Abstract: A mobile IP communication scheme capable of authenticating an individual user who is operating the mobile computer when the mobile computer is connected to a visited site network and transmits a current location registration message to the home agent is disclosed. A user authentication to judge a properness of a user of the mobile computer is carried out according to a user input based information, and the current location of the mobile computer is registered at the mobile computer management device (home agent) when the user is judged as a proper user. The user authentication can be carried out either at the mobile computer management device according to a user input based information received from the mobile computer, or at the mobile computer according to an information entered by the user at the mobile computer.

Abstract: When a first mobile node is moved, it reports binding information including a compatible node identifier (virtual mobile guaranteed general network identifier and a node identifier) and a compatible position identifier (mobile guaranteed real network identifier identified on a network to which the first mobile node is moved, and a node identifier) to a first server which is assigned to the first mobile node. A second mobile node also reports the binding information to a second server. For communicating with the second mobile node to which a second server is assigned, if the destination address of a packet addressed to the second mobile node is designated with a compatible node identifier, the first mobile node acquires the binding information of the second mobile node from the second server.

Abstract: A control equipment management system integrates and displays data transmitted from a plurality of control equipment units provided at devices to be monitored and controlled, can flexibly modify the form of display, and can employ existing equipment as control equipment. Control equipment units 30a to 30n monitor the status of, and control the operation of, devices to be monitored and controlled. Remote computer 10 collects data output from control equipment units 30a to 30n via network N, and outputs control signals to the control equipment units 30a to 30n. Display command server 20 connected to network N stores or generates display commands determining the form of display of data output from each of control equipment units 30a to 30n. Remote computer 10 displays data collected from each of Control equipment units 30a to 30n according to the display form of display commands obtained from the display command server 20.

Abstract: A mobile IP communication scheme for supporting a mobile computer moving over different address spaces is disclosed. A packet relay device for relaying packets having an address of the mobile computer device as a destination or source is provided at a border between a private address space and a global address space, where the packet relay device has a packet receiving unit for receiving a packet in a first format using a global address which is transmitted by the mobile computer for a location registration from a visited site managed by a global address system, and checking a content of the packet, and a packet transfer unit for transferring the packet in a second format using a private address, to a correspondent computer in a home network of the mobile computer managed by a private address system, according to the content of the packet.

Abstract: A mobile IP communication scheme capable of authenticating an individual user who is operating the mobile computer when the mobile computer is connected to a visited site network and transmits a current location registration message to the home agent is disclosed. A user authentication to judge a properness of a user of the mobile computer is carried out according to a user input based information, and the current location of the mobile computer is registered at the mobile computer management device (home agent) when the user is judged as a proper user. The user authentication can be carried out either at the mobile computer management device according to a user input based information received from the mobile computer, or at the mobile computer according to an information entered by the user at the mobile computer.

Abstract: When a first mobile node is moved, it reports binding information including a compatible node identifier (virtual mobile guaranteed general network identifier and a node identifier) and a compatible position identifier to a first server which is assigned to the first mobile node. A second mobile node reports the binding information to a second server. For communicating with the second mobile node to which a second server is assigned, if the destination address of a packet addressed to the second mobile node is designated with a compatible node identifier, the first mobile node acquires the binding information of the second mobile node from the second server. Then, the first mobile node converts the destination address of the packet into the acquired compatible position identifier and sets the compatible position identifier of the first mobile node as the source address of the packet. The first mobile node then transmits the packet.

Abstract: A communication control in a communication network system using a mobile computer, capable of realizing flexible address control and management for the mobile computer. When the mobile computer is located within a home network, a communication with the mobile computer is carried out by transferring data using a home address specific to the mobile computer which is a private address. When the mobile computer is located within an external own organization network, a communication with the mobile computer is carried out by routing data to the external own organization network using a care-of address indicating a current visited location of the mobile computer in the system which is a global address, and addressing the mobile computer within the external own organization network using the home address.

Abstract: A communication apparatus having first address which is link local address of IPv6 and is used for communicating with node apparatus and second address which is global address acquires an IPv6 address corresponding to node apparatus, determines whether IPv6 address acquired is link local address or global address, based on prefix included in IPv6 address acquired, generates address candidate of node apparatus by combining interface ID included in IPv6 address acquired with prefix of second address, when IPv6 address acquired is determined to be link local address, generates NI-query message of ICMPv6 including address candidate as destination address, transmits NI-query message, receives NI-reply message of ICMPv6, and determines that address candidate is global address of node apparatus when NI-reply message received includes address candidate as sender address.

Abstract: A mobile IP communication scheme for supporting a mobile computer moving over different address spaces is disclosed. A packet relay device for relaying packets having an address of the mobile computer device as a destination or source is provided at a border between a private address space and a global address space, where the packet relay device has a packet receiving unit for receiving a packet in a first format using a global address which is transmitted by the mobile computer for a location registration from a visited site managed by a global address system, and checking a content of the packet, and a packet transfer unit for transferring the packet in a second format using a private address, to a correspondent computer in a home network of the mobile computer managed by a private address system, according to the content of the packet.

