Abstract: A recording medium storing a program for causing a computer to execute processing including: creating first and second partial certificate information from certificate information that includes attribute information of a signer and certification information used to certify the attribute information, based on a data amount of an electronic document, in response to a signing request for the electronic document; generating an electronic signature for the electronic document and the first partial certificate information; attaching the generated electronic signature to the electronic document and the first partial certificate information, and transmitting the electronic document and the first partial certificate information with the electronic signature attached to a submission source of the electronic document; and transmitting the second partial certificate information to a verification device that verifies authenticity of the certificate information, using another route different from a route that connects the

Abstract: A non-transitory computer-readable storage medium storing a program that causes a processor included in a business operator's terminal to execute a process, the process includes conversion processing and confirmation request processing. The conversion processing that converts user information acquired from an user into a management format and obtains converted user information. The confirmation request processing that calculates a first hash value obtained by hashing the converted user information with a first hash function, transmits a confirmation request including the first hash value, the first hash function, and conversion content of the conversion to the user, and requests the user to confirm validity of the user information managed.

Abstract: A recording medium storing a program for causing a computer to execute processing including: creating first and second partial certificate information from certificate information that includes attribute information of a signer and certification information used to certify the attribute information, based on a data amount of an electronic document, in response to a signing request for the electronic document; generating an electronic signature for the electronic document and the first partial certificate information; attaching the generated electronic signature to the electronic document and the first partial certificate information, and transmitting the electronic document and the first partial certificate information with the electronic signature attached to a submission source of the electronic document; and transmitting the second partial certificate information to a verification device that verifies authenticity of the certificate information, using another route different from a route that connects the

Abstract: A communication device includes a processor. The processor monitors a first message that is periodically transmitted from a representative device in a first network. The processor transmits a second message to the communication devices in the first network when the first message is not detected. When plural data components obtained by dividing authentication information have been distributed from the representative device plural communication devices in the first network, the processor receives data components transmitted from the communication devices in the first network in response to the second message. When a specified number of data components are received, the processor regenerates the authentication information from the specified number of data components. The processor generates new authentication information by rewriting at least a portion of the regenerated authentication information. The processor connects to a second network based on the new authentication information.

Abstract: A non-transitory computer-readable storage medium storing a program that causes a processor included in a business operator's terminal to execute a process, the process includes conversion processing and confirmation request processing. The conversion processing that converts user information acquired from an user into a management format and obtains converted user information. The confirmation request processing that calculates a first hash value obtained by hashing the converted user information with a first hash function, transmits a confirmation request including the first hash value, the first hash function, and conversion content of the conversion to the user, and requests the user to confirm validity of the user information managed.

Abstract: A method for identity verification is performed by a control apparatus for controlling a system in which a plurality of business entities manages, in a distributed manner, attribute information in user information that identifies a user. The method includes: setting a workflow that minimizes a procedure time taken by target business entities to complete identity verification of the user, and that describes a distribution procedure of electronic certificates that certify the user information for each of the business entities; acquiring the electronic certificate issued by a business entity among the business entities when the business entity completes the identity verification; issuing a subset used by a subsequent business entity subsequent to the business entity in the distribution procedure to complete the identity verification; and transmitting the subset to each business entity deployed under the business entity that has issued the electronic certificate that is a basis of the subset.

Abstract: A device includes a memory and a processor coupled to the memory. The processor configured to select a certain terminal from a terminal group accommodated by the device when detecting that an operational state of the device coupled to information-centric networking is an overload state, and to switch an accommodation destination of the certain terminal to another device adjacent to the device.

Abstract: A communication device includes a processor. The processor monitors a first message that is periodically transmitted from a representative device in a first network. The processor transmits a second message to the communication devices in the first network when the first message is not detected. When plural data components obtained by dividing authentication information have been distributed from the representative device plural communication devices in the first network, the processor receives data components transmitted from the communication devices in the first network in response to the second message. When a specified number of data components are received, the processor regenerates the authentication information from the specified number of data components. The processor generates new authentication information by rewriting at least a portion of the regenerated authentication information. The processor connects to a second network based on the new authentication information.

Abstract: A communication system includes a first information processing apparatus, and a communication apparatus including a plurality of ports, the communication apparatus being configured to communicate with the first information processing apparatus through a first port, wherein a first content is stored in the first information processing apparatus, and the communication apparatus is configured to store first correspondence information that indicates a correspondence relationship between a first keyword related to the first content and the first port, receive, from the terminal apparatus, a first search request that includes a search word, when the search word includes the first keyword, specify the first port corresponding to the first keyword from the plurality of ports, send, through the first port, the first search request to the first information processing apparatus, acquire the first content from the first information processing apparatus, and send the first content to the terminal apparatus.

Abstract: A relay method includes receiving, by a first relay apparatus, a packet that includes a search formula for the target data from a terminal apparatus; acquiring the search formula from the packet; decomposing the search formula into a plurality of keywords; acquiring, for each of the plurality of keywords, fit data existing in the database from among the data of request target by searching out data corresponding to the keyword from the database of the first relay apparatus; requesting a second relay apparatus for missing data that does not exist in the database from among the data of request target; acquiring, by the second relay apparatus, the missing data; receiving, by the first relay apparatus, the missing data; combining the fit data and the missing data with each other to generate the data of request target; and transmitting the generated data of request target to the terminal apparatus.

