Abstract: A DDoS handling device configured to handle communication directed to a target of a DDoS attack flowing in from an adjacent autonomous system in an autonomous system provided with a plurality of mitigating locations includes: a load distribution determination unit configured to determine whether or not to execute load distribution processing on the basis of an amount of available resources at mitigating locations corresponding to a gateway device into which the communication directed to the target flows and an amount of the communication directed to the target in a case in which at least one attack has been detected; a load distribution processing unit configured to decide mitigating locations to be used to handle the communication directed to the target from among the plurality of mitigating locations to solve shortage of resources at the mitigating locations for each attack, in a case in which the load distribution determination unit determines to execute the load distribution processing; and an attack hand

Abstract: An access analysis system includes: a first analysis unit that analyzes validity of a user based on a characteristic of an operation of a terminal by the user regarding access via a network; a second analysis unit that based on communication regarding the access, analyzes normality of the communication; and a determination unit that determines validity of the access based on an analysis result from the first analysis unit and an analysis result from the second analysis unit, thereby improving the accuracy of determining the validity of access via the network.

Abstract: A data transmission apparatus causes a computer to receive first data and second data, each of which has a different transmission destination, evaluate relevance between the first data and the second data, and transmit the first data and the second data to the respective transmission destinations, and the transmitting of the data further includes transmitting the first data to the transmission destination of the second data in accordance with evaluation results obtained in the evaluating of the relation, so that a diversity of the data that can be collected by the transmission destination of the data is increased.

Abstract: Communication quality is improved by performing, with a computer, determining whether redundancy of a communication path is necessary or not and a compression level of data based on communication quality associated with transfer of the data; compressing data to be transferred in accordance with the compression level determined; and a transmission step of, when it is determined that redundancy of the communication path is necessary, making the communication path redundant and transmitting the data to each of the resulting communication paths.

Abstract: A time providing method includes: by a computer, upon receiving data from a device, estimating a generation time of the data using a reception time of the data and a first delay time of the device previously estimated; providing information indicating the generation time to the data; and transmitting the data provided with the information indicating the generation time to a destination of the data.

Abstract: An information delivery technique for, at the time of delivery of area information via a network, delivering area information about a destination before a device arrives at the destination is disclosed. One aspect of the present disclosure is an information delivery apparatus including a delivery information management function unit configured to manage area information to be delivered, a destination management function unit configured to manage a destination of a device, and a communication function unit configured to deliver the area information to the device, wherein the destination management function unit determines the destination of the device using movement information about the device, and the communication function unit delivers area information about the destination to the device before the device moves to the destination.

Abstract: Communication quality is improved by performing, with a computer, a determination step of determining whether redundancy of a communication path is necessary or not and a compression level of data based on communication quality associated with transfer of the data; a compression step of compressing data to be transferred in accordance with the compression level determined in the determination step; and a transmission step of, when it is determined that redundancy of the communication path is necessary in the determination step, making the communication path redundant and transmitting the data to each of the resulting communication paths.

Abstract: In one aspect of the present invention, a transfer apparatus includes a reception unit configured to receive a packet from a source which distributes data according to a transmission control protocol (TCP); a storage unit configured to store data included in the received packet in a buffer based on a TCP sequence number of the received packet; a TCP transfer unit configured to transfer the received packet to a first sink which requests distribution according to the TCP; and a UDP transfer unit configured to read the data from the buffer and transfer the read data to a second sink which requests distribution according to a user datagram protocol (UDP).

Abstract: A data transmission apparatus causes a computer to receive first data and second data, each of which has a different transmission destination, evaluate relevance between the first data and the second data, and transmit the first data and the second data to the respective transmission destinations, and the transmitting of the data further includes transmitting the first data to the transmission destination of the second data in accordance with evaluation results obtained in the evaluating of the relation, so that a diversity of the data that can be collected by the transmission destination of the data is increased.

Abstract: An information delivery technique for, at the time of delivery of area information via a network, delivering area information about a destination before a device arrives at the destination is disclosed. One aspect of the present disclosure is an information delivery apparatus including a delivery information management function unit configured to manage area information to be delivered, a destination management function unit configured to manage a destination of a device, and a communication function unit configured to deliver the area information to the device, wherein the destination management function unit determines the destination of the device using movement information about the device, and the communication function unit delivers area information about the destination to the device before the device moves to the destination.

Abstract: A time providing method includes: by a computer, upon receiving data from a device, estimating a generation time of the data using a reception time of the data and a first delay time of the device previously estimated; providing information indicating the generation time to the data; and transmitting the data provided with the information indicating the generation time to a destination of the data.

