Abstract: This battery unit is a battery unit including a battery pack that houses a battery cell, and a water-cooling medium flow path formed outside a bottom surface of the battery pack, in which the water-cooling medium flow path is made of a Zn-based plated steel sheet, an inorganic film or a resin film is formed as a chemical conversion coating film on a surface of the Zn-based plated steel sheet, and the inorganic film contains a Si-based component or a Zr-based component as a main component.

Abstract: A non-linear processor, which subjects an input value from a feedback shift register storing an internal state of a stream cipher to non-linear processing to output a key stream, is connected to internal registers, which store output values from a non-linear substitution circuit which subjects the input value to non-linear substitution processing. The non-linear processor is provided with an exclusive-OR unit, which is at an input end of each of the internal registers and carries out an operation of a random number generated from part of values stored in the feedback shift register and the output value of the non-linear substitution circuit to mask the output value of the non-linear substitution circuit, and another exclusive-OR unit, which is provided at an output end of the internal register and performs an operation to unmask the value stored in the internal register.

Abstract: A stream-cipher encrypting method includes first step of expanding an initial key in advance to generate an expanded key by a key expanding unit, a second step of inputting the generated expanded key and an initial value in the initialization processing by an initialization processing unit to carry out the initialization processing, a third step by a key-sequence generating unit of inputting a feedback value from a non-linear unit after the initialization processing is finished, parallelly processing non-linear processing, and maintaining and processing rearranging processing and a multiplication result, which is for obtaining the feedback value, as a data table to generate a key sequence by a non-linear function, and a fourth step of carrying out an exclusive-OR operation of the generated key sequence and a plaintext to generate an encrypted text by an encrypted-text generating unit.

Abstract: A non-linear processor, which subjects an input value from a feedback shift register storing an internal state of a stream cipher to non-linear processing to output a key stream, is connected to internal registers, which store output values from a non-linear substitution circuit which subjects the input value to non-linear substitution processing. The non-linear processor is provided with an exclusive-OR unit, which is at an input end of each of the internal registers and carries out an operation of a random number generated from part of values stored in the feedback shift register and the output value of the non-linear substitution circuit to mask the output value of the non-linear substitution circuit, and another exclusive-OR unit, which is provided at an output end of the internal register and performs an operation to unmask the value stored in the internal register.

Abstract: A method, an apparatus and a program for detecting spoofed Internet Protocol (IP) traffic directed to a network having a plurality of autonomous systems (AS) is provided. The method comprises receiving an incoming packet through an AS, the incoming packet containing a source IP address and a destination IP address, acquiring a corresponding source and destination IP address prefixes, converting the corresponding source and destination IP address prefixes into a source AS number and a destination AS number, determining if the incoming packet arrived from an unexpected source based upon the corresponding destination IP address prefix and the converted source and destination AS number using an unexpected pair tuple table generated from network routing information and generating an alert indicating that the incoming packet is not allowed to enter the network.

Abstract: A method, an apparatus and a program for detecting spoofed Internet Protocol (IP) traffic directed to a network having a plurality of autonomous systems (AS) is provided. The method comprises receiving an incoming packet through an AS, the incoming packet containing a source IP address and a destination IP address, acquiring a corresponding source and destination IP address prefixes, converting the corresponding source and destination IP address prefixes into a source AS number and a destination AS number, determining if the incoming packet arrived from an unexpected source based upon the corresponding destination IP address prefix and the converted source and destination AS number using an unexpected pair tuple table generated from network routing information and generating an alert indicating that the incoming packet is not allowed to enter the network.

Abstract: A method and apparatus for detecting spoofed IP network traffic is presented. A mapping table is created to indicate correlations between IP address prefixes and AS numbers, based on routing information collected from a plurality of data sources. At each interface of a target network, IP address prefixes from a training traffic flow are acquired and further converted into AS numbers based on the mapping table. An EAS (Expected Autonomous System) table is populated by the AS numbers collected for each interface. The EAS table is used to determine if an operation traffic flow is allowed to enter the network.

Abstract: A water pump attachment structure of a water-cooled internal combustion engine is provided to facilitate the maintenance of a valve train. A water pump attachment structure of a water-cooled internal combustion engine includes a semicircular cut-away surface of a water pump holder opposed to a semicircular surface of a cylinder head to form a water pump support circular hole. Screw members are passed through respective screw through-holes of the cylinder head and threadedly engaged with internal thread holes of the water pump holder. Thus, the water pump holder is fastened to the cylinder head. A water pump is fitted into and secured to the water pump support circular hole. A cylinder head cover is attached to the cylinder head by allowing their mating surfaces to conform with each other with the water pump holder liquid-tightly sandwiched therebetween.

Abstract: A method and apparatus for detecting spoofed IP network traffic is presented. A mapping table is created to indicate correlations between IP address prefixes and AS numbers, based on routing information collected from a plurality of data sources. At each interface of a target network, IP address prefixes from a training traffic flow are acquired and further converted into AS numbers based on the mapping table. An EAS (Expected Autonomous System) table is populated by the AS numbers collected for each interface. The EAS table is used to determine if an operation traffic flow is allowed to enter the network.

