公开(公告)号：US20110239284A1

公开(公告)日：2011-09-29

申请号：US13018975

申请日：2011-02-01

申请人： Tadashi Kaji ,  Naoki Hayashi ,  Akifumi Yato ,  Shinichi Irube

发明人： Tadashi Kaji ,  Naoki Hayashi ,  Akifumi Yato ,  Shinichi Irube

IPC分类号： G06F21/00

CPC分类号： H04L63/0815 ,  G06F21/305 ,  G06F21/46 ,  G06F21/6263

摘要： An ID bridge service system manages a type and assurance of identity information required for provision of service by an application service system and a type and assurance of identity information managed by plural authentication service systems, and is provided with a selecting measure that selects an authentication service system that manages identity information corresponding to the identity information required for the provision of the service by the application service system out of the plural authentication service systems when a request for authentication is received from the application service system and a requesting measure that requests the selected authentication service system to authenticate.

摘要翻译： ID桥服务系统管理由应用服务系统提供服务所需的身份信息的类型和保证以及由多个认证服务系统管理的身份信息的类型和保证，并且具有选择认证服务的选择措施 系统，当从应用服务系统接收到认证请求时，管理与多个认证服务系统中的应用服务系统提供服务所需的身份信息相对应的身份信息，以及请求所选认证的请求度量 服务体系认证。

公开(公告)号：US08402524B2

公开(公告)日：2013-03-19

申请号：US13018975

申请日：2011-02-01

申请人： Tadashi Kaji ,  Naoki Hayashi ,  Akifumi Yato ,  Shinichi Irube

发明人： Tadashi Kaji ,  Naoki Hayashi ,  Akifumi Yato ,  Shinichi Irube

IPC分类号： G06F7/04 ,  G06F15/16 ,  G06F17/30 ,  H04L29/06

CPC分类号： H04L63/0815 ,  G06F21/305 ,  G06F21/46 ,  G06F21/6263

摘要： An ID bridge service system manages a type and assurance of identity information required for provision of service by an application service system and a type and assurance of identity information managed by plural authentication service systems, and is provided with a selecting measure that selects an authentication service system that manages identity information corresponding to the identity information required for the provision of the service by the application service system out of the plural authentication service systems when a request for authentication is received from the application service system and a requesting measure that requests the selected authentication service system to authenticate.

摘要翻译： ID桥服务系统管理由应用服务系统提供服务所需的身份信息的类型和保证以及由多个认证服务系统管理的身份信息的类型和保证，并且具有选择认证服务的选择措施 系统，当从应用服务系统接收到认证请求时，管理与多个认证服务系统中的应用服务系统提供服务所需的身份信息相对应的身份信息，以及请求所选认证的请求度量 服务体系认证。

公开(公告)号：US20120198039A1

公开(公告)日：2012-08-02

申请号：US13201574

申请日：2010-02-15

申请人： Naoki Hayashi ,  Tadashi Kaji ,  Akifumi Yato ,  Dan Yamamoto ,  Shinichi Irube

发明人： Naoki Hayashi ,  Tadashi Kaji ,  Akifumi Yato ,  Dan Yamamoto ,  Shinichi Irube

IPC分类号： G06F15/173

CPC分类号： H04L67/02 ,  H04L29/12754 ,  H04L61/3085 ,  H04L67/1002 ,  H04L67/1014

摘要： A processing load on service is distributed to improve the availability of linkage service even if the details of the processing of the linkage service are unknown. A service dynamic linkage device (110) sequentially selects pieces of web service which can be executed on the basis of dependence relationship information having identified a web server which should have already been executed among pieces of web service included in a scenario, the execution of which has been requested from a user-side communication terminal (140), and repeatedly performs processing to be executed until there are no pieces of web service included in the scenario.

