Abstract: A frame loss measurement device including a receiving unit which receives a measurement frame for measuring a communication path, a measurement unit which, based on the measurement frame received, measures performance of the communication path where the measurement frame is transmitted, and an allocation unit which secures resources of the frame loss measurement device to allocate to the measurement frame to be received.

Abstract: A bandwidth guaranteeing apparatus includes a controller that collects guaranteed communication rate for a plurality of devices on an OVC between a user-side apparatus and the bandwidth guaranteeing apparatus; and a determiner that obtains the smallest value of the guaranteed communication rate collected by the controller and upon a bandwidth change request that is for the OVC and from the user-side apparatus, determines whether the bandwidth change request can be accepted, based on the obtained guaranteed communication rate.

Abstract: A frame loss measurement device including a receiving unit which receives a measurement frame for measuring a communication path, a measurement unit which, based on the measurement frame received, measures performance of the communication path where the measurement frame is transmitted, and an allocation unit which secures resources of the frame loss measurement device to allocate to the measurement frame to be received.

Abstract: A problem is to provide a connection support apparatus and a gateway apparatus in which management of information is easy and remote access from a user terminal to the gateway apparatus can be performed easily and securely, and the problem is solved by including a control unit configured to perform control on a gateway apparatus to which a user apparatus connects so as to permit connection from the user apparatus for which authentication succeeds; and a communication unit configured to provide the user terminal with connection information used for connecting to the gateway apparatus.

Abstract: A bandwidth guaranteeing apparatus includes a controller that collects guaranteed communication rate for a plurality of devices on an OVC between a user-side apparatus and the bandwidth guaranteeing apparatus; and a determiner that obtains the smallest value of the guaranteed communication rate collected by the controller and upon a bandwidth change request that is for the OVC and from the user-side apparatus, determines whether the bandwidth change request can be accepted, based on the obtained guaranteed communication rate.

Abstract: Provided is a connection supporting apparatus for supporting to establish a VPN through an IKE between a client and a gateway, comprising, a mode judging unit receiving authentication information of the client employed in the IKE, and judging whether or not a key exchange mode of the client is a main mode based upon the authentication information, a VPN setting request transmitting unit transmitting a VPN setting request to the gateway when the key exchange mode of the client is the main mode, the VPN setting request containing a client IP address as an authentication ID and information as to a communication key to be used when the client executes the IKE; and a notifying unit notifying both the communication key and the IP address to the client when the notifying unit receives a response with respect to the VPN setting request from the gateway.

Abstract: A frame counter correction apparatus connected to an Ethernet network, including transmission counter for counting a number of frames to be transmitted; inspection frame generator for generating an inspection frame for measuring a frame loss; and transmission counter correction unit for calculating a difference between a counter value of the transmission counter at a time of generation of the inspection frame and the counter value of the transmission counter at a time of transmission of the inspection frame, and adding a calculated difference value and information for specifying the inspection frame as a correction target to another inspection frame.

Abstract: A communication device collects encrypted packet data passing through the communication device. The communication device extracts parameters required to generate a decryption key used when the collected packet data is decrypted. The communication device notifies a key managing device of the extracted parameters. The communication device acquires the decryption key, generated by the key managing device using the parameters of which notification has been given, from the key managing device. The communication device decrypts the collected packet data using the acquired decryption key and analyzes the decrypted packet data. The communication device extracts profile information from the analyzed packet data. The communication device transmits the extracted profile information and network information related to a network through which the encrypted packet data passes to a communication log device as a communication log.

Abstract: A connection assistance apparatus avoids unauthorized access and DoS attacks, prevents a performance degradation from occurring, and does not need to recognize different connections to gateway apparatus. An authenticating unit authenticates the validity of a terminal by checking if the terminal is a valid terminal capable of communicating with a gateway apparatus according to IPSec in response to a request from a user who owns the terminal. If it is judged that the terminal is a valid terminal, then a preshared key generating unit generates a preshared key for the terminal and the gateway apparatus, and a firewall opening instruction information generating unit generates firewall opening instruction information to open a firewall of the gateway apparatus. A transmitting unit sends the preshared key to the terminal and the gateway apparatus and sends the firewall opening instruction information to the gateway apparatus.

Abstract: A service communication control system includes a user terminal connected to a user network. The service communication control system also includes communication gateway, a management server, and an application server connected to a communication carrier network. The communication using a communication protocol dedicated for the application service is performed between the user terminal and the application server through the communication gateway as a substitute. Thus, the user terminal need not be aware of the protocol.

