Abstract: A multitenant management system selects a name space corresponding to a user from a plurality of name spaces and determines whether the user is a legitimate user by using user management information of the name space. When a result of the determination is positive, the system determines whether a resource of an access destination conforming to the received resource access request falls within a resource access range corresponding to one tenant scope indicated by the user management information of the selected name space. When the result of the determination is positive, the system executes the resource access request.

Abstract: An information processing system includes a physical drive, a compute unit, and a storage control unit that processes a data input/output request from the compute unit, in which: the storage control unit includes an IO processing unit and an encryption/decryption-related processing unit; the encryption/decryption-related processing unit is capable of referring to key generation method information including at least one element used to generate a key used to encrypt/decrypt the data and an algorithm for generating a key by using the element; and the encryption/decryption-related processing unit generates a key used to encrypt/decrypt the data according to a content set in the key generation method information, and encrypts data received from the compute unit by the IO processing unit or decrypts data read from the physical drive by the IO processing unit by using the key.

Abstract: An access control system stores information defining conditions under which each user is allowed to perform resource access. The access control system acquires a first access request indicating an operation for a first resource in a target system by a first user, determines based on the information whether or not the first access request is permitted, acquires a result of an additional permission/disapproval determination of the first access request in response to the disapproval determination of the first access request, and grants execution authority of the first access request by the first user according to the result of the additional permission/disapproval determination indicating permission.

Abstract: An access control system stores information defining conditions under which each user is allowed to perform resource access . The access control system acquires a first access request indicating an operation for a first resource in a target system by a first user, determines based on the information whether or not the first access request is permitted, acquires a result of an additional permission/disapproval determination of the first access request in response to the disapproval determination of the first access request, and grants execution authority of the first access request by the first user according to the result of the additional permission/disapproval determination indicating permission.

Abstract: When having detected that key data set to an accelerator by command information is not key data permitted to use, a monitor unit issues, to a storage control unit, a suspension request for suspending processing related to writing of data, a compute unit having received an instruction from an application program reads data from the storage device, encrypts read data using the accelerator, and issues, to the storage control unit, an instruction to write encrypted data to the storage device, and when having received the suspension request, the storage control unit suspends processing related to writing of data to the storage device.

Abstract: A scale-out storage system includes a plurality of computer nodes each of which has a memory and a processor, and a storage apparatus. The computer nodes have one or more redundancy groups each of which is a group for metadata protection. Each of the one or more redundancy groups includes two or more of the computer nodes including a primary node being a primary computer node and a secondary node being a secondary computer node, and a failover is performed from the primary node to the secondary node. The memory of the primary node has stored therein metadata related to the redundancy group and to be accessed for control. The metadata is redundantly stored in the memory of the primary node and the memory of the secondary node.

Abstract: In an information processing system, a storage control server (storage control node) that has received a read request of data from a compute server (compute node) transmits the read request to a drive box. The drive box that has received the read request from the storage control server reads encrypted read target data corresponding to the read request from non-volatile storage media, decrypts the read target data with key data acquired at a predetermined timing, and then transmits the decrypted read target data to the compute server as a read request source.

Abstract: The storage part receives an I/O request including the ID of software, information regarding a storage area to and from which the software performs input and output, and a token. The storage part checks the I/O request against the software ID, the information regarding the storage area, and the token received from an I/O control part so as to determine whether access to the storage part is allowed. Upon determination that the access to the storage part is allowed, the storage part processes the I/O request.

Abstract: A scale-out storage system includes a plurality of computer nodes each of which has a memory and a processor, and a storage apparatus. The computer nodes have one or more redundancy groups each of which is a group for metadata protection. Each of the one or more redundancy groups includes two or more of the computer nodes including a primary node being a primary computer node and a secondary node being a secondary computer node, and a failover is performed from the primary node to the secondary node. The memory of the primary node has stored therein metadata related to the redundancy group and to be accessed for control. The metadata is redundantly stored in the memory of the primary node and the memory of the secondary node.

Abstract: A system that controls access to a resource by a user stores policy information for determining a condition with respect to an operation of the resource. The system acquires a first access request that shows a predetermined operation to a first resource by the user from a user terminal. The system acquires user state information that shows a current state of the user from the user terminal. The system determines a condition in case of access by the user based on the user state information. The system determines whether to authorize the first access request based on the policy information and the condition in case of access.

