Abstract: A communication control apparatus that controls communication via a network between a first communication apparatus for communicating via a virtual communication channel and a second communication apparatus for transmitting a communication request with the first communication apparatus including a storage unit that stores access control policy defining allowance or denial of access to the first communication apparatus, an establishment unit that establishes the virtual communication channel with the first communication apparatus, an authentication unit that authenticates the second communication apparatus based on the communication request received from the second communication apparatus, an access control unit that refers to the access control policy and evaluates whether to allow or deny access from the authenticated second communication apparatus to the first communication apparatus, and a transfer unit that transfers the received communication request to the first communication apparatus when the access c

Abstract: A communication control apparatus that controls communication via a network between a first communication apparatus for communicating via a virtual communication channel and a second communication apparatus for transmitting a communication request with the first communication apparatus including a storage unit that stores access control policy defining allowance or denial of access to the first communication apparatus, an establishment unit that establishes the virtual communication channel with the first communication apparatus, an authentication unit that authenticates the second communication apparatus based on the communication request received from the second communication apparatus, an access control unit that refers to the access control policy and evaluates whether to allow or deny access from the authenticated second communication apparatus to the first communication apparatus, and a transfer unit that transfers the received communication request to the first communication apparatus when the access c

Abstract: In a TCP/UDP communication system, a communication process begins with a receipt of a communication request from an application program that does not specify a predetermined communication parameter such as source port number. A port number is dynamically assigned to the communication request. The communication process is then suspended and communication control data associated with the application program is supplemented with the assigned source port number to generate supplemented communication control data. The communication process is then resumed to establish communication over a communications network, and the established communication is controlled according to the supplemented communication control data.

Abstract: Provided is an operating system enabling, in an application formed of a plurality of programs including a library program, a rule to be applied that enables determination whether to allow processing of a system call called by the application. An address on a memory into which a program is loaded is stored so as to be correlated with the program as an address range set, each program is loaded into a memory in the processing of starting an application to store an address range set in an address range set storing unit, upon receiving a call-up of a system call from the application, various kinds of processing are executed, and an operation rule which describes allowance/non-allowance of use of a system call by a program forming the application is stored to determine, based on an operation rule corresponding to a program of a calling source of the system call, whether to execute processing called by a system call processing unit.

Abstract: The service terminal 1 which contains bar code reader 2, RF-ID reader 3 and information processing block is moved to a medium containing the bar code and RF-ID tag. Both of the bar code reader 2 and RF-ID reader 3 are set to the positions that information can be read from the bar code and RF-ID tag. In this case, the information processing block controls the bar code reader 2 and RF-ID reader 3 to read information from the bar code and RF-ID tag.

Abstract: Before providing a software body I, a determination program I is prepared to determine whether a software body II should be authenticated for combination and use with the software body I, and is provided with the software body I. A platform executes the determination program I before the platform employs the software body I with the software body II, and only when the determination results represent the permission for combination and use, the platform permits the software II to be combined and used with the software body I.

Abstract: The communication control device of the present invention includes: a communication parameter acquisition means (105) for acquiring communication parameters that specify the transmission origin of an outside apparatus based on existence information of the outside apparatus that is received from a communication network, an apparatus identifier acquisition means (104) for acquiring from the outside apparatus an apparatus identifier that is an identifier for the outside apparatus, a policy determination means (106) for determining a communication policy for permitting or prohibiting communication with the outside apparatus that is specified by the apparatus identifier, a communication selection rule combining means (107) for combining communication selection rules based on the communication policy and communication parameters, and a communication pass control means (108) for passing or blocking communication with the outside apparatus based on the communication selection rules that have been combined by the comm

Abstract: Suspendable candidate link group determining device 204 determines a suspendable candidate link group consisting of communication links whose communication in an upper layer is suspended, and outputs it. Link-incapable-of-handling-suspension excluding device 205 removes a communication link to an adjacent relay apparatus incapable of handling a suspended status from the communication link group of suspendable candidates output by the suspendable candidate link group determining device 204 based on information stored in link suspension manager 203, to obtain a communication link group to be suspended, and outputs information indicating the communication link group to be suspended. Suspension device 206 releases communication resources for a lower layer for each communication link for the communication link group to be suspended, which is indicated by information output from the link-incapable-of-handling-suspension excluding device 205.

Abstract: In a TCP/UDP communication system, a communication process begins with a receipt of a communication request from an application program that does not specify a predetermined communication parameter such as source port number. A port number is dynamically assigned to the communication request to the communication request. The communication process is then suspended and communication control data associated with the application program is supplemented with the assigned source port number to generate supplemented communication control data. The communication process is then resumed to establish communication over a communications network, and the established communication is controlled according to the supplemented communication control data.

Abstract: In an information processing apparatus, a computer includes plural communication interface means corresponding to networks different from each other, a routing means for selecting communication interface means corresponding to a communication request issued by a task from a routing table in which the relation between destinations of communication and communication interface means to be used in the communication is prescribed, a task table update means for recording a combination of a task and communication interface means used in a first communication carried out by the task to a task table and deleting a record as to the task from the task table when the task is finished, and a communication interface restriction means for permitting the communication when the selection carried out by the routing means corresponds to the task table and shutting off the communication when the selection does not correspond to the task table.

Abstract: Before providing a software body I, a determination program I is prepared to determine whether a software body II should be authenticated for combination and use with the software body I, and is provided with the software body I. A platform executes the determination program I before the platform employs the software body I with the software body II, and only when the determination results represent the permission for combination and use, the platform permits the software II to be combined and used with the software body I.

Abstract: The service terminal 1 which contains bar code reader 2, RF-ID reader 3 and information processing block is moved to a medium containing the bar code and RF-ID tag. Both of the bar code reader 2 and RF-ID reader 3 are set to the positions that information can be read from the bar code and RF-ID tag. In this case, the information processing block controls the bar code reader 2 and RF-ID reader 3 to read information from the bar code and RF-ID tag.