Abstract: There is provided a management server technology that allows a user to continuously use a business function of a business server without logging in again to the business server, even if the authority of the user to the business server is changed. The business server receives an access from a user terminal, and requests a management server to perform user authentication. In response to the authentication request, the management server determines a future scheduled authority of the user, generates not only authority information at the time of the user authentication, but also a determination result including the future scheduled authority information, and transmits them to the business server. The business server provides the user terminal with a new business function based on the scheduled user authority information, upon expiration of a validity period of the user authority to the current business function.

Abstract: To reduce a load inflicted on a network by peer-to-peer communication between terminals, the present invention provides a network system having a communication destination machine and a communication source machine, in which: the communication destination machine includes a unit which registers its own location information in a peer-to-peer network; and the communication source machine includes: a unit which searches the peer-to-peer network for the location information of the communication destination machine and obtains the location information; and a unit which uses the obtained information to establish peer-to-peer communication. The location information contains communication path information which enables the communication source machine to communicate with a desired machine beyond a path controller, and a parameter necessary for communication. The communication source machine may include a unit which accumulates location information or similar data of multiple communication destination machines.

Abstract: A security specification creation support device has a security specification example database in which existing security specifications are registered as examples. A definition information acceptance unit accepts the definition information of respective components constituting the information network system from the user. A security specification selection unit looks up reusable examples from the security specification example database using definition information of the component in question accepted by the definition information acceptance unit in respect of the respective components. A security specification draft creation unit creates a composite security specification draft in respect of an information network system by entering the details of respective examples found by the security specification selection unit in a prescribed form of security specification and accepts revisions of the draft in question from the user.