Abstract: According to one embodiment, there is provided a communication device including a first communication layer receiving processor to perform a receiving process on a first communication layer on data received from a first communication device. The first communication layer receiving processor includes a first key identifying unit to identify, a key required to process the data; a first attribute identifying unit to identify, pursuant to key data, first attribute information that is attribute information associated with the key as identified; and a data processor to process the data using the key as identified. The data processed by the data processor and the first attribute information are passed to a second communication layer processor configured to perform a process on a second communication layer.

Abstract: According to one embodiment, there is provided an authentication apparatus, including: a communication unit, a verifier and a connection configuration checker. The communication unit receives a message related to network access authentication on a first communication apparatus, the message including an address of the first communication apparatus and more than zero address of an authentication relay. The verifier verifies an authenticity of the first communication apparatus in response to receipt of the message by the communication unit. The connection configuration checker identifies a first destination to which the first communication apparatus intends to connect, on the basis of the address of the first communication apparatus or the address of the authentication relay included in the message when verification succeeds, and determines whether to authorize connection by the first communication apparatus to the first destination or not.

Abstract: According to an embodiment, a communication device includes an analyzer, a switching unit and a communication unit. The analyzer is configured to analyze an image taken at a periphery of the communication device. The switching unit is configured to switch a communication counterpart from a first communication device to a second communication device based on an analysis result of the image. The communication unit is configured to communicate with the second communication device after switching.

Abstract: According to an embodiment, a wireless communication device includes a detector to detect a mobile object by referring to sensing information; a first communicating unit to communicate mobile object information, which is related to a detection result of the mobile object, with another wireless communication device; a first calculator to calculate a moving path of the mobile object between wireless communication devices by referring to the detection result of the mobile object and mobile object information received from the other wireless communication device; a second communicating unit to communicate movement information, which is related to the moving path of the mobile object, with the other wireless communication device; and a second calculator to calculate distances between wireless communication devices that are dependent on the number of times of movement in the moving path by referring to the calculated moving path and movement information received from the other wireless communication device.

Abstract: An information processing apparatus has a communication part, a message receiving part, a network-information acquiring part, a peripheral-apparatus information managing part, a task accepting part, a task allocating part, a task processing part, a process-related information generating part, and a message transmitting part configured to generate a message that includes the process-related information and transmit the message including the process-related information to the other communication apparatuses via the communication part and the network.

Abstract: According to an embodiment, a communication apparatus establishes communication with an external apparatus through a higher-level device. The communication apparatus includes a main processor and a key generator. The main processor receives a data authentication request including data to be authenticated, a first key specification, and a message authentication algorithm identifier from the higher-level device. The key generator retains a key hierarchy used by an authentication protocol that is used between the higher-level device and the external apparatus, and to generate a first key by use of the key hierarchy and the first key specification. The main processor generates a message authentication code for the data to be authenticated by use of the message authentication algorithm, which is identified by the message authentication algorithm identifier, and the first key, and transmits a data authentication response including the message authentication code to the higher-level device.

Abstract: The communication unit transmits and receives a communication message. The authentication processor performs an authentication process for establishing the network connection by transmitting and receiving an authentication message to and from an authentication server through the communication unit. The encryption information generator generates an encryption key shared with the authentication server when the authentication process is successfully completed. The first message generator generates a first communication message instructing the destination device to acquire the encryption key from the authentication server. The second message generator generates a second communication message including data to be transmitted to the destination device. The communication unit transmits the first communication message to the destination device, encrypts the second communication message with the encryption key, and transmits an encrypted second communication message to the destination device.

Abstract: According to an embodiment, an encryption key generating apparatus includes first to third calculators. The first calculator executes a first round operation to a first portion of first data. The second calculator executes the first round to a second portion of second data pieces. Each second data piece includes the first portion of the first data to which the first round operation has been completed and the second portion obtained by changing at least a part of the first data other than the first portion. At least a part of the second portion is different from that of each of the other second portions. The second calculator executes the first round operation to each second portion. The third calculator unit executes operations of the second and subsequent rounds to the second data pieces.

Abstract: According to one embodiment, an information notification apparatus includes a table and a notifier. The table is configured to store information about root nodes and information related to the nodes. The notifier is configured to generate, when a communication node is a root node, new information for that root node. The notifier is further configured to read out, when the communication node is not a root node, the information from the table. The notifier is further configured to notify the communication node of the new information or the information read out from the table.

Abstract: According to an embodiment, a communication apparatus includes a security control unit. The security control unit establishes first and second secure communication channels to a first server which manages communication security keys and second server which provides a service regarding a smart meter, respectively when operation to the smart meter is started, performs mutual authentication with the first server and acquire a first key from the first server via the first secure communication channel, and relays mutual authentication with the first server and acquisition of a second key from the first server via the first secure communication channel for the smart meter.

