Abstract: The control unit specifies an undetected connection destination port and sends a reply request to a connection destination of the undetected connection destination port. The packet transfer unit determines whether the received reply request is to be transferred to any other packet transfer unit. The packet transfer unit, upon determining the reply request to be transferred to any other packet transfer unit, transfers the reply request to any other packet transfer unit. The packet transfer unit, upon determining the reply request not to be transferred to any other packet transfer unit, returns a reply that includes information on ports of the local packet transfer unit, the reply being sent along a path leading to the control unit.

Abstract: A communication network management system has: a communication network including a plurality of nodes and a plurality of links connecting between the plurality of nodes; and a management computer connected to the plurality of nodes. A loop-shape communication route in the communication network is a loop route. The management computer transmits a frame to one node on the loop route. When receiving the frame, each node on the loop route forwards the received frame to a subsequent node along the loop route and, if a predetermined condition is satisfied, returns a response back to the management computer. The management computer determines whether or not a failure is occurring, based on reception state of the response.

Abstract: A communication system includes: a plurality of communication nodes; and a control apparatus that controls packet processing of the plurality of communication nodes. The control apparatus further includes: a virtualization unit that configures a virtual node(s) from a plurality of communication nodes among the plurality of communication nodes; a control unit that sets a processing rule for a packet in at least one communication node of the plurality of communication nodes included in the virtual node(s), so that the at least one communication node executes packet processing corresponding to an operation of the virtual node(s); and a path calculation unit that calculates a forwarding path of a packet, based on a virtual network topology including the virtual node(s). The plurality of communication nodes process a packet corresponding to the forwarding path, in accordance with the processing rule.

Abstract: A plurality of forwarding nodes includes: a topology holding unit that holds as first topology information connection relationship between an own node and at least part of the group of nodes; a topology notification unit that notifies a node(s) adjacent to the own node among the group of nodes of the first topology information; and an in-band communication unit that notifies a control apparatus of the first topology information. The control apparatus includes: a topology configuration unit that generates second topology information by combining a plurality of pieces of the first topology information notified by the plurality of forwarding nodes; and an in-band control unit that derives a path from the control apparatus to the plurality of forwarding nodes based on the second topology information and establishes a control channel for controlling the plurality of forwarding nodes along the derived path.

Abstract: A communication system comprises: a node that requests a processing rule for processing a packet; a control apparatus that notifies a processing rule to the node in response to the request; and a plurality of path calculation apparatuses that calculate a forwarding path of the packet received by the node. The plurality of path calculation apparatuses calculate the forwarding path based on at least one policy for calculating the forwarding path, and notifies the calculated forwarding path to the control apparatus. The control apparatus generates based on one of a plurality of the notified forwarding paths the processing rule for forwarding the packet received by the node.

Abstract: An information processing apparatus configuring a control apparatus controlling a network includes: a display unit displaying a first icon corresponding to a database storing control information for controlling the network and a plurality of second icons, each of which corresponds to one of a plurality of modules, each of which operates the control information based on a predetermined algorithm, on a display; and a management unit configuring the control apparatus having a function of connecting, upon connecting the first icon with any one of the second icons, a module corresponding to the second icon to the database and operating the control information responsive to a database operation command issued by the module.

Abstract: A control apparatus includes: a database which stores control information for controlling a network; an interface unit which is connectable to a plurality of modules, each of which operates the control information based on a predetermined algorithm, and which operates the control information responsive to a database operation command issued by any one of the modules; and a control unit which controls packet processing in the network based on the control information configured by an operation executed by any one of the modules.

Abstract: A control apparatus includes: a database which stores control information for controlling a network; an interface unit which is connectable to a plurality of modules, each of which operates the control information based on a predetermined algorithm, and which operates the control information responsive to a database operation command issued by any one of the modules; and a control unit which controls packet processing in the network based on the control information configured by an operation executed by any one of the modules. The interface unit updates the control information responsive to a database operation command corresponding to information input/output or information deletion with respect to the control information.

Abstract: A communication system, includes: a node that requests a processing rule for processing a packet; and a control apparatus that notifies the node of the processing rule in response to the request. The control apparatus, upon being notified of change of a connection relationship between a communication apparatus to which a packet is addressed and the node, determines a forwarding path for a packet addressed to the communication apparatus and notifies the node of a processing rule for realizing the forwarding path.

Abstract: A communications system includes: a first node device provided in a first network; a first controller controlling the first node device; a second node device provided in a second network and connected to the first node device; and a second controller controlling the second node device. The first controller sets the first node device with a processing rule according to which packets transferred between the first and second controllers are processed. The second controller sets the second node device with a processing rule according to which the packets are processed. The first and second controllers exchanges the packets each other through at least the first and second node devices.