Abstract: A data distribution system including a source configured to distribute data and a sink configured to process the distributed data includes a marker configured to receive a packet distributed by the source, add supplementary information to the received packet based on information obtained from a header of the packet, and transfer the packet; and a filter configured to receive the packet transferred by the marker, determine whether the received packet can be transferred to the sink based on the supplementary information added to the packet, transfer the packet to the sink if the packet can be transferred to the sink.

Abstract: A DDoS handling device configured to handle communication directed to a target of a DDoS attack flowing in from an adjacent autonomous system in an autonomous system provided with a plurality of mitigating locations includes: a load distribution determination unit configured to determine whether or not to execute load distribution processing on the basis of an amount of available resources at mitigating locations corresponding to a gateway device into which the communication directed to the target flows and an amount of the communication directed to the target in a case in which at least one attack has been detected; a load distribution processing unit configured to decide mitigating locations to be used to handle the communication directed to the target from among the plurality of mitigating locations to solve shortage of resources at the mitigating locations for each attack, in a case in which the load distribution determination unit determines to execute the load distribution processing; and an attack hand

Abstract: An access analysis system includes: a first analysis unit that analyzes validity of a user based on a characteristic of an operation of a terminal by the user regarding access via a network; a second analysis unit that based on communication regarding the access, analyzes normality of the communication; and a determination unit that determines validity of the access based on an analysis result from the first analysis unit and an analysis result from the second analysis unit, thereby improving the accuracy of determining the validity of access via the network.

Abstract: In one aspect of the present invention, a transfer apparatus includes a reception unit configured to receive a packet from a source which distributes data according to a transmission control protocol (TCP); a storage unit configured to store data included in the received packet in a buffer based on a TCP sequence number of the received packet; a TCP transfer unit configured to transfer the received packet to a first sink which requests distribution according to the TCP; and a UDP transfer unit configured to read the data from the buffer and transfer the read data to a second sink which requests distribution according to a user datagram protocol (UDP).

Abstract: A data distribution system including a source configured to distribute data and a sink configured to process the distributed data includes a marker configured to receive a packet distributed by the source, add supplementary information to the received packet based on information obtained from a header of the packet, and transfer the packet; and a filter configured to receive the packet transferred by the marker, determine whether the received packet can be transferred to the sink based on the supplementary information added to the packet, transfer the packet to the sink if the packet can be transferred to the sink.

Abstract: A service providing server collects call session information that identifies communication established between terminals and service usage IDs that identify the terminals for each terminal. Then, the service providing server identifies call session information pieces indicating the same communication and associates Web services with each other. When the service providing server provides the associated Web services to the terminals, the service providing server identifies service usage IDs that identify the terminals and control provision of the Web services so that each Web service is provided according to history information stored in a history information database in association with service usage IDs.

Abstract: Upon receipt of an access request from a Web terminal, a service providing server transmits a shop ID stored in an external information database to the Web terminal. When the shop ID is selected by the Web terminal, the service providing server acquires external connection destination information, and notifies a SIP proxy server of the information via the Web terminal. When notified of the information, the SIP proxy server identifies internal connection destination information in an internal information database, based on an IP address added at the time of the notification of the external connection destination information. After making a call to a telephone device with the use of the identified internal connection destination information, the SIP proxy server makes a call to the shop with the use of the external connection destination information. After that, the SIP proxy server establishes a connection between the telephone device and the shop.

Abstract: A service providing server collects call session information that identifies communication established between terminals and service usage IDs that identify the terminals for each terminal. Then, the service providing server identifies call session information pieces indicating the same communication and associates Web services with each other. When the service providing server provides the associated Web services to the terminals, the service providing server identifies service usage IDs that identify the terminals and control provision of the Web services so that each Web service is provided according to history information stored in a history information database in association with service usage IDs.

Abstract: Upon receipt of an access request from a Web terminal, a service providing server transmits a shop ID stored in an external information database to the Web terminal. When the shop ID is selected by the Web terminal, the service providing server acquires external connection destination information, and notifies a SIP proxy server of the information via the Web terminal. When notified of the information, the SIP proxy server identifies internal connection destination information in an internal information database, based on an IP address added at the time of the notification of the external connection destination information. After making a call to a telephone device with the use of the identified internal connection destination information, the SIP proxy server makes a call to the shop with the use of the external connection destination information. After that, the SIP proxy server establishes a connection between the telephone device and the shop.