Abstract: A communication apparatus includes an input interface to receive a flow of segmented data, and an output interface to transmit the received data from a plurality of physical links. The output interface includes storage units corresponding to the respective physical links to store transmission data. A link monitor unit observes how much data is accumulated in each storage unit. A distribution unit selects which physical link is to be used to output the received data. Based on the observations by the link monitor unit, the distribution unit changes the selection to an alternative physical link that has a larger amount of stored data than the currently selected physical link.

Abstract: A disclosed method executed by a first physical computer includes: measuring a transmission rate of data to be transmitted to a second physical computer, for a group to which virtual machines executed on the first physical computer belong; transmitting a request packet including the measured transmission rate to the second physical computer; receiving, from the second physical computer, a response packet including a ratio for the group and first data used in determining whether congestion has occurred; and upon determining based on the first data, that the congestion has occurred, lowering an output rate of data that the virtual machines belonging to the group output to the second physical server so as to be equal to or greater than a lower limit value determined by a product of the ratio for the group and a transmission rate that is preset for the group.

Abstract: Upon obtaining a packet including a broadcast/multicast MAC address from a virtual machine, a packet conversion apparatus obtains, based on first association information, a subnet identifier corresponding to the MAC address of the obtained packet, also obtains, based on second association information, a packet type identifier corresponding to the MAC address of the obtained packet, converts the packet to be transmitted to a different computer via a network into a multicast packet by setting the subnet identifier obtained based on the first association information and the packet type identifier obtained based on the second association information in a field of the MAC address of the packet to be transmitted, and transmits the packet to be transmitted, which is obtained by being converted, to the different computer via the network.

Abstract: Disclosed is a hydrophilic polyolefin sintered material which is a water-absorbing sintered material of a polyolefin resin ice having a graft chain composed of at least one molecular chain selected from hydrophilic ethylenically unsaturated group-containing monomers and their polymers. This hydrophilic polyolefin sintered material has an average porosity of 20-80% by volume and an open cell having an average pore diameter of 1-150 ?m.

Abstract: Provided is a connection supporting apparatus for supporting to establish a VPN through an IKE between a client and a gateway, comprising, a mode judging unit receiving authentication information of the client employed in the IKE, and judging whether or not a key exchange mode of the client is a main mode based upon the authentication information, a VPN setting request transmitting unit transmitting a VPN setting request to the gateway when the key exchange mode of the client is the main mode, the VPN setting request containing a client IP address as an authentication ID and information as to a communication key to be used when the client executes the IKE; and a notifying unit notifying both the communication key and the IP address to the client when the notifying unit receives a response with respect to the VPN setting request from the gateway.

Abstract: A network relay device includes a plurality of ports which input and output data packets, a storage in which a destination to which an input data packet is to be transferred and identification information of a port that outputs the input data packet are associated with each other for each of the plurality of ports, and a transmitter which obtains from the storage a destination associated with a port to which a data packet responsible for a congested state of traffic is input out of the plurality of ports, and which transmits a notification of congestion to the obtained destination.

Abstract: Disclosed is a hydrophilic polyolefin sintered material which is a water-absorbing sintered material of a polyolefin resin ice having a graft chain composed of at least one molecular chain selected from hydrophilic ethylenically unsaturated group-containing monomers and their polymers. This hydrophilic polyolefin sintered material has an average porosity of 20-80% by volume and an open cell having an average pore diameter of 1-150 ?m.

Abstract: A data relaying apparatus disposed on the preceding stage of a registry server centrally managing meta-information extracts meta-information from a content retrieval result transmitted from the registry server to a client terminal and retains and correlates the meta-information with URI information included in the meta-information. On the other hand, a data relaying apparatus disposed on the preceding stage of a repository server retaining contents receives a content acquisition request transmitted from the client terminal to the repository server to extract URI information from the content acquisition request and transmits the URI information to the data relaying apparatus to acquire meta-information. The meta-information is added to contents transmitted to the client terminal before the contents are relayed.

Abstract: A physical server monitors a state of a virtual machine that runs on the server. When it is detected that the state of the virtual machine is changed, the physical server transmits information indicating the state change of the virtual machine to a physical switch accommodating the server and controlling communication between the server or the virtual machine and another device or another virtual machine. The physical switch stores configuration information of the virtual machine that runs on an information processing device accommodated by the server. When the physical switch receives the information indicating the state change of the virtual machine from the physical server, the physical switch updates the configuration information based on the received information. The physical switch controls the communication between the physical server or the virtual machine and another device or another virtual machine, based on the stored configuration information.

Abstract: A communication device collects encrypted packet data passing through the communication device. The communication device extracts parameters required to generate a decryption key used when the collected packet data is decrypted. The communication device notifies a key managing device of the extracted parameters. The communication device acquires the decryption key, generated by the key managing device using the parameters of which notification has been given, from the key managing device. The communication device decrypts the collected packet data using the acquired decryption key and analyzes the decrypted packet data. The communication device extracts profile information from the analyzed packet data. The communication device transmits the extracted profile information and network information related to a network through which the encrypted packet data passes to a communication log device as a communication log.

