communication device; and a determiner to determine a server being a connection destination of the first communication device from among a plurality of servers. At least one first server among the servers is scheduled to stop running at a first time point. The determiner determines the connection destination of the first communication device in accordance with a number of communication devices connected to each of the servers, based on history information on connection durations by the first communication device with the servers or history information on connection durations by communication devices with the first server, so that a number of the communication devices connected to the first server before the first time point arrives is suppressed.

Abstract: According to one embodiment, a communication device capable of communicating with each of a control device and a processing device through a network includes processing circuitry. The processing circuitry creates a job upon receiving a first request from the control device, the first request designating a content of a process that is executed by the processing device, the job containing information to instruct the processing device to execute the process and a first time limit relevant to the process. The processing circuitry controls transition among a plurality of states of the job. The processing circuitry controls, upon receiving a second request for the job from the processing device or the control device, execution of the second request, based on the first time limit and the state of the job.

Abstract: According to one embodiment, an information management device includes a Bloom filter generator configured to generate a Bloom filter based on information on a revoked certificate; a data distributor configured to send the Bloom filter to an authentication device, the authentication device authenticates a device with a certificate provided by the device; and an examiner configured to determine, when an examination request is received from the authentication device, whether an certificate designated by the examination request has been revoked based on revocation management information that contains information on the revoked certificate, and to send an examination result indicating whether the designated certificate has been revoked to the authentication device.

Abstract: A communication device according to an embodiment performs communications with one or more devices via a relay server. To switch a connection destination from a first relay server serving as an origin to a second relay server serving as a destination, the communication device establishes a connection with the second relay server, switches a transmission destination of a message from the first relay server to the second relay server, and cuts a connection with the first relay server.

Abstract: A communication device includes a computer including a processor. The computer controls the communication device to perform operations. The operations include establishing a first connection with a first external device and establishing a second connection with a second external device, via a communication network. The operations include transmitting a keep-alive packet to the first external device via the first connection at a first transmission cycle and receiving a response packet for the keep-alive packet.

Abstract: An information processing device according to an embodiment includes a memory and one or more processors configured to function as a registration unit. The registration unit registers first information related to a statistical value of time series data in a second storage unit that is a volatile storage device or in a third storage unit that is a nonvolatile storage device in accordance with a registration frequency of the time series data in a first storage unit.

Abstract: According to an embodiment, a communication device performs communication with a terminal device via a network and includes first and second connection maintaining units and a switch instructing unit. The first connection maintaining unit maintains a connection established with the terminal device and mediates communication between the terminal device and another terminal device. The second connection maintaining unit maintains a communicable state of the terminal device with the communication device according to a method different from a method implemented by the first connection maintaining unit. When a predetermined switching condition is satisfied, the switch instructing unit instructs the terminal device to switch a method for maintaining a communicable state either from a first method, which is a method implemented by the first connection maintaining unit, to a second method, which is a method implemented by the second connection maintaining unit, or from the second method to the first method.

Abstract: According to one embodiment, a connection control device includes a request acceptor to accept a connection destination determination request transmitted from a first communication device; and a determiner to determine a server being a connection destination of the first communication device from among a plurality of servers. At least one first server among the servers is scheduled to stop running at a first time point. The determiner determines the connection destination of the first communication device in accordance with a number of communication devices connected to each of the servers, based on history information on connection durations by the first communication device with the servers or history information on connection durations by communication devices with the first server, so that a number of the communication devices connected to the first server before the first time point arrives is suppressed.

Abstract: According to one embodiment, a connection control device includes a request acceptor to accept a connection destination determination request transmitted from a first communication device; and a determiner to determine a server being a connection destination of the first communication device from among a plurality of servers. At least one first server among the servers is scheduled to stop running at a first time point. The determiner determines the connection destination of the first communication device in accordance with a number of communication devices connected to each of the servers, based on history information on connection durations by the first communication device with the servers or history information on connection durations by communication devices with the first server, so that a number of the communication devices connected to the first server before the first time point arrives is suppressed.

Abstract: According to one embodiment, a communication device includes: a communicator, a first circuitry and a second circuitry. The communicator establishes a communication connection with a destination communication device over a communication network and to communicate a packet relating to first information using the communication connection. The first circuitry determines a transmission interval of a packet relating to second information that is different from the first information, based on characteristic information on the communication network. The second circuitry performs control to transmit the packet relating to the second information to the destination communication device using the communication connection in accordance with the transmission interval determined by the first circuitry during at least a time period when the communication connection is established and communication of the packet relating to the first information is not performed.

Abstract: According to one embodiment, a communication device includes: processing circuitry configured to: generate a first code in response to a first code generation request being received, the first code generation request including address information of a service which is provided by a device to a control device, and transmit the first code to the device; manage such that the first code is held in association with the address information; and receive an address acquisition request including the first code from the control device, and transmit the address information associated with the first code to the control device on condition that the first code included in the address acquisition request is held in association with the address information.