Abstract: A communication network management system has: a communication network including a plurality of nodes and a plurality of links connecting between the plurality of nodes; and a management computer that manages the communication network. The management computer has: a storage means in which a route information indicating a transfer route of frames in the communication network is stored; and a monitoring means configured to perform, based on the route information, transmission and reception of frames to and from the communication network. The monitoring means transmits a frame to the transfer route. Each of the plurality of nodes, when receiving a frame, not only forwards the received frame along the transfer route but also sends a reply to the management computer. The monitoring means identifies a location of failure occurrence on the transfer route, based on reception state of the reply from the plurality of nodes.

Abstract: A communication system includes a plurality of forwarding nodes that process a received packet in accordance with a processing rule that determines a matching rule matching a packet and a process to be applied to a packet conforming with the matching rule; and a control apparatus that controls the forwarding nodes using control information. The control apparatus includes a tunnel establishing unit that determines forwarding path(s) for the respective control information for each of the forwarding nodes, and transmits to the forwarding nodes a tunnel establishing message including a processing rule for forwarding the control information to be set in the forwarding nodes in each of the forwarding paths. The respective forwarding nodes give and receive control information with regard to the control apparatus, by holding processing rules for forwarding the control information included in the tunnel establishing message.

Abstract: A network management service system includes a policy management apparatus that receives updating of a communication policy from an user and manages the communication policy for each user; a control apparatus that generates a of a packet associated with the communication policy of the user, in response to a request from the user, and sets the generated in a forwarding node(s); and the forwarding node(s) that processes the packet using the generated by the control apparatus.

Abstract: A forwarding node processes a packet between a supplicant and a prescribed authentication device, in accordance with a processing rule that has been set. The authentication device performs a prescribed authentication procedure with the supplicant and notifies a result thereof to a control server. In a case where an authentication procedure with the authentication device succeeds, the control server creates a first forwarding path between the supplicant and a destination node, and transmits a processing rule for a packet received or transmitted between the supplicant and a destination node, following the first forwarding path, in at least one forwarding node in the first forwarding path.

Abstract: A communication network includes a plurality of nodes and a plurality of links connecting between the nodes. A management computer managing the communication network has a storage means, an entry control means and a monitoring means. A route information indicating a transfer route of frames in the communication network is stored in the storage means. The monitoring means performs, based on the route information, transmission and reception of frames to and from the communication network. The entry control means instructs each node to set up a forwarding table indicating a correspondence relationship between an input source and a forwarding destination of frames. More specifically, the entry control means instructs the each node to set up the forwarding table such that frames are forwarded along the transfer route indicated by the route information.

Abstract: A communication system includes: a plurality of communication nodes; and a control apparatus that controls packet processing of the plurality of communication nodes. The control apparatus further includes: a virtualization unit that configures a virtual node(s) from a plurality of communication nodes among the plurality of communication nodes; a control unit that sets a processing rule for a packet in at least one communication node of the plurality of communication nodes included in the virtual node(s), so that the at least one communication node executes packet processing corresponding to an operation of the virtual node(s); and a path calculation unit that calculates a forwarding path of a packet, based on a virtual network topology including the virtual node(s). The plurality of communication nodes process a packet corresponding to the forwarding path, in accordance with the processing rule.

Abstract: In a client terminal of a communication system, a cipher session establishing section establishes a cipher session use connection between the client terminal as a source client terminal and a relay server by transmitting/receiving a cipher session establishment message between the source client terminal and the relay server, and notifies header information contained in a cipher session header to the relay server. A shared key managing section holds a client shared key with a destination client terminal, A data enciphering section performs encipherment of a data and/or MAC (Message Authentication Code) calculation of the data by using the client shared key and to output the performing result as a client cipher data. A message producing section produces a data communication message including a cipher data field in which the client cipher data is inserted and a non-cipher data field in which the cipher session header containing the header information is inserted.

Abstract: A communication system includes a first switch that refers to a first processing rule included in a packet and processes the packet in accordance with the first processing rule; a second switch that includes a table associating and storing an identifier and a second processing rule for a packet, refers to an identifier included in a packet, and processes the packet in accordance with a second processing rule associated with the identifier; and a control apparatus that stores the first processing rule and the identifier in a packet, associates and stores, in the table of the second switch, the identifier and the second processing rule.

Abstract: When a data link layer frame whose destination address has been designated as a multiple address is inputted from a tunneling source via a decapsulation unit 202, a destination processing unit 201 generates data link layer frames in which the destination address of the frame is replaced with each of one or more unicast addresses that are preset in a table unit 205 for a source address of the data link layer frame and outputs the generated frames to a local network 11.

Abstract: A multicast tree design apparatus designs a multicast tree by mathematical programming.