Abstract: A mobile IP communication scheme in which the mobile computer can be operated using the mobile communication protocol such as Mobile IP even in the case where the home network is operated by the dynamic address allocation protocol such as DHCP is disclosed. The current location registration message to be transmitted by the mobile computer from the visited site to the mobile computer management device contains an information indicating that the dynamic address allocation has been received at the home network and an information capable of identifying the mobile computer, and the mobile computer management device carries out exchanges with the dynamic address management server on behalf of the mobile computer, so that the mobile computer which has received the dynamic address allocation at the home network can be operated at the visited site by using the mobile communication protocol.

Abstract: A mobile IP communication scheme in which the mobile computer can be operated using the mobile communication protocol such as Mobile IP even in the case where the home network is operated by the dynamic address allocation protocol such as DHCP is disclosed. The current location registration message to be transmitted by the mobile computer from the visited site to the mobile computer management device contains an information indicating that the dynamic address allocation has been received at the home network and an information capable of identifying the mobile computer, and the mobile computer management device carries out exchanges with the dynamic address management server on behalf of the mobile computer, so that the mobile computer which has received the dynamic address allocation at the home network can be operated at the visited site by using the mobile communication protocol.

Abstract: A scheme for managing nodes connected to a home network according to their physical location is disclosed. A communication device constituting each node is formed by at least one communication unit for carrying out communications through a connected network, having communication ports for connecting nodes through which data are to be exchanged by the nodes, and a configuration information memory unit for storing a configuration information regarding a configuration of the communication device, having a region for dynamically describing a location information regarding a physical location of the communication device.

Abstract: A communication control in a communication network system using a mobile computer, capable of realizing flexible address control and management for the mobile computer. When the mobile computer is located within a home network, a communication with the mobile computer is carried out by transferring data using a home address specific to the mobile computer which is a private address. When the mobile computer is located within an external own organization network, a communication with the mobile computer is carried out by routing data to the external own organization network using a care-of address indicating a current visited location of the mobile computer in the system which is a global address, and addressing the mobile computer within the external own organization network using the home address.

Abstract: A mobile supporting router device for realizing the handoff control associated with the moving in high speed is forms by at least one first interface connected with radio base stations, each capable of accommodating at least one mobile terminal; at least one second interface connected with a wire network; an information exchanging unit for exchanging a routing protocol on a network layer, through the second interface; a memory unit for storing information regarding a routing on the network layer based on the routing protocol exchanged by the information exchanging unit; a transfer unit for transferring datagram through the first interface according to the information regarding the routing on the network layer stored in the memory unit; a moving detection unit for detecting a moving of the mobile terminal among the radio base stations; and an information updating unit for updating the information regarding the routing on the network layer stored in the memory unit when the moving of the mobile terminal is dete

Abstract: A communication control in a communication network system using a mobile computer, capable of realizing flexible address control and management for the mobile computer. When the mobile computer is located within a home network, a communication with the mobile computer is carried out by transferring data using a home address specific to the mobile computer which is a private address. When the mobile computer is located within an external own organization network, a communication with the mobile computer is carried out by routing data to the external own organization network using a care-of address indicating a current visited location of the mobile computer in the system which is a global address, and addressing the mobile computer within the external own organization network using the home address.

Abstract: A light source device for a dielectric barrier discharge lamp including a dielectric barrier discharge lamp having a discharge space, the discharge space being filled with a discharge gas which produces excimers by a dielectric barrier discharge; first and second electrodes, a dielectric positioned between at least one of the first and second electrodes for inducing a discharge in the discharge gas, and a feed device for applying an essentially periodic AC high voltage to the first and second electrodes of the dielectric barrier discharge lamp. The feed device includes a setting mechanism for adjusting both the control frequency of the essentially periodic AC high voltage and the amplitude of the essentially periodic AC high voltage in accordance with a set control frequency.

Abstract: A packet processing and packet transfer scheme capable of reducing the packet processing overhead by eliminating a need to decrypt and re-encrypt the entire packet at a time of relaying encrypted packets. In a packet processing device for relaying encrypted packets, a packet transferred to the packet processing device is received, where the packet has a packet processing key to be used in a prescribed packet processing with respect to a data portion of the packet, and the packet processing key is encrypted by using a first master key shared between a last device that applied a cipher communication related processing to the packet and the packet processing device.

Abstract: A packet authentication and packet encryption/decryption scheme for a security gateway suitable for a hierarchically organized network system and a mobile computing environment. For the packet authentication, in addition to the end-to-end authentication at the destination side packet processing device, the link-by-link authentication at each intermediate packet processing device in the packet transfer route is used. For the packet encryption/decryption, each packet processing device determines whether or not to encrypt/decrypt the packet according to: an information on the computers which are directly managed by this packet processing device; or the encryption information and the signature information provided in the packet; or the encryption information, the signature information, and the encryption/decryption level information provided in the packer.

Abstract: A mobile computer and a packet encryption and authentication method which are capable of controlling an activation of a packet encryption and authentication device belonging to the mobile computer according to the security policy at the visited network of the mobile computer. The mobile computer is provided with a packet encryption and authentication unit having an ON/OFF switchable function for applying an encryption and authentication processing on input/output packets of the mobile computer.