Abstract: A communication method executed by a processor included in a control device that controls a plurality of transfer devices that store a combination of a content name and a port which is an output destination of an acquisition request for content identified by the content name, the method communication method includes retrieving a loop path that passes through at least part of the plurality of transfer devices; generating a control packet that requests each of the plurality of transfer devices included in the loop path to replace the combination for content acquirable via the loop path with information on which common identification information included in common in the content name that identifies the content acquirable via the loop path is associated with an output port when the loop path is used; and transmitting the generated control packet to each of the plurality of transfer devices included in the loop path.

Abstract: A communication method executed by a communication system, the communication method includes determining, by a first node that requests to execute an application, a policy for selecting a node to execute the application from the plurality of relay nodes based on an amount of an output data which is an execution result of the application and an amount of an input data for executing the application; transmitting a request message including identification information indicating the policy and requesting to execute the application via the path; receiving, by a third node, the request message; acquiring data for executing the application from a second node, when it is determined that the third node is able to execute the application based on the identification information; executing the application using at least the acquired data; and transmitting a response message including the execution result of the application to the first node.

Abstract: An apparatus controls migration of a virtual machine between plural servers in a communication network. The apparatus acquires flow information by classifying, for each of virtual machines, pieces of data transmitted and received in each of the plural servers into flows having respective different destinations. The apparatus selects, based on the flow information, a migration target which is a virtual machine to be migrated from a first server whose number of virtual machines in operation is relatively large to a second server whose number of virtual machines in operation is relatively small, from among virtual machines in operation in the first server, by giving a higher priority to a virtual machine whose matching number of flows is larger, where the matching number of flows indicates a number of flows that are currently processed by both the virtual machine and the second server.

Abstract: A relay method includes receiving, by a first relay apparatus, a packet that includes a search formula for the target data from a terminal apparatus; acquiring the search formula from the packet; decomposing the search formula into a plurality of keywords; acquiring, for each of the plurality of keywords, fit data existing in the database from among the data of request target by searching out data corresponding to the keyword from the database of the first relay apparatus; requesting a second relay apparatus for missing data that does not exist in the database from among the data of request target; acquiring, by the second relay apparatus, the missing data; receiving, by the first relay apparatus, the missing data; combining the fit data and the missing data with each other to generate the data of request target; and transmitting the generated data of request target to the terminal apparatus.

Abstract: A communication system includes a first information processing apparatus, and a communication apparatus including a plurality of ports, the communication apparatus being configured to communicate with the first information processing apparatus through a first port, wherein a first content is stored in the first information processing apparatus, and the communication apparatus is configured to store first correspondence information that indicates a correspondence relationship between a first keyword related to the first content and the first port, receive, from the terminal apparatus, a first search request that includes a search word, when the search word includes the first keyword, specify the first port corresponding to the first keyword from the plurality of ports, send, through the first port, the first search request to the first information processing apparatus, acquire the first content from the first information processing apparatus, and send the first content to the terminal apparatus.

Abstract: An apparatus receives load information indicating a magnitude of a processing load, at a predetermined interval, from each transfer device in a network, and receives, from each communication device that performs communication through one or more transfer devices, a reporting packet for reporting information on a flow transmitted by the each communication device. The apparatus specifies, using the reporting packet, a first flow transferred through a first transfer device having a processing load greater than a detection threshold for detecting a congestion warning, as a candidate for a flow whose path is to be changed when congestion occurs, and transmits a first packet for shortening a transmission interval of a first reporting packet including information on the first flow, and a second packet for lengthening a transmission interval of a second reporting packet for reporting information on a flow transferred in the network without passing through the first transfer device.

Abstract: An information processing system includes a plurality of computers, a plurality of relay devices having a memory which stores a first parameter combination for selecting a first transfer path from a plurality of paths for coupling to each of the plurality of computers, and a management computer which stores, in the memory, a second parameter combination for selecting a second transfer path from the plurality of paths when a traffic of any one of couplings for coupling each of the plurality of relay devices exceeds a given amount, wherein the plurality of relay devices set a transfer destination of received data by selecting information corresponding to computer combination information included in the received data from any one of the first parameter combination and the second parameter combination.

Abstract: An information processing device includes a memory; and a processor coupled to the memory and configured to: generate a packet including a transmission source address, a destination address, and bandwidth information which correspond to a communication route and a bandwidth, based on a request to a network for allocation of the communication route and the bandwidth, specify a transfer route of the generated packet, based on routing tables respectively owned by a plurality of nodes on the network, and determine whether the specified transfer route matches the communication route, based on a transmission source address and a destination address of a packet that reaches a final node using the transfer route.

Abstract: A system includes a first device which outputs a packet including an address identifying a second device and identifier of one of a plurality of communication circuits that output packets to a network, and a relay device which outputs the packet to the second device instead of to the one of the plurality of communication circuits corresponding to the identifier, when it is determined based on the address that the second device is coupled to the relay device.

Abstract: An information processing method including calculating, for migration of a first virtual machine between a migration-source computer coupled to a network and a migration-destination computer coupled to the network, a difference between a first resource allocated to the first virtual machine in the migration-source computer and a second resource to be allocated to a second virtual machine to be executed based on the virtual machine in the migration-destination computer, estimating a bandwidth for the network to be used by the second virtual machine based on the difference and a bandwidth for the network used by the first virtual machine in the migration-source computer.