Abstract: A packet transfer apparatus having: a flow detector 30 for identifying a flow to which an input packet belongs from header information of the input packet and outputting a flow bundle identifier peculiar to the identified flow or a flow bundle identifier common to the identified flow and at least another flow; and a controller 40 having an information table 43 including a plurality of information entries corresponding to the flow bundle identifier, for reading out one of the information entries from the information table on the basis the flow bundle identifier received from the flow detector performing a predetermined computing process.

Abstract: In a bandwidth policing apparatus which accommodates a large number of user groups, bandwidth policing for each user group is performed at high speed. When there is any extra bandwidth in bandwidth for a user group, the contracted committed information rate for each user is guaranteed invariably while using this effectively. The bandwidth policing apparatus accumulates packets of a plurality of user groups under bandwidth policing in the same packet accumulate FIFO. Also, for a packet which does not exceed the contracted bandwidth for each user, the contracted bandwidth for each user is guaranteed by deciding that the packet does not exceed the contracted bandwidth for each user group.

Abstract: A DNS Proxy unit (A12a) holds the domain name of an encrypted communication target node in a CUG setting table (A125a), intercepts a name resolution request for a communication partner node output from an application (A11x) to a DNS server (B1a), determines by looking up the CUG setting table (A125a) whether the communication partner is an encrypted communication target node, and if the communication partner is an encrypted communication target node, registers the IP address of the name-resolved communication partner in an encrypted communication path setting table (A142a). A data packet sent from the application (A11x) to the IP address is intercepted by a data transmission/reception unit (A14a). A data packet to an IP address registered in the encrypted communication path setting table (A142a) is encrypted by a communication encryption unit (A141a) and transmitted to the communication partner.

Abstract: In a bandwidth policing apparatus which accommodates a large number of user groups, bandwidth policing for each user group is performed at high speed. When there is any extra bandwidth in bandwidth for a user group, the contracted committed information rate for each user is guaranteed invariably while using this effectively. The bandwidth policing apparatus accumulates packets of a plurality of user groups under bandwidth policing in the same packet accumulate FIFO. Also, for a packet which does not exceed the contracted bandwidth for each user, the contracted bandwidth for each user is guaranteed by deciding that the packet does not exceed the contracted bandwidth for each user group.

Abstract: In one embodiment, a bandwidth monitoring device comprises a packet receiving circuit configured to receive packets; a counter configured to count a total packet length by adding up inputted packet lengths including a packet length of a next input packet and subtracting outputted packet lengths to produce a counted value; a timer configured to time a packet receiving time; a memory configured to store a number of packet receiving times and a number of counted values counted by the counter which correspond to the packet receiving times, respectively; a counter rate-of-change calculating portion configured to calculate a change rate by a first counted value corresponding to an oldest packet receiving time stored in the memory representing an oldest time at which a packet was received and a second counted value corresponding to a latest packet receiving time stored in the memory representing a latest time at which a packet was received; and a determining portion configured to decide whether the next input packet

Abstract: In a client terminal of a communication system, a cipher session establishing section establishes a cipher session use connection between the client terminal as a source client terminal and a relay server by transmitting/receiving a cipher session establishment message between the source client terminal and the relay server, and notifies header information contained in a cipher session header to the relay server. A shared key managing section holds a client shared key with a destination client terminal, A data enciphering section performs encipherment of a data and/or MAC (Message Authentication Code) calculation of the data by using the client shared key and to output the performing result as a client cipher data. A message producing section produces a data communication message including a cipher data field in which the client cipher data is inserted and a non-cipher data field in which the cipher session header containing the header information is inserted.

Abstract: A flow classifier having a flow CAM having plural flow entries, a search key generator for generating a search key of a format which differs by a flow condition, and a table holding a flow search result corresponding to an address of respective flow entry of CAM, in which access is made to CAM by the search key of a variable format including at least one header information item extracted from a packet header and the flow search result is obtained from the table in accordance with the address of the flow entry coinciding with the search key outputted from CAM to thereby constitute high speed formation of flow classifying by a variety of flow conditions.

Abstract: A flow classifier having a flow CAM having plural flow entries, a search key generator for generating a search key of a format which differs by a flow condition, and a table holding a flow search result corresponding to an address of respective flow entry of CAM, in which access is made to CAM by the search key of a variable format including at least one header information item extracted from a packet header and the flow search result is obtained from the table in accordance with the address of the flow entry coinciding with the search key outputted from CAM to thereby constitute high speed formation of flow classifying by a variety of flow conditions.

Abstract: An advertisement search agent detects a service that is provided by a node or a service that can be used by a node immediately after the node is newly connected to a domain. A message acquisition unit acquires an advertisement search message broadcast or multicast by a node connected to either one of a plurality of domains. A message database stores advertisement search messages acquired by the message acquisition unit. A node connection monitoring unit detects the connection of a node to either one of a plurality of domains. When the connection of a node is detected by the node connection monitoring unit, a delivery message extractor extracts an advertisement search message stored in the message database. A message delivery unit delivers the advertisement search message extracted by the delivery message extractor.