Abstract: A mobile computing scheme capable of carrying out a proper packet transfer according to a current location of the mobile computer by accounting for the network operating policy. A mobile computer carries out a prescribed communication processing according to recognition results as to whether the mobile computer is located inside or outside the home network at which a mobile computer management device of the mobile computer is provided, and whether or not there exists a packet processing device which has a packet transmitted by at least one of the mobile computer and a correspondent computer as an encryption and authentication processing target.

Abstract: A packet transfer scheme for realizing a control of a packet inspection device to pass only packets from those mobile computers that can be recognized as authenticated among non-management target mobile computers that had moved inside the network, to outside the network.

Abstract: A packet authentication and packet encryption/decryption scheme for a security gateway suitable for a hierarchically organized network system and a mobile computing environment. For the packet authentication, in addition to the end-to-end authentication at the destination side packet processing device, the link-by-link authentication at each intermediate packet processing device in the packet transfer route is used. The link-to-link authentication data being inspected by intermediate nodes and end-to-end data (different from link-to-link data) being inspected by destination node but not being inspected by intermediate nodes.

Abstract: A scheme for realizing a high speed data transfer between memory spaces shared among computers in a distributed computer system, without requiring a complicated and inefficient communication protocol processing at the computer side. One region which is at least a part of a virtual memory space or a real memory space managed by one computer and another region which is at least a part of a virtual memory space or a real memory space managed by another computer are shared between these two computers, and a dedicated virtual connection is set up between these two shared regions. Then, a data transfer between these two shared regions is carried out by using the dedicated virtual connection. A virtual connection identifier of the dedicated virtual connection is registered into a corresponding page table entry in the page table, so that this virtual connection identifier can be obtained at a time of the data transfer by referring to the page table alone.

Abstract: A data transfer method and a memory management system capable of improving a data transfer efficiency for data transfer between a device interface and a user space. A data transfer method and a memory management system capable of frame buffer, or (another) device interface, and for data transfer between processes. A data transfer from a transfer source device interface to a transfer destination user space, frame buffer, or (another) device interface is controlled according to an access control information provided in a kernel space, which indicates a permitted access with respect to a data block for the transfer source device interface. A data transfer between processes is controlled according to an access control information indicating a permitted access with respect to a physical page storing a transfer data, by changing a mapping between the physical page and a virtual page according to the access control information.

Abstract: A user identification data management scheme for a networking computer systems formed by a plurality of computers which are mutually connected through a network. In this scheme, at each computer, whether an access request from a user at another computer to each computer is to be permitted or not is judged, and access permission data necessary in checking whether a communication to each computer is from one user at one computer from which an access to each computer by that one user is permitted is generated. The generated access permission data are then stored in a memory. Then, whether an access to each computer is directly made at each computer or indirectly made from another computer through the network is detected, whether that access is proper or not is judged in a case that access is indirectly made, and that access is permitted in a case that access is judged as proper, according to the access permission data stored in the memory.

Abstract: A program execution and operation right management system capable of providing flexible and sufficient protection uniformly even for the thread operation instructions among the threads sharing the same virtual address space and/or for individual memory region. In the system, operation right data indicating which thread can be operated by which thread among a plurality of threads are stored, and whether a thread operation with respect to one thread requested by another thread among a plurality of threads is allowed by the operation right data is judged. Then, the processor is allowed to carry out said thread operation with respect to that one thread by that another thread only when it is judged that said thread operation is allowed by the operation right data.

Abstract: A memory management and protection system for realizing a high speed execution and a proper and flexible memory access control for multiple programs sharing an identical logical address space. In the system, the memory access is permitted according to a segment identifier identifying a segment in the logical address space, and a memory protection information for a region in each segment including a target right permission to indicate assigned rights to make a memory access from the region to each of the segments, and an execution permission to indicate a type of the memory access permitted by the right permission. Alternatively, a memory access can be permitted by using an access control list to be attached to each address table entry, which stores a plurality of program numbers identifying programs which are permitted to make accesses to the logical address stored in each address table entry, among which one that matches with the current program number is to be searched.

Abstract: A portable file system capable of sharing data among various computer environments, such that a user can freely utilize his own data under various computer environments. The system includes at least one portable data processing device having a memory unit for storing file data and file management data of portable side files; at least one stationary data processing device having a processing unit for executing desired processing by making accesses to the portable side files; and a conversion unit for converting at least one of the file data and the file management data of each requested file among the portable side files for which a file access request is issued by the processing unit into a form suitable for the stationary data processing device, such that the processing unit makes an access to each requested file among the portable side files according to converted file data/file management data obtained by the conversion unit.

Abstract: A single virtual space management scheme suitable for a distributed system. The single virtual space for arranging programs and/or data among a plurality of computers forming the distributed system are divided into a plurality of regions called memory chapters, and a part of the single virtual space to be managed independently by each computer is requested from each computer in units of these memory chapters. Then, a server allocates one of the memory chapters to each computer in response to each request from each computer, while managing allocations of the memory chapters to the plurality of computers so as not to allocate each one of the memory chapters to more than one computers. Each memory chapter allocated to each computer is independently managed by further dividing each memory chapter into a plurality of sub-regions called memory sections, and carrying out an access protection in units of these memory sections at each computer.