Abstract: According to an embodiment, a communication device includes an analyzer, a switching unit and a communication unit. The analyzer is configured to analyze an image taken at a periphery of the communication device. The switching unit is configured to switch a communication counterpart from a first communication device to a second communication device based on an analysis result of the image. The communication unit is configured to communicate with the second communication device after switching.

Abstract: An information processing apparatus has a communication part, a message receiving part, a network-information acquiring part, a peripheral-apparatus information managing part, a task accepting part, a task allocating part, a task processing part, a process-related information generating part, and a message transmitting part configured to generate a message that includes the process-related information and transmit the message including the process-related information to the other communication apparatuses via the communication part and the network.

Abstract: According to an embodiment, a communication device includes a version storage unit, a receiving unit, a determining unit, and a command processing unit. The version storage unit is configured to store therein the first version information. The receiving unit is configured to receive a command including the second version information. The determining unit is configured to determine whether a version represented by the second version information is a next version after a version represented by the first version information. The command processing unit is configured to, based on a determination result of the determining unit and decision information that defines processes corresponding to a command and the determination result, execute processes corresponding to a received command.

Abstract: The preferred embodiments involve a mechanism to bootstrap Kerberos from EAP in which EAP is used for initial network access authentication and Kerberos is used for provisioning session keys to multiple different protocols. The preferred embodiments make use of an EAP extension method (EAP-EXT) to realize the mechanism.

Abstract: This present application relates to, among other things, Key Caching, QoS and Multicast extensions and improvements to the Media-independent Pre-Authentication (MPA) framework, a new handover optimization mechanism that has a potential to address issues on existing mobility management protocols and mobility optimization mechanisms. MPA is a mobile assisted, secure handover optimization scheme that works over any link-layer and with any mobility management protocol.

Abstract: According to some embodiments, systems and methods for binding dynamic host configuration and network access authentication are provided related to, inter alia, interactions between a PAA (PANA Authentication Agent) and a DHCP (Dynamic Host Configuration Protocol) server, such as, e.g., for synchronization between the PANA SA state and the DHCP SA state, such as, e.g., maintaining synchronization when a connection is lost. In some embodiments, systems and methods for binding network bridge and network access authentication are also provided related to, inter alia, interactions between a PAA and a layer-2 switch, such as, e.g., for avoiding service thefts and the like (such as, e.g., MAC address and/or IP address spoofing) in the context of, e.g., the above. In some other embodiments, systems and methods for bootstrapping multicast security from network access authentication protocol are also provided related to, inter alia, key management for protected IP multicast streams, such as, e.g.

Abstract: According to an embodiment, a communication apparatus establishes communication with an external apparatus through a higher-level device. The communication apparatus includes a main processor and a key generator. The main processor receives a data authentication request including data to be authenticated, a first key specification, and a message authentication algorithm identifier from the higher-level device. The key generator retains a key hierarchy used by an authentication protocol that is used between the higher-level device and the external apparatus, and to generate a first key by use of the key hierarchy and the first key specification. The main processor generates a message authentication code for the data to be authenticated by use of the message authentication algorithm, which is identified by the message authentication algorithm identifier, and the first key, and transmits a data authentication response including the message authentication code to the higher-level device.

Abstract: This document describes an EAP method used for extending EAP functionality. The extended functionality includes channel binding and re-authentication. The EAP method also allows sequencing of multiple EAP methods inside it.

Abstract: The communication unit transmits and receives a communication message. The authentication processor performs an authentication process for establishing the network connection by transmitting and receiving an authentication message to and from an authentication server through the communication unit. The encryption information generator generates an encryption key shared with the authentication server when the authentication process is successfully completed. The first message generator generates a first communication message instructing the destination device to acquire the encryption key from the authentication server. The second message generator generates a second communication message including data to be transmitted to the destination device. The communication unit transmits the first communication message to the destination device, encrypts the second communication message with the encryption key, and transmits an encrypted second communication message to the destination device.

Abstract: According to some of the preferred embodiments, a method for proactively establishing a security association between a mobile node in a visiting network and an authentication agent in another network to which the mobile node can move includes: negotiating pre-authentication using a flag in a message header that indicates whether the communication is for establishing a pre-authentication security association; and one of the mobile node and the authentication agent initiating pre-authentication by transmitting a message with the flag set in its message header, and the other of the mobile node and the authentication agent responding with the flag set in its message header only if it supports the pre-authentication.

Abstract: An optical sensor includes: a light emission module to emit a linearly polarized light beam having a first polarizing direction to a surface of an object in an incident direction inclined relative to a direction of a normal to the surface; a first photodetector module including a first photodetector disposed within a plane of incidence of the surface in an optical path inclined relative to an optical path of a light beam emitted from the light emission module and regularly reflected on the surface; and a second photodetector module including an optical element disposed within the plane of incidence of the surface in an optical path of a diffused reflection light beam from the surface to separate a linearly polarized light beam having a second polarizing direction perpendicular to the first polarizing direction, and a second photodetector to receive the light beam separated by the optical element.