Abstract: The present invention discloses a load decentralization method for decentralizing load centralized to a MAP of a hierarchical domain in a network where packets destined to mobile nodes in the network are transmitted to the mobile nodes via the MAP, in which the MAP includes a table part for managing a corresponding relation of home addresses and Care-of-Addresses of the mobile nodes in the hierarchical domain. The method includes the steps of providing a same function as the MAP to at least a portion of routers situated in the hierarchical domain of the MAP, moving one of the elements in the table part to the portion of the routers when a congestion of the MAP is detected, and actuating the portion of the routers to operate as a substitute of the MAP.

Abstract: In a system including a first unit retaining a first identifier and a second unit retaining a second identifier for reading out the first identifier from the first unit to transmit, as cooperation information, a combination of the first identifier and the second identifier, for managing the cooperation information, a cooperation information managing apparatus receives the cooperation information and registers the second identifier included in the cooperation information and a group of a plurality of first identifiers including the first identifier included in the cooperation information in a state associated with each other. For managing objects to be used by a user, this enables managing the objects as an aggregation without handling the objects individually, thereby realizing efficient management from a user's point of view.

Abstract: A frame counter correction apparatus connected to an Ethernet network, including transmission counter for counting a number of frames to be transmitted; inspection frame generator for generating an inspection frame for measuring a frame loss; and transmission counter correction unit for calculating a difference between a counter value of the transmission counter at a time of generation of the inspection frame and the counter value of the transmission counter at a time of transmission of the inspection frame, and adding a calculated difference value and information for specifying the inspection frame as a correction target to another inspection frame.

Abstract: A communication device collects encrypted packet data passing through the communication device. The communication device extracts parameters required to generate a decryption key used when the collected packet data is decrypted. The communication device notifies a key managing device of the extracted parameters. The communication device acquires the decryption key, generated by the key managing device using the parameters of which notification has been given, from the key managing device. The communication device decrypts the collected packet data using the acquired decryption key and analyzes the decrypted packet data. The communication device extracts profile information from the analyzed packet data. The communication device transmits the extracted profile information and network information related to a network through which the encrypted packet data passes to a communication log device as a communication log.

Abstract: In a home agent for designating a transmission period of a binding update packet transmitted from a mobile node, a central processing monitor detects a usage rate of a CPU for processing accompanied by a reception of a binding update packet from the mobile node or a binding renewal message among the binding update packets, a line usage rate monitor detects a line usage rate of a receiving interface accompanied by the processing or a transmitting interface, a BC number monitor detects a binding cache number, and a calculator calculates a transmission period of the binding renewal message of the mobile node based on the thus detected CPU usage rate, line usage rate, binding cache number, and a priority table of the mobile node.

Abstract: Provided is a connection supporting apparatus for supporting to establish a VPN through an IKE between a client and a gateway, comprising, a mode judging unit receiving authentication information of the client employed in the IKE, and judging whether or not a key exchange mode of the client is a main mode based upon the authentication information, a VPN setting request transmitting unit transmitting a VPN setting request to the gateway when the key exchange mode of the client is the main mode, the VPN setting request containing a client IP address as an authentication ID and information as to a communication key to be used when the client executes the IKE; and a notifying unit notifying both the communication key and the IP address to the client when the notifying unit receives a response with respect to the VPN setting request from the gateway.

Abstract: A service communication control system includes a user terminal connected to a user network. The service communication control system also includes communication gateway, a management server, and an application server connected to a communication carrier network. The communication using a communication protocol dedicated for the application service is performed between the user terminal and the application server through the communication gateway as a substitute. Thus, the user terminal need not be aware of the protocol.

Abstract: A network service system of the present invention comprises a temporary user identifier update request transmitting side device which provides a first service to a user and can transmit a request to update a temporary user identifier shared within a system; a temporary user identifier update request receiving side device which is connected to the temporary user identifier update request transmitting side device by a network and can receive the update request from the temporary user identifier update request transmitting side device, for providing the second service cooperating with the first service using the updated temporary user identifier; and a user proxy device which is connected to the temporary user identifier update request transmitting side device and the temporary identifier update request receiving side device by the network, and with which the user receives the two services.

Abstract: A problem is to provide a connection support apparatus and a gateway apparatus in which management of information is easy and remote access from a user terminal to the gateway apparatus can be performed easily and securely, and the problem is solved by including a control unit configured to perform control on a gateway apparatus to which a user apparatus connects so as to permit connection from the user apparatus for which authentication succeeds; and a communication unit configured to provide the user terminal with connection information used for connecting to the gateway apparatus.

Abstract: A terminal on the first network, a gateway device connected between the first and second networks, and a network device on the second network enable the terminal to independently and seamlessly use a plurality of network devices and to seamlessly use a network device on the first network and the network device on the second network. The network device indirectly or directly provides the terminal and the gateway device with terminal behavior information and proxy processing behavior information in which a behavior required to use the device itself is described, or provides the gateway device with gateway functional module information including the terminal behavior information and the proxy processing behavior information.