Abstract: If the communication partner of a client node (A1a) is an encryption communication target node (C1), a DNS Proxy unit (A12a) in the client node rewrites a response to a name resolution request for the communication partner node of an application from the actual IP address of the communication partner node to a loopback address that changes depending on the communication partner. On the basis of the destination loopback address of a data packet transmitted from the application, a communication encryption module (A13a) in the client node identifies the communication partner and the encryption communication path to be used for communication with the communication partner. Hence, encryption communication can simultaneously be executed directly with a plurality of communication partner nodes by using the communication encryption module that operates as an independent process.

Abstract: A packet forwarding apparatus which quickly selects a plurality of control information entries to be applied according to header information of an input packet and concurrently performs various the header processing functions. The packet forwarding apparatus comprises a flow retrieval unit which compares header information of the input packet with plural sets of flow identification conditions and concurrently outputs various flow identifiers appropriate to the input packet, various header processing units corresponding to the flow identifiers, and a packet forwarding control unit for controlling forwarding of input packets according to control information outputted from at least one of the header processing units. While each of the header processing units has an information table containing plural information entries, reads a single information entry from the information table according to the flow identifier outputted from the flow retrieval unit, and executes a prescribed arithmetic operation.

Abstract: Provided are composition and/or methods useful in preventing onset and/or recurrence of cardiovascular events, especially in patients who have escaped the unstable period after cardiovascular angioplasty or in hyperlipidemia patients who have been treated with HMG-CoA RI.

Abstract: A packet forwarding apparatus which quickly selects a plurality of control information entries to be applied according to header information of an input packet and concurrently performs various the header processing functions. The packet forwarding apparatus comprises a flow retrieval unit which compares header information of the input packet with plural sets of flow identification conditions and concurrently outputs various flow identifiers appropriate to the input packet, various header processing units corresponding to the flow identifiers, and a packet forwarding control unit for controlling forwarding of input packets according to control information outputted from at least one of the header processing units. While each of the header processing units has an information table containing plural information entries, reads a single information entry from the information table according to the flow identifier outputted from the flow retrieval unit, and executes a prescribed arithmetic operation.

Abstract: A packet transfer apparatus having: a flow detector 30 identifying a flow to which an input packet belongs from header information of the input packet and outputting a flow bundle identifier peculiar to the identified flow or a flow bundle identifier common to the identified flow and at least another flow; and a controller 40 having an information table 43 including a plurality of information entries corresponding to the flow bundle identifier, for reading out one of the information entries from the information table on the basis the flow bundle identifier received from the flow detector performing a predetermined computing process.

Abstract: A packet forwarding apparatus which quickly selects a plurality of control information entries to be applied according to header information of an input packet and concurrently performs various the header processing functions. The packet forwarding apparatus comprises a flow retrieval unit which compares header information of the input packet with plural sets of flow identification conditions and concurrently outputs various flow identifiers appropriate to the input packet, various header processing units corresponding to the flow identifiers, and a packet forwarding control unit for controlling forwarding of input packets according to control information outputted from at least one of the header processing units. While each of the header processing units has an information table containing plural information entries, reads a single information entry from the information table according to the flow identifier outputted from the flow retrieval unit, and executes a prescribed arithmetic operation.

Abstract: A packet transfer apparatus having: a flow detector 30 for identifying a flow to which an input packet belongs from header information of the input packet and outputting a flow bundle identifier peculiar to the identified flow or a flow bundle identifier common to the identified flow and at least another flow; and a controller 40 having an information table 43 including a plurality of information entries corresponding to the flow bundle identifier, for reading out one of the information entries from the information table on the basis of the flow bundle identifier received from the flow detector and performing a predetermined computing process.

Abstract: A temperature difference estimated value is found from a video signal using a temperature estimated value representing the temperature of the panel outer periphery of a display screen of a PDP and a reference value representing the temperature of the panel outer periphery of the PDP which is outputted from a panel periphery temperature setter by a temperature difference estimator, and the luminance of an image displayed on a display is controlled depending on the temperature difference estimated value by a controller and a brightness controller.

Abstract: A temperature difference estimated value is found from a video signal using a temperature estimated value representing the temperature of the panel outer periphery of a display screen of a PDP and a reference value representing the temperature of the panel outer periphery of the PDP which is outputted from a panel periphery temperature setter by a temperature difference estimator, and the luminance of an image displayed on a display is controlled depending on the temperature difference estimated value by a controller and a brightness controller.

Abstract: A temperature difference estimated value is found from a video signal using a temperature estimated value representing the temperature of the panel outer periphery of a display screen of a PDP and a reference value representing the temperature of the panel outer periphery of the PDP which is outputted from a panel periphery temperature setter by a temperature difference estimator, and the luminance of an image displayed on a display is controlled depending on the temperature difference estimated value by a controller and a brightness controller.

Abstract: A temperature difference estimated value is found from a video signal using a temperature estimated value representing the temperature of the panel outer periphery of a display screen of a PDP and a reference value representing the temperature of the panel outer periphery of the PDP which is outputted from a panel periphery temperature setter by a temperature difference estimator, and the luminance of an image displayed on a display is controlled depending on the temperature difference estimated value by a controller and a brightness controller.