Abstract: An optical sensor includes an irradiation system emitting linearly polarized light of a first polarization direction toward a surface of an object from an incident direction inclined with respect to a normal to the surface; a first light detection system including a first light detector placed on a light path of light emitted from the irradiation system and specularly reflected by the object; and a second light detection system including a separation optical element placed on a light path of light diffusely reflected by the object, on a plane of incidence of the object, and extracting a linearly polarized light component of the first polarization direction included in the light diffusely reflected by the object, a second light detector receiving the linearly polarized light component of the first polarization direction extracted by the separation optical element and a third light detector receiving the light diffusely reflected by the object.

Abstract: An optical sensor is disclosed, including an irradiating system; a first photodetecting system including a first photodetector which is arranged on an optical path of a light which is specularly reflected from a subject; a second photodetecting system including an optical element which is arranged on an optical path of a light which is diffuse reflected from the subject within an incident face in the subject and which separates a linearly polarized component in a second polarizing direction which is orthogonal to a first polarizing direction and a second photodetector which receives a light separated by the optical element; and a restricting member which is arranged on an optical path of an incident light with respect to at least one of the first photodetector and the second photodetector and which restricts a light receiving range in the at least one photodetector.

Abstract: An optical sensor is disclosed. The optical sensor includes an irradiating system which irradiates a linearly polarized light; a first photodetecting system including a first photodetector which is arranged on an optical path of a light which is specularly reflected from a subject; a second photodetecting system including an optical element which is arranged on an optical path of a light which is diffuse reflected from the subject within an incident face in the subject and which separates a linearly polarized component in a second polarizing direction which is orthogonal to a first polarizing direction and a second photodetector which receives a light separated by the optical element, wherein an angle of taking in the light in the first photodetector and an angle of taking in the light in the second photodetector are mutually different.

Abstract: An optical sensor is disclosed. The optical sensor includes a light source in which a semiconductor laser having multiple light-emitting units is sealed with one resin member; a light source driving unit which causes the multiple light-emitting units to emit light; and at least one photodetector which detects a light amount of a light which is emitted from the multiple light-emitting units and is reflected from a subject.

Abstract: A system for proactively authenticating includes a server having media independent access functions including media independent authentication functions that authenticates other entities attached via an interface to an end of a link specific to a media. A plurality of heterogeneous networks each having media specific access functions including authentication functions corresponding to the other entities attached via the interface to the end of the link specific to the media and mobile devices connected to the plurality of heterogeneous networks, and the server having predefined media independent handover protocols and media independent handover identities based on the media independent functions related to handover, in which the server authenticates candidate access networks prior to the handover of the mobile devices from serving access networks to the candidate access networks each of which belonging to the plurality of heterogeneous access networks having the link specific to the media.

Abstract: A wireless authentication terminal that connects to a network via a wireless base station, the wireless authentication terminal comprises a communication unit that performs communication compliant with IEEE802.15.4, an authentication processing unit that transmits and receives communication messages and performs authentication processing for connecting to a network, a filter processing unit that changes the communication messages allowed to pass through between the communication unit and the authentication processing unit, an encryption level determination unit that determines a level at which the communication unit encrypts the communication message, and a control unit that controls an operation state of the filter processing unit and the encryption level determination unit based on the phase of the authentication processing in the authentication processing unit.

Abstract: There is provided an authentication server including: a network access authenticating unit and an address notifying unit wherein the network access authenticating unit receives, from an authentication relay connected to a network, a first authentication message for a communication device existing under the authentication relay, and execute network access authentication process with the communication device, and the address notifying unit notifies the communication device of the server's address information in accordance with a result of the network access authentication process.

Abstract: This document describes a proactive mechanism to provide fast-handover involving PMIPv6. In particular, it describes how one can achieve fast handoff for PMIPv6 using Media-independent Pre-Authentication (MPA) technique. It discusses the need for a fast-handoff for PMIPv6 environment. It then describes how MPA techniques could be used during different steps involving both intra-domain and inter-domain handoff for PMIPv6. MPA-based fast-handover takes advantage of the pre-authentication mechanism so that the mobile can perform the access authentication while in the previous local mobility (PMA) domain and thus would be able to complete many of the handoff related operations while still in the previous network.

Abstract: According to an embodiment, a communication apparatus establishes communication with an external apparatus through a higher-level device. The communication apparatus includes a main processor and a key generator. The main processor receives a data authentication request including data to be authenticated, a first key specification, and a message authentication algorithm identifier from the higher-level device. The key generator retains a key hierarchy used by an authentication protocol that is used between the higher-level device and the external apparatus, and to generate a first key by use of the key hierarchy and the first key specification. The main processor generates a message authentication code for the data to be authenticated by use of the message authentication algorithm, which is identified by the message authentication algorithm identifier, and the first key, and transmits a data authentication response including the message authentication code to the higher-level device.