Abstract: A water pump attachment structure of a water-cooled internal combustion engine is provided to facilitate the maintenance of a valve train. A water pump attachment structure of a water-cooled internal combustion engine includes a semicircular cut-away surface of a water pump holder opposed to a semicircular surface of a cylinder head to form a water pump support circular hole. Screw members are passed through respective screw through-holes of the cylinder head and threadedly engaged with internal thread holes of the water pump holder. Thus, the water pump holder is fastened to the cylinder head. A water pump is fitted into and secured to the water pump support circular hole. A cylinder head cover is attached to the cylinder head by allowing their mating surfaces to conform with each other with the water pump holder liquid-tightly sandwiched therebetween.

Abstract: A communication system and a security assurance device are proposed, which are capable of assuring that a target party for communication is implementing security countermeasures. A server 3 transmits information 104 necessary for AC issuance to a security assurance authority 2. The security assurance authority 2 verifies the security of the server 3 during communication based upon this information necessary for AC issuance 104. And, when the security of the server 3 during communication is confirmed, the security assurance authority 2 issues an AC 105 which proves the security of the server 3 during communication, and transmits it to the server 3. Upon receipt of this AC 105, the server 3 transmits the AC 105 to a client 4, according to a connection request from the client 4. And, upon receipt of this AC 105, the client 4 verifies the security during communication of the server 3, based upon the AC 105.

Abstract: The present invention provides systems and methods of cross-domain access control in which a client node (250) sends a request (250) for a resource to a resource server (260). In response, a local proxy server (270) automatically obtains a ticket having a revocation status (275) and forwards the ticket (275) to an authorization server (280) that communicates with the resource server (260) regarding access.

Abstract: A communication system and a security assurance device are proposed, which are capable of assuring that a target party for communication is implementing security countermeasures. A server 3 transmits information 104 necessary for AC issuance to a security assurance authority 2. The security assurance authority 2 verifies the security of the server 3 during communication based upon this information necessary for AC issuance 104. And, when the security of the server 3 during communication is confirmed, the security assurance authority 2 issues an AC 105 which proves the security of the server 3 during communication, and transmits it to the server 3. Upon receipt of this AC 105, the server 3 transmits the AC 105 to a client 4, according to a connection request from the client 4. And, upon receipt of this AC 105, the client 4 verifies the security during communication of the server 3, based upon the AC 105.

Abstract: The apparatus 10 is set on the line between the first and second computers 1,2 which respectively communicates by a protocol, such as TCP, having a flow control. The delay between the first computer 1 and a position, at which the apparatus 10 is set, is less than the delay between the position and the second computer 2. The apparatus 10 sends and receives a packet to/from the computers 1,2. The apparatus 10 transfers to the second computer 2, a data packet sent from the first computer 1 and being larger than a maximum data amount notified by the second computer 2. The apparatus 10 transfers, to the first computer 1, a data packet sent from the second computer 2, but does not transfer, to the first computer 1, an ACK packet sent from the second computer 2. The apparatus 10 generates, instead of the second computer 2, an ACK packet for a data packet sent from the first computer 1 and then sends the ACK packet to the first computer 1.

Abstract: The present invention provides systems and methods of cross-domain access control in which a client node (250) sends a request (250) for a resource to a resource server (260). In response, a local proxy server (270) automatically obtains a ticket having a revocation status (275) and forwards the ticket (275) to an authorization server (280) that communicates with the resource server (260) regarding access.

Abstract: A packet repeater (e.g., gateway) is applicable to an integrated digital network system which incorporates a first network (e.g., Internet) and a second network (e.g., satellite communication system) comprising an upstream line and a downstream line which are asymmetrical with respect to each other in data transmission speed. In the packet repeater, specific data (e.g., TCP data) are extracted from plural packets and are assembled together into a single transmission packet on the basis of the maximal amount of storable data, which is greater than the maximal segment size notified from a receiver under conditions in which the reception window size fulfills the maximal amount of storable data.

Abstract: To reliably prevent the occurrence of a pull out phenomenon in a magnetic driving pump of a vehicle internal combustion engine where permanent magnets, magnetized to have alternate N poles and S poles around an axis of a drive shaft and a driven shaft, are respectively fixed to the drive shaft and the driven shaft. The drive shaft is interlocked with a crankshaft and the driven shaft is coaxially mounted with the drive shaft. Furthermore, the permanent magnets are magnetized to have alternate N poles and S poles 90 degrees or 180 degrees in phase in a peripheral direction.

Abstract: To reliably prevent the occurrence of a pull out phenomenon in a magnetic driving pump of a vehicle internal combustion engine where permanent magnets, magnetized to have alternate N poles and S poles around an axis of a drive shaft and a driven shaft, are respectively fixed to the drive shaft and the driven shaft. The drive shaft is interlocked with a crankshaft and the driven shaft is coaxially mounted with the drive shaft. Furthermore, the permanent magnets are magnetized to have alternate N poles and S poles 90 degrees or 180 degrees in phase in a peripheral direction.

Abstract: In an externally pressurized gas bearing used as a thrust or a journal bearing, the shape of a gap formed therein is selected so that the gas flowing velocity reaches the sound velocity in a predetermined position within the gap and a supersonic gas flow is maintained at the outer edge of the bearing, whereby an increase in supply gas pressure gives rise to a corresponding increase in load capacity and rigidity.