Abstract: A wireless authentication terminal that connects to a network via a wireless base station, the wireless authentication terminal comprises a communication unit that performs communication compliant with IEEE802.15.4, an authentication processing unit that transmits and receives communication messages and performs authentication processing for connecting to a network, a filter processing unit that changes the communication messages allowed to pass through between the communication unit and the authentication processing unit, an encryption level determination unit that determines a level at which the communication unit encrypts the communication message, and a control unit that controls an operation state of the filter processing unit and the encryption level determination unit based on the phase of the authentication processing in the authentication processing unit.

Abstract: There is provided an authentication server including: a network access authenticating unit and an address notifying unit wherein the network access authenticating unit receives, from an authentication relay connected to a network, a first authentication message for a communication device existing under the authentication relay, and execute network access authentication process with the communication device, and the address notifying unit notifies the communication device of the server's address information in accordance with a result of the network access authentication process.

Abstract: There is provided an authentication device in which a network access authenticating unit executes a first network access authentication process with a communication device; master key generator generates a first master key shared with the communication device in accordance with a result of the first network access authentication process; an application-oriented encryption key generator generates a first encryption key for an application, which is shared with the communication device, on the basis of the first master key; a master key identifier determiner determines an identifier of the first master key; and an application-oriented encryption key identifier determiner determines an identifier of the first encryption key for the application in accordance with the identifier of the first master key.

Abstract: According to an embodiment, a communication apparatus establishes communication with an external apparatus through a higher-level device. The communication apparatus includes a main processor and a key generator. The main processor receives a data authentication request including data to be authenticated, a first key specification, and a message authentication algorithm identifier from the higher-level device. The key generator retains a key hierarchy used by an authentication protocol that is used between the higher-level device and the external apparatus, and to generate a first key by use of the key hierarchy and the first key specification. The main processor generates a message authentication code for the data to be authenticated by use of the message authentication algorithm, which is identified by the message authentication algorithm identifier, and the first key, and transmits a data authentication response including the message authentication code to the higher-level device.

Abstract: In an embodiment, provided is a communication device connected to time servers via a network with transfer devices. In the communication device: a network controller receives a message containing time information counted by the time server and containing a network identifier, and obtains a receiving timing of the message; a network processing unit, when the network identifier in the message does not match with any network identifier, destroys the message; a protocol processing unit, when the network identifier has a match, calculates a time error by the time information in the message and the receiving timing, detects whether a first time server is malfunctioning, and when detected the first time server malfunctioning, outputs the time error calculated by a network identifier assigned to a second time server; a servo calculates an operation amount by the time error; and a clock varies a clock rate according to the operation amount.

Abstract: An energy management apparatus includes: a communicator capable of communicating with at least a meter apparatus among the meter apparatus and a server apparatus that collects measurement information from the meter apparatus; a device registration processor configured to determine whether the direct communicator to the server apparatus can communicate with the server apparatus; if the direct communication is possible, transmit to the server apparatus a device registration message that requests to register a device identifier of the meter apparatus and a device identifier of the energy management apparatus; and, if the direct communication to the server apparatus is not possible, transmit the device registration message for the server apparatus to the meter apparatus; a communication processor configured to obtain energy control information of the device transmitted from the server apparatus; and a control executor configured to control the used energy amount of the device based on the energy control informati

Abstract: The communication unit transmits and receives a communication message. The authentication processor performs an authentication process for establishing the network connection by transmitting and receiving an authentication message to and from an authentication server through the communication unit. The encryption information generator generates an encryption key shared with the authentication server when the authentication process is successfully completed. The first message generator generates a first communication message instructing the destination device to acquire the encryption key from the authentication server. The second message generator generates a second communication message including data to be transmitted to the destination device. The communication unit transmits the first communication message to the destination device, encrypts the second communication message with the encryption key, and transmits an encrypted second communication message to the destination device.

Abstract: Provided are a communication device and a communication system capable of specifying a failure part in a network in which a time server and a communication path are made redundant. A communication device acquires time-related information from a plurality of time servers over a plurality of networks and compares the information to specify the failure part in the time servers or in the networks. A remote apparatus acquires time-related information from the communication device over the plurality of networks and compares the information to determine the failure of the communication device.

Abstract: According to an embodiment, a control device includes a detecting unit, a communication unit, and a control unit. The detecting unit detects that a power-supplied device is connected to a power supply line relaying supply of power. The communication unit receives consumer authentication information including consumer identification information for identifying a consumer from a communication device when it is detected that the power-supplied device is connected to the power supply line, transmits the consumer authentication information to a first server, receives power-supply-availability determination information representing whether supply of power to the power-supplied device is possible or not, from the first server, and transmits power measurement information representing power supplied to the power-supplied device through the power supply line and the consumer identification information to a second server.

Abstract: According to some embodiments, a key management apparatus for deploying in a smart grid system adapted to receive metering data from smart meters connected to at least one relay via a network, includes: a key control mechanism that derives a key array of individual purpose specific keys from one master key such that the purpose specific key in the key array are each independent cryptographic keys for each specific usage in an application or for each application if there is only one specific usage in an application.