Abstract: In an information processing system, a storage control server (storage control node) that has received a read request of data from a compute server (compute node) transmits the read request to a drive box. The drive box that has received the read request from the storage control server reads encrypted read target data corresponding to the read request from non-volatile storage media, decrypts the read target data with key data acquired at a predetermined timing, and then transmits the decrypted read target data to the compute server as a read request source.

Abstract: The storage part receives an I/O request including the ID of software, information regarding a storage area to and from which the software performs input and output, and a token. The storage part checks the I/O request against the software ID, the information regarding the storage area, and the token received from an I/O control part so as to determine whether access to the storage part is allowed. Upon determination that the access to the storage part is allowed, the storage part processes the I/O request.

Abstract: A fluid pressure cylinder includes a cushion bearing provided movably on an outer periphery of the piston rod; a flange portion provided on the piston rod by facing the piston with the cushion bearing between them; and a collar provided movably in a radial direction on the outer periphery of the piston rod between the cushion bearing and the flange portion. End surfaces of the cushion bearing and the collar are inclined symmetrically to a center axis of the piston rod, and end surfaces of the flange portion and the collar are formed having plane shapes crossing the center axis.

Abstract: A plant draw-in device and a plant body transplantation system that can draw roots of plant bodies into holes reliably with a simple structure, so that there is no need of monitoring or manual operation for roots insertion and the production efficiency can be improved. The plant draw-in device 110 includes a draw-in tube 111 that can be disposed below a hole 121, a draw-in member 113 provided such as to be capable of protruding from the draw-in tube 111, and a drive unit 114 that reciprocally moves the draw-in member 113 such as to come out from, and retract into, the draw-in tube 111. The draw-in member 113 is formed such that a portion thereof protruding from the draw-in tube 111 deforms and spreads outward.

Abstract: Disclosed herein is a digital rights management system that includes a storage module that stores a usage right for digital content in a tamper-resistant portion of a memory. The system also includes a flag status module that generates a flag corresponding with a transfer status of the usage right, sets the flag to one of a plurality of transfer statuses, and stores the flag in the tamper-resistant portion of the memory. The transfer statuses include a status indicating a request for the usage right was generated by a device with a usage right recovery mechanism.

Abstract: A fluid pressure cylinder includes a cushion bearing provided movably on an outer periphery of the piston rod; a flange portion provided on the piston rod by facing the piston with the cushion bearing between them; and a collar provided movably in a radial direction on the outer periphery of the piston rod between the cushion bearing and the flange portion. End surfaces of the cushion bearing and the collar are inclined symmetrically to a center axis of the piston rod, and end surfaces of the flange portion and the collar are formed having plane shapes crossing the center axis.

Abstract: A seedbed supporting member and a panel supporting member are configured such that, in a state where a seedbed held in a first seedbed holding member and a through hole portion of a first panel overlap with each other, a seedbed held in a second seedbed holding member and a through hole portion of a second panel, which correspond to this seedbed and this through hole portion, respectively, overlap with each other. An arrangement spacing in a first direction between the through hole portion of the first panel and the through hole portion of the second panel corresponding to each other is equal to an arrangement spacing in the first direction between a first transplantation arm and a second transplantation arm.

Abstract: Provided is a semiconductor device having improved reliability. In the semiconductor device in an embodiment, a mark is provided correspondingly to the bonding area of a belt-like wiring exposed from an opening provided in a solder resist. As a result, in an alignment step for the wire bonding area, the coordinate position of the wire bonding area can be adjusted using not the end portion of the opening formed in the solder resist, but the mark formed correspondingly to the wire bonding area as a reference. Also, in the semiconductor device in the embodiment, the mark serving as a characteristic pattern is formed. This allows the wire bonding area to be adjusted based on camera recognition.

Abstract: Provided is a transplanting device for performing transplanting between a plurality of culture medium boards cultivating a plurality of plants planted in an aligned manner. The transplanting device includes a transplanting mechanism for transplanting the plants, where the transplanting mechanism performs alternately a step of arranging plants having been arranged in a grid form on a culture medium board of a transplanting source, into a zigzag form on a culture medium board of a transplanting destination, and a step of arranging plants having been arranged in a zigzag form on a culture medium board of a transplanting source, into a grid form on a culture medium board of a transplanting destination.

Abstract: The transplant device is provided with; a first holding unit that holds a flat board-like culture medium in which a plurality of plants is planted in a row direction and column direction; a second holding unit that holds a flat board-like cultivation panel in which a plurality of holes for holding plants are arranged in the row direction and the column direction; a moving unit for moving the holding unit; a control unit that instructs the moving unit to move the holding unit; and a transplant unit that performs transplanting.