摘要翻译： 分配服务的处理负荷，以提高链接服务的可用性，即使链接服务的处理细节未知。 服务动态联动装置（110）依次选择可以基于已经在包含在场景中的多个web服务中已经执行的web服务器的依赖关系信息执行的web服务，其执行 已经从用户侧通信终端（140）请求，并且重复执行要执行的处理，直到在场景中没有包括web服务的片段。

公开(公告)号：US07657035B2

公开(公告)日：2010-02-02

申请号：US11504767

申请日：2006-08-16

申请人： Akifumi Yato ,  Tadashi Kaji ,  Osamu Takata ,  Takahiro Fujishiro ,  Kazuyoshi Hoshino

发明人： Akifumi Yato ,  Tadashi Kaji ,  Osamu Takata ,  Takahiro Fujishiro ,  Kazuyoshi Hoshino

IPC分类号： H04L9/00 ,  H04L29/06

CPC分类号： H04L63/0428 ,  H04L9/083 ,  H04L9/0869 ,  H04L63/20

摘要： Each terminal registers the key generation information into each session management server, the information including a plurality of setting items necessary for determining set values to generated a key to be used by itself, and set value candidates which are stored in the setting items.When the encryption communications are established between the terminals, the individual session management servers and a key generation information management server are associated, so that the key generation information management server selects the algorithm suite based on the key generation information. The session management server generates the parameters based on the selected algorithm suite, acquires the information on the selected algorithm suite from the key generation information management server, generates the key for the encryption communications based on that information and distributes the key to the each terminal.

摘要翻译： 每个终端将密钥生成信息注册到每个会话管理服务器中，该信息包括确定设置值所需的多个设置项目以产生要自己使用的密钥，并设置存储在设置项目中的值候选。 当在终端之间建立加密通信时，各个会话管理服务器和密钥生成信息管理服务器相关联，使得密钥生成信息管理服务器基于密钥生成信息来选择算法套件。 会话管理服务器根据选择的算法套件生成参数，从密钥生成信息管理服务器获取所选算法套件的信息，根据该信息生成加密通信的密钥，并将密钥分配给每个终端。

公开(公告)号：US20070192587A1

公开(公告)日：2007-08-16

申请号：US11504767

申请日：2006-08-16

申请人： Akifumi Yato ,  Tadashi Kaji ,  Osamu Takata ,  Takahiro Fujishiro ,  Kazuyoshi Hoshino

发明人： Akifumi Yato ,  Tadashi Kaji ,  Osamu Takata ,  Takahiro Fujishiro ,  Kazuyoshi Hoshino

IPC分类号： H04L9/00

CPC分类号： H04L63/0428 ,  H04L9/083 ,  H04L9/0869 ,  H04L63/20

摘要： Each terminal registers the key generation information into each session management server, the information including a plurality of setting items necessary for determining set values to generated a key to be used by itself, and set value candidates which are stored in the setting items. When the encryption communications are established between the terminals, the individual session management servers and a key generation information management server are associated, so that the key generation information management server selects the algorithm suite based on the key generation information. The session management server generates the parameters based on the selected algorithm suite, acquires the information on the selected algorithm suite from the key generation information management server, generates the key for the encryption communications based on that information and distributes the key to the each terminal.

摘要翻译： 每个终端将密钥生成信息注册到每个会话管理服务器中，该信息包括确定设置值所需的多个设置项目以产生要自己使用的密钥，并设置存储在设置项目中的值候选。 当在终端之间建立加密通信时，各个会话管理服务器和密钥生成信息管理服务器相关联，使得密钥生成信息管理服务器基于密钥生成信息来选择算法套件。 会话管理服务器根据选择的算法套件生成参数，从密钥生成信息管理服务器获取所选算法套件的信息，根据该信息生成加密通信的密钥，并将密钥分配给每个终端。

公开(公告)号：US20120084351A1

公开(公告)日：2012-04-05

申请号：US13207896

申请日：2011-08-11

申请人： Akifumi YATO ,  Tadashi KAJI ,  Naoki HAYASHI ,  Shinichi IRUBE

发明人： Akifumi YATO ,  Tadashi KAJI ,  Naoki HAYASHI ,  Shinichi IRUBE

IPC分类号： G06F15/16

CPC分类号： G06Q10/101 ,  G06Q10/103 ,  H04L29/12754 ,  H04L61/3085

摘要： A user interaction type service collaboration system, in which a user terminal calls Web service provisioning servers in sequence via a Web portal server and a service scenario execution server, and each Web service provisioning server carries out interaction processing with the user terminal, is provided with a callback control server having: a callback control part responding to reception, from the Web service provisioning server, of the callback request accompanied by a callback user ID, and transmitting an interaction processing start request to the user terminal using an ID identifying the user terminal or a session due to the user terminal; and a callback ID management part associating and managing IDs and callback user IDs and acquiring IDs corresponding to callback user IDs.

