Abstract: A storage module holds load information obtained by classifying a load on each of virtual machines into groups depending on a fluctuation characteristic. An allocation schedule creation module predicts the load on each of the virtual machines during a predetermined period based on the load information and a rule defined for each of the groups, determining, for each of the groups, an allocation amount of the physical computing resource to be allocated to at least one of the virtual machines classified into the each of the groups and a time slot for allocation based on the predicted load on each of the virtual machines, and creating a schedule including information on the allocation amount and the time slot that have been determined. A schedule execution module allocates the physical computing resource to each of the virtual machines based on the schedule.

Abstract: A storage module holds load information obtained by classifying a load on each of virtual machines into groups depending on a fluctuation characteristic. An allocation schedule creation module predicts the load on each of the virtual machines during a predetermined period based on the load information and a rule defined for each of the groups, determining, for each of the groups, an allocation amount of the physical computing resource to be allocated to at least one of the virtual machines classified into the each of the groups and a time slot for allocation based on the predicted load on each of the virtual machines, and creating a schedule including information on the allocation amount and the time slot that have been determined. A schedule execution module allocates the physical computing resource to each of the virtual machines based on the schedule.

Abstract: To reduce the processing load for processing structured data pieces in different representation forms, a path correspondence table storage area stores a path correspondence table having a correspondence between first position information for locating an item of a first structured data piece and second position information for locating the item of a second structured data piece, having a different representation form from that of the first structured data piece and corresponding to the item located by the first position information. If the first position information is specified, and a request for obtaining information relating to an item in the second structured data piece is received, a path converting section uses the path correspondence table to convert the first position information to the second position information and obtain the information relating to the item from the second structured data piece stored in a structured data storage area.

Abstract: Structured documents written in a document structure definition language may be inconsistent with a predetermined document structure definition when they are encrypted partly or electronically signed. The document structure inspection method according to the present invention applies a document structure alteration rule to a document structure definition expressing the structure of such structured documents and effects conversion to generate a second document structure definition. The second document structure definition is then checked to determine whether it is consistent with a corresponding, predetermined document structure definition. The document structure alteration rule includes, for instance, a replacement rule for replacing an element contained in a document structure definition by another element, and an addition rule for adding an element to a location after the target document structure definition element.

Abstract: A signature information processing method using a relay apparatus which executes information processing on data containing signature information which is information concerning a signature is provided in order to prevent a signature from being invalidated. A signature information extraction unit conducts extraction processing to extract signature information from the data and store the signature information in the signature information storage unit. A message processing unit executes processing on the data. Thereafter, a signature information substitution unit conducts substitution processing to substitute signature information stored in the signature information storage unit for signature information contained in data obtained after execution of the processing.

Abstract: A signature object extraction module of computer A extracts, from a message including a plurality of document elements constituting a structured document read from a storage, a signature object including document elements belonging to a particular namespace. A signature assigning module assigns an electronic signature to the signature object extracted by the extraction module. The assigning module sends the message with electronic signature to computer B. An additional information determination module of computer B receives the message from computer A to determine whether or not additional information belongs to the particular namespace. If the information does not belong to the namespace, an additional information insertion module inserts the additional information in the message. The insertion module sends the message to computer C.

Abstract: To reduce the processing load for processing structured data pieces in different representation forms, a path correspondence table storage area stores a path correspondence table having a correspondence between first position information for locating an item of a first structured data piece and second position information for locating the item of a second structured data piece, having a different representation form from that of the first structured data piece and corresponding to the item located by the first position information. If the first position information is specified, and a request for obtaining information relating to an item in the second structured data piece is received, a path converting section uses the path correspondence table to convert the first position information to the second position information and obtain the information relating to the item from the second structured data piece stored in a structured data storage area.

Abstract: A server device is provided that requests a web service to provide services, and the server device prepares templates each corresponding to an area of web services that are provided. The server device adds input areas and input item names of data, required by a web service providing device of a web service specified by a user who operates a client terminal, to a template. In addition, an input condition for each input item, which is defined as a policy by the service providing device of the web service specified by the user, is added to the template. In this way, information displayed on a data input screen, which is sent to the user's client terminal, is completed as data, such as HTML-coded data, which can be processed by a browser running on the user terminal.

Abstract: A check rule for assuring system security is generated. A communication information monitoring apparatus includes a pseudo-client, a monitoring unit, and a unification unit. The pseudo-client transmits a request message containing a trace value as a parameter to a web application and analyzes a response message returned from the web application. The monitoring unit monitors whether the trace value transmitted by the pseudo-client is used in various positions in the system. The unification unit generates a check rule according to the processing result of the pseudo-client and the monitoring unit and a check policy registered in advance. The check policy contains the parameter use purpose and the process for the check processing.

Abstract: Efficient management of security policies is achieved in a data communication system. In a second information processing apparatus, a general-purpose policy is managed that includes an individual policy that is a security policy applied to data transmitted from a first information processing apparatus to the second information processing apparatus. The second information processing apparatus generates an individual policy based on an individual policy request transmitted from the first information processing apparatus and on the general-purpose policy, transmitting the individual policy to the first information processing apparatus. The first information processing apparatus subjects data to be transmitted to a security processing in conformity with the received individual policy.

Abstract: A message given with an electronic signature is modified, for example, by adding or deleting data to or from the message, while keeping validity of the electronic signature. A conversion information insertion unit 21 of a computer B 20 receives a message given with an electronic signature from a computer A 10, and inserts conversion information into the message. Then, the conversion information insertion unit 21 sends the message added with the conversion rules to a computer C 30. A signature verification unit 31 of a computer C 30 receives the message with the inserted conversion information from the computer B 20. With respect to the received message, the signature verification unit 31 verifies whether the XML signature given by the computer A 10 is valid or not. In the case where the XML signature is valid, a conversion information application unit 32 modifies the message given with the XML signature, for example by adding or deleting data.

Abstract: Structured documents written in a document structure definition language may be inconsistent with a predetermined document structure definition when they are encrypted partly or electronically signed. The document structure inspection method according to the present invention applies a document structure alteration rule to a document structure definition expressing the structure of such structured documents and effects conversion to generate a second document structure definition. The second document structure definition is then checked to determine whether it is consistent with a corresponding, predetermined document structure definition. The document structure alteration rule includes, for instance, a replacement rule for replacing an element contained in a document structure definition by another element, and an addition rule for adding an element to a location after the target document structure definition element.