Abstract: A mobile IP communication scheme capable of authenticating an individual user who is operating the mobile computer when the mobile computer is connected to a visited site network and transmits a current location registration message to the home agent is disclosed. A user authentication to judge a properness of a user of the mobile computer is carried out according to a user input based information, and the current location of the mobile computer is registered at the mobile computer management device (home agent) when the user is judged as a proper user. The user authentication can be carried out either at the mobile computer management device according to a user input based information received from the mobile computer, or at the mobile computer according to an information entered by the user at the mobile computer.

Abstract: A mobile IP communication scheme in which the mobile computer can be operated using the mobile communication protocol such as Mobile IP even in the case where the home network is operated by the dynamic address allocation protocol such as DHCP is disclosed. The current location registration message to be transmitted by the mobile computer from the visited site to the mobile computer management device contains an information indicating that the dynamic address allocation has been received at the home network and an information capable of identifying the mobile computer, and the mobile computer management device carries out exchanges with the dynamic address management server on behalf of the mobile computer, so that the mobile computer which has received the dynamic address allocation at the home network can be operated at the visited site by using the mobile communication protocol.

Abstract: Property information of a communication device is initialized in a second server when the communication device is connected to a control network to which a first server for storing key information and a second server for storing property information are connected. Key information necessary for security communication with respect to the second server is acquired from the first server and property information containing at least an identifier and network address of the communication device is transmitted to the second server via security communication using the key information.

Abstract: The disclosed mobile communication scheme enables easy change of a connected location of a mobile computer on the IP network when the mobile computer leaves its home network, without requiring the use of a home agent, while providing a sufficient level of security. The mobile computer transmits a packet from a visited site network to a correspondent by encapsulating an inner packet having a home address as an original source address within an outer packet having a current location address as a source address. The correspondent which received this encapsulated packet recognizes the source addresses of the outer and inner packets of the encapsulated packet as the current location address and the home address of the mobile computer, respectively, so that the correspondent can transmit a packet to the mobile computer thereafter by encapsulating an inner packet having the home address as a final destination address within an outer packet having the current location address as a destination address.

Abstract: In a source address selection system containing a router device connected to a plurality of Internet service providers, and a communication node connected to the router device, it becomes possible to utilize the multi-home environment effectively, by enabling the selection of the source address according to the egress router with respect to the Internet, by accounting for the state of connection with the Internet service provider.

Abstract: A mobile IP communication scheme capable of authenticating an individual user who is operating the mobile computer when the mobile computer is connected to a visited site network and transmits a current location registration message to the home agent is disclosed. A user authentication to judge a properness of a user of the mobile computer is carried out according to a user input based information, and the current location of the mobile computer is registered at the mobile computer management device (home agent) when the user is judged as a proper user. The user authentication can be carried out either at the mobile computer management device according to a user input based information received from the mobile computer, or at the mobile computer according to an information entered by the user at the mobile computer.

Abstract: The host name to be used in responding to the reverse look-up request from the correspondent is generated at the name server side and returned as a response, and/or the IP address to be used in responding to the normal look-up request from the correspondent is generated at the name server side and returned as a response, so that the communications can be carried out without exposing the privacy of the communication host or the user to danger.

Abstract: A communication control apparatus includes: a storage device, an input device, an output device, a communication control apparatus, a main storage device and a processor (CPU). The CPU includes an address segmentation unit, a weight detector and a connection controller. The address segmentation unit splits a received packet, the weight detector detects the weight of each segment of the packet, and the connection controller employs the weight to provide connection control for the packet.

Abstract: A network address management system includes a router, an address data storage device, a first communication apparatus and a second communication apparatus, and included in the router is a second connection request receiver, a second prediction unit and a determination unit. The second connection request receiver receives connection data, such as an MAC address for the second communication apparatus, and the second prediction unit employs the connection data for predicting an address while the determination unit determines whether the address is unique. When the predicted address is unique, the second communication apparatus skips duplicate address detection.

Abstract: In the communication system, the filtering is realized at times of transmission and reception, by a server which attaches an identifier indicating an anycast address to a source address of a response packet, a communication device which detects the identifier indicating an anycast address in the response packet and verifies the response packet, when the source address is different from the destination address, and a boundary router which detects the identifier in the packet and verifies that the response packet is a response transmitted from the server, according to information regarding servers that is stored in advance.

Abstract: In a name resolution device for managing a name of each node connected to a network and an address for identifying each node, a node information containing a name of a node, a network identification information, a prefix indicating a position on the network, and an interface identification information of a node is stored for each node, and the node information of other nodes connected to the network is collected through the network. Then, the stored node information is updated according to the collected node information of the other nodes, by updating the stored prefix by using the interface identification information contained in the collected node information as a key.