摘要翻译： 一种用户交互型服务协作系统，其中用户终端经由门户网站服务器和服务场景执行服务器依次调用Web服务提供服务器，并且每个Web服务提供服务器与用户终端进行交互处理都被提供 回叫控制服务器，其具有响应于来自Web服务提供服务器的伴随回叫用户ID的回叫请求的回叫控制部分，并且使用识别用户终端的ID向用户终端发送交互处理开始请求 或由于用户终端的会话; 以及回调ID管理部分，关联并管理ID和回拨用户ID并获取与回叫用户ID相对应的ID。

公开(公告)号：US20080256224A1

公开(公告)日：2008-10-16

申请号：US12071592

申请日：2008-02-22

申请人： Tadashi Kaji ,  Takahiro Fujishiro ,  Akifumi Yato ,  Kazuyoshi Hoshino ,  Munetoshi Tsuge

发明人： Tadashi Kaji ,  Takahiro Fujishiro ,  Akifumi Yato ,  Kazuyoshi Hoshino ,  Munetoshi Tsuge

IPC分类号： G06F15/16

CPC分类号： H04L65/1046 ,  H04L67/1002 ,  H04L67/1027 ,  H04L67/14

摘要： A data communication system is provided that is capable of increasing or decreasing the number of session management servers flexibly, and is further capable of implementing data communication while distributing the message processing load in the session management server. The data communication system includes multiple communication devices which perform data communications mutually, multiple session management servers which manage sessions of data communication between the communication devices, and a load balancer which assigns the session management servers for processing a message received from the communication device according to a predetermined criterion, wherein, the session management server is provided with a unit for managing a currently logged-in communication device and a state of the communication performed by the communication device, and a unit for acquiring information necessary for performing communication with the communication device.

摘要翻译： 提供能够灵活地增加或减少会话管理服务器的数量的数据通信系统，并且还能够在会话管理服务器中分发消息处理负载的同时实现数据通信。 数据通信系统包括相互执行数据通信的多个通信设备，管理通信设备之间的数据通信会话的多个会话管理服务器和分配会话管理服务器的负载平衡器，用于处理从通信设备接收的消息，根据 预定标准，其中，会话管理服务器设置有用于管理当前登录的通信设备的单元和由通信设备执行的通信的状态，以及用于获取与通信设备进行通信所需的信息的单元 。

公开(公告)号：US20120254942A1

公开(公告)日：2012-10-04

申请号：US13369884

申请日：2012-02-09

申请人： Naoki Hayashi ,  Tadashi Kaji ,  Akifumi Yato ,  Shinichi Irube

发明人： Naoki Hayashi ,  Tadashi Kaji ,  Akifumi Yato ,  Shinichi Irube

IPC分类号： G06F21/00

CPC分类号： G06F9/505

摘要： A connection destination determination device includes a control unit for performing an approval determination process to determine that a user authentication state in a connection destination request is approved if the user authentication state satisfies the user authentication state corresponding to a collaboration service. If the user authentication state is determined to be approved in the approval determination process, the control unit responds to a source of the connection destination determination request with the connection destination of service corresponding to the collaboration service which is the search key. If the user authentication state is not determined to be approved in the approval determination process, the control unit responds to the source of the connection destination determination request with the connection destination of authentication service, in order to obtain the user authentication state that does not satisfy the user authentication state corresponding to the collaboration service which is the search key.

