Abstract: An information management system to simplify the calculation of risk values and information asset risk management, based on both information on asset values and access to information. The information management system is composed of a storage device to store information containing asset values, a file access information report section for monitoring access to information stored in that storage device, a file attribute information management section to manage information on file attributes stored in that storage device, a risk value processor to calculate risk values of the applicable information based on attribute information managed by said file attribute information management section and based on monitoring results from the file access information report section, and a corrective action initiator to take measures to correct leaks of applicable information based on results calculated by the risk value processor.

Abstract: A translator includes a unit for communication with a DNS-ALG. The DNS-ALG detects a DNS query to a destination terminal, and performs once translation to IPv6. The DNS-ALG translates a destination temporary IPv6 address, in which a real address of IPv4 acquired from a DNS server of the destination terminal is added with a virtual IPv6 prefix, to a destination temporary IPv4. The IPv6-based DNS-ALG cooperates with the translator to permit alleviation of processing load on the DNS-ALG and reduction in capacity of a translation table of large capacity. A technique is disclosed which, with the above construction, can permit mutual connection among a plurality of VPN's without exchanging the existing VPN's.

Abstract: A translator includes a unit for communication with a DNS-ALG. The DNS-ALG detects a DNS query to a destination terminal, and performs once translation to IPv6. The DNS-ALG translates a destination temporary IPv6 address, in which a real address of IPv4 acquired from a DNS server of the destination terminal is added with a virtual IPv6 prefix, to a destination temporary IPv4. The IPv6-based DNS-ALG cooperates with the translator to permit alleviation of processing load on the DNS-ALG and reduction in capacity of a translation table of large capacity. A technique is disclosed which, with the above construction, can permit mutual connection among a plurality of VPN's without exchanging the existing VPN's.

Abstract: A data communication method for forwarding a session control message designating a destination server with an IP address to the destination server via a session management server, wherein, when an application program or encrypted communication software on a client issues a connection request designating a destination server with an IP address, the client or the session management server automatically converts the IP address into a desired resource identifier identifiable a domain, thereby to determine the domain to which the received connection request message should be forwarded.

Abstract: A system for preventing spoofing to use a service provided on a network. The system holds correlation between a first identifier used by a user of a service provided on a network for first authentication for permitting a user to make connection to the network and a second identifier used for second authentication for permitting the user to use a service, holds correlation between a third identifier assigned to the user permitted to make connection to the network and the first identifier of the user, and checks the correlation between the second identifier and the third identifier contained in the packet for the second authentication.

Abstract: An information management system to simplify the calculation of risk values and information asset risk management, based on both information on asset values and access to information. The information management system is composed of a storage device to store information containing asset values, a file access information report section for monitoring access to information stored in that storage device, a file attribute information management section to manage information on file attributes stored in that storage device, a risk value processor to calculate risk values of the applicable information based on attribute information managed by said file attribute information management section and based on monitoring results from the file access information report section, and a corrective action initiator to take measures to correct leaks of applicable information based on results calculated by the risk value processor.

Abstract: Disclosed is a packet-switched communication apparatus (DNS proxy server) receiving and forwarding messages which are used to obtain an address corresponding to a domain name assigned to a device connected to a network from the domain name and to obtain such a domain name from the address. The communication apparatus comprises mapping retaining means for retaining mappings between network-dependent parts of addresses which are used in a first network and address translators; address translator selecting means for selecting an address translators, based on an address included in a received packet; address obtaining means for obtaining a substitutive address to replace the address included in the received packet from the selected address translator; and address replacement means for replacing the address included in the received packet by using the obtained substitutive address.

Abstract: Due to the mobility of mobile node devices including for example a laptop computer used on a work network and also on a home network with different home addresses, a mobile node (MN) home address and HA (home agent) address may need to be dynamically changed when using prefix communication functions and HA address discovery functions so methods for manually setting the IPsec SA security for encryption between the MN and HA are not practical in this environment. The current Mobile IPv6 protocol also has no function allowing recognition of the MN itself.

Abstract: Disclosed is a communication method allowing MN (mobile nodes) to acquire a home address in a visited network. A communication system comprises a home network installed with a home agent for holding mobile terminal location information and, a visited network installed with a radio communications device for communicating with that mobile terminal, and gateway equipment in the visited network for forming an interface with the home network. The radio communication device contains an access request transfer means for forwarding access requests from a mobile terminal of the visited network to the gateway equipment, and the gateway equipment makes an acquisition request to the home agent for an identifier of that mobile terminal, and forwards that acquired identifier to that mobile terminal.

Abstract: There is provided an address translator having the functions to prevent, in the communications via the address translation, transmission of packets having no correct destination and transmission source addresses which will cause troubles in the networks and to urge an administrator take adequate measures for reception of the relevant packets. This address translator stores discriminator to discriminate temporary addresses. Moreover, when the original address is registered as the temporary address at the time of assignment of the temporary address of the receiving side host started when the name solution is performed, assignment is rejected to prevent transmission of packet from the transmitting side host by returning a response for name solution error to the transmitting side host. In addition, when transmission source address before translation and destination address after translation are registered as the temporary address, the received packet is discarded.

Abstract: A translator includes a unit for communication with a DNS-ALG. The DNS-ALG detects a DNS query to a destination terminal, and performs once translation to IPv6. The DNS-ALG translates a destination temporary IPv6 address, in which a real address of IPv4 acquired from a DNS server of the destination terminal is added with a virtual IPv6 prefix, to a destination temporary IPv4. The IPv6-based DNS-ALG cooperates with the translator to permit alleviation of processing load on the DNS-ALG and reduction in capacity of a translation table of large capacity. A technique is disclosed which, with the above construction, can permit mutual connection among a plurality of VPN's without exchanging the existing VPN's.