Abstract: A test device includes a virtual machine. The device has a virtual bridge which, when receiving a packet transmitted from the virtual machine to a computer connected via a network, transmits the packet to the computer via a physical interface of the test device. The device has a load generating unit for generating a first packet that provides a communication load and transmitting the generated first packet to the virtual bridge. The device has a return unit for receiving the generated first packet from the virtual bridge, not transmitting the generated first packet to the computer, returning the first packet to the second virtual machine by changing a destination address, and terminating the transmission.

Abstract: A connection assistance apparatus avoids unauthorized access and DoS attacks, prevents a performance degradation from occurring, and does not need to recognize different connections to gateway apparatus. An authenticating unit authenticates the validity of a terminal by checking if the terminal is a valid terminal capable of communicating with a gateway apparatus according to IPSec in response to a request from a user who owns the terminal. If it is judged that the terminal is a valid terminal, then a preshared key generating unit generates a preshared key for the terminal and the gateway apparatus, and a firewall opening instruction information generating unit generates firewall opening instruction information to open a firewall of the gateway apparatus. A transmitting unit sends the preshared key to the terminal and the gateway apparatus and sends the firewall opening instruction information to the gateway apparatus.

Abstract: A service communication control system includes a user terminal connected to a user network. The service communication control system also includes communication gateway, a management server, and an application server connected to a communication carrier network. The communication using a communication protocol dedicated for the application service is performed between the user terminal and the application server through the communication gateway as a substitute. Thus, the user terminal need not be aware of the protocol.

Abstract: A packet processing apparatus for receiving incoming packets transmitted from any of the other apparatuses, processing the incoming packets and transmitting the processed packets to any of the other apparatuses, includes a buffer for temporarily storing the incoming packets; a processing unit for processing the incoming packets stored in the buffer and transmitting the processed packets to any of the other apparatuses; and a mode controller for controlling an operation mode of the processing unit, wherein when the mode controller is to change the operation mode of the processing unit, the mode controller generates a request for suspension of transmitting incoming packets to the any of the other apparatuses, confirms that the processing unit has completed processing of all the incoming packets stored in the buffer, changes the operation mode of the processing unit, and generates a request for resume of transmitting incoming packets to the any other apparatuses.

Abstract: A communication apparatus includes an input interface to receive a flow of segmented data, and an output interface to transmit the received data from a plurality of physical links. The output interface includes storage units corresponding to the respective physical links to store transmission data. A link monitor unit observes how much data is accumulated in each storage unit. A distribution unit selects which physical link is to be used to output the received data. Based on the observations by the link monitor unit, the distribution unit changes the selection to an alternative physical link that has a larger amount of stored data than the currently selected physical link.

Abstract: A data relaying apparatus disposed on the preceding stage of a registry server centrally managing meta-information extracts meta-information from a content retrieval result transmitted from the registry server to a client terminal and retains and correlates the meta-information with URI information included in the meta-information. On the other hand, a data relaying apparatus disposed on the preceding stage of a repository server retaining contents receives a content acquisition request transmitted from the client terminal to the repository server to extract URI information from the content acquisition request and transmits the URI information to the data relaying apparatus to acquire meta-information. The meta-information is added to contents transmitted to the client terminal before the contents are relayed.

Abstract: A communication device collects encrypted packet data passing through the communication device. The communication device extracts parameters required to generate a decryption key used when the collected packet data is decrypted. The communication device notifies a key managing device of the extracted parameters. The communication device acquires the decryption key, generated by the key managing device using the parameters of which notification has been given, from the key managing device. The communication device decrypts the collected packet data using the acquired decryption key and analyzes the decrypted packet data. The communication device extracts profile information from the analyzed packet data. The communication device transmits the extracted profile information and network information related to a network through which the encrypted packet data passes to a communication log device as a communication log.

Abstract: A package for light emitting element including a package main body 1 having a bottom face 7a on which a light emitting element 2 is arranged, and a concave portion 7 which is formed in an inverted truncated cone shape by an inner wall face 7b intersecting with the bottom face 7a with a predetermined angle, and a translucent member 6 filled in the concave portion 7 of the package main body 1, the angle between the inner wall face 7b composing the concave portion 7 and the bottom face 7a is selected within ±15° of the incident critical angle in which a direct light radiated from the light emitting element 2 undergoes total reflection at the interface between the translucent member 6 and air.

Abstract: An input line interface device that is used to accommodate packets from a high-speed line efficiently and to reduce a processing load on a back stage caused by routing control. A packet allotting section divides a variable-length packet, allots divided packets to parallel lines, and outputs the packets. A flow group classifying section classifies the packets into flow groups on each of the parallel lines. A sequence number giving section gives the packets sequence numbers corresponding to or independent of the flow groups. A buffering section stores the packets to which the sequence numbers have been given in a buffer or reads out them from the buffer to exercise sequence control over the packets in the flow groups. A flow separating switch separates the packets according to the flow groups and outputs the packets.

Abstract: Provided is a connection supporting apparatus for supporting to establish a VPN through an IKE between a client and a gateway, comprising, a mode judging unit receiving authentication information of the client employed in the IKE, and judging whether or not a key exchange mode of the client is a main mode based upon the authentication information, a VPN setting request transmitting unit transmitting a VPN setting request to the gateway when the key exchange mode of the client is the main mode, the VPN setting request containing a client IP address as an authentication ID and information as to a communication key to be used when the client executes the IKE; and a notifying unit notifying both the communication key and the IP address to the client when the notifying unit receives a response with respect to the VPN setting request from the gateway.