摘要翻译： 连接目的地确定装置包括控制单元，用于执行批准确定处理以确定如果用户认证状态满足与协作服务对应的用户认证状态，则连接目的地请求中的用户认证状态被批准。 如果在批准确定处理中确定用户认证状态被批准，则控制单元使用与作为搜索关键字的协作服务相对应的服务连接目的地来响应连接目的地确定请求的源。 如果在批准确定处理中没有确定用户认证状态被批准，则控制单元用认证服务的连接目的地对连接目的地确定请求的源进行响应，以获得不满足的用户认证状态 与作为搜索关键字的协作服务对应的用户认证状态。

公开(公告)号：US20120254935A1

公开(公告)日：2012-10-04

申请号：US13358600

申请日：2012-01-26

申请人： Akifumi YATO ,  Tadashi KAJI ,  Naoki HAYASHI ,  Shinichi IRUBE

发明人： Akifumi YATO ,  Tadashi KAJI ,  Naoki HAYASHI ,  Shinichi IRUBE

IPC分类号： G06F21/00

CPC分类号： H04L9/321 ,  H04L63/08 ,  H04L63/0807 ,  H04L63/0815 ,  H04L63/205 ,  H04L2463/082

摘要： An authentication collaboration server of an authentication collaboration system performs a secrecy calculation process using authentication information as input for an authentication process, generating secret authentication information for each piece of the authentication information. An authentication information verification server obtains and compares sets of the combination of secret authentication information generated by the authentication server, and a user ID identifying a user of a user terminal using the authentication information that is a source of the secret authentication information. The authentication information verification server extracts the plurality of pieces of authentication information that have been applied. The authentication collaboration server approves a service, when a user authentication state is removed as authentication results constituting the user authentication state satisfies the policy for the service, after an authentication result in which application of the authentication information has occurred. A collaboration service is achieved including multiple low cost Web services.

摘要翻译： 认证协作系统的认证协作服务器使用认证信息作为认证处理的输入进行秘密计算处理，生成每条认证信息的秘密认证信息。 认证信息验证服务器使用认证信息的来源获取并比较由认证服务器生成的秘密认证信息的组合和识别用户终端的用户的用户ID。 认证信息验证服务器提取已经应用的多条认证信息。 认证协作服务器在认证结果发生了认证信息的认证结果之后，当构成用户认证状态的认证结果满足服务的策略时，当用户认证状态被去除时，认证协作服务器批准服务。 实现了多个低成本Web服务的协作服务。

公开(公告)号：US20080219445A1

公开(公告)日：2008-09-11

申请号：US11984676

申请日：2007-11-20

申请人： Akifumi Yato ,  Tadashi Kaji ,  Takahiro Fujishiro ,  Yoko Hashimoto ,  Kazuyoshi Hoshino

发明人： Akifumi Yato ,  Tadashi Kaji ,  Takahiro Fujishiro ,  Yoko Hashimoto ,  Kazuyoshi Hoshino

IPC分类号： H04L9/00 ,  H04K1/00

CPC分类号： H04L63/0428 ,  H04L63/1408

摘要： A communications audit support system is provided, which makes it possible to audit communications of an arbitrary encrypted communication session at any time. The communications audit support system of the present invention stores key information used for encrypted communication in a key management DB in association with a key ID each time the key information is created, stores IP addresses of a user terminal and a service providing server which perform an encrypted communication session using the key information in a communication state management DB in association with the key ID, and stores an encrypted packet sent in an encrypted communication session in a packet DB in association with IP addresses of a sender and a receiver of the encrypted packet.

摘要翻译： 提供通信审计支持系统，使得可以随时审核任意加密通信会话的通信。 本发明的通信审计支持系统在每次创建密钥信息时，与密钥ID相关联地将用于加密通信的密钥信息存储在密钥管理DB中，存储执行密钥信息的用户终端和服务提供服务器的IP地址 使用与密钥ID相关联的通信状态管理DB中的密钥信息的加密通信会话，并且将加密通信会话中发送的加密分组与加密分组的发送者和接收者的IP地址相关联地存储在分组DB中 。