[go: up one dir, main page]

WO2008123015A1 - 通信システム、信頼通信機構及びそれらに用いる通信方法 - Google Patents

通信システム、信頼通信機構及びそれらに用いる通信方法 Download PDF

Info

Publication number
WO2008123015A1
WO2008123015A1 PCT/JP2008/000484 JP2008000484W WO2008123015A1 WO 2008123015 A1 WO2008123015 A1 WO 2008123015A1 JP 2008000484 W JP2008000484 W JP 2008000484W WO 2008123015 A1 WO2008123015 A1 WO 2008123015A1
Authority
WO
WIPO (PCT)
Prior art keywords
server
client
communication
user terminal
mediation server
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/JP2008/000484
Other languages
English (en)
French (fr)
Inventor
Hiroshi Kitamura
Shigeyoshi Shima
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NEC Corp
Original Assignee
NEC Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by NEC Corp filed Critical NEC Corp
Priority to JP2009508876A priority Critical patent/JP5299269B2/ja
Priority to US12/530,440 priority patent/US8510822B2/en
Publication of WO2008123015A1 publication Critical patent/WO2008123015A1/ja
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0884—Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2129—Authenticate client device independently of the user
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/45—Network directories; Name-to-address mapping
    • H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
    • H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)

Abstract

　利用者端末やクライアント、及びサーバに対して問題が発生しても問題がないようにし、不特定の相手からの攻撃を根本的に防ぐことが可能な通信システムを提供する。調停サーバ１はサーバ３４（サーバＡ）に成り代わって外部からの攻撃を受け、ノード代表ＩＤ宛ての通信をリダイレクトして着信し、その通信に対して最初の認証を行い、信頼できる利用者端末やクライアント４２（クライアントＢ）であれば、その装置に対して仲介サーバ２を特定する仲介サーバＩＤ情報を提供する。仲介サーバ２は調停サーバ１を通過した利用者端末やクライアント４２（クライアントＢ）に対する２番目の認証を行い、利用者端末やクライアント４２（クライアントＢ）が信頼できることを確認すると、サーバ３４（サーバＡ）にＩＤを問い合わせ、サーバ３４（サーバＡ）から取得した追跡可能ＩＤ情報を利用者端末やクライアント４２（クライアントＢ）に提供する。
PCT/JP2008/000484 2007-03-08 2008-03-07 通信システム、信頼通信機構及びそれらに用いる通信方法 Ceased WO2008123015A1 (ja)

Priority Applications (2)

Application Number Priority Date Filing Date Title
JP2009508876A JP5299269B2 (ja) 2007-03-08 2008-03-07 通信システム、信頼通信機構及びそれらに用いる通信方法
US12/530,440 US8510822B2 (en) 2007-03-08 2008-03-07 Communication system, reliable communication mechanism, and communication method used for the same

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2007058018 2007-03-08
JP2007-058018 2007-03-08

Publications (1)

Publication Number Publication Date
WO2008123015A1 true WO2008123015A1 (ja) 2008-10-16

Family

ID=39830519

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2008/000484 Ceased WO2008123015A1 (ja) 2007-03-08 2008-03-07 通信システム、信頼通信機構及びそれらに用いる通信方法

Country Status (3)

Country Link
US (1) US8510822B2 (ja)
JP (1) JP5299269B2 (ja)
WO (1) WO2008123015A1 (ja)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2022038406A (ja) * 2020-08-26 2022-03-10 京セラドキュメントソリューションズ株式会社 データ連携システム、制御システムおよびシステム

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7996713B2 (en) * 2008-12-15 2011-08-09 Juniper Networks, Inc. Server-to-server integrity checking
WO2013015729A1 (en) * 2011-07-27 2013-01-31 Telefonaktiebolaget L M Ericsson (Publ) Mediation server, control method therefor, subscription information managing apparatus, control method therefor, subscription management server, and control method therefor
US10432658B2 (en) * 2014-01-17 2019-10-01 Watchguard Technologies, Inc. Systems and methods for identifying and performing an action in response to identified malicious network traffic
JP7172108B2 (ja) * 2018-04-13 2022-11-16 ブラザー工業株式会社 プログラム及び通信システム

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1996007256A1 (en) * 1994-08-30 1996-03-07 Kokusai Denshin Denwa Co., Ltd. Certifying system
JP2004078280A (ja) * 2002-08-09 2004-03-11 Fujitsu Ltd リモートアクセス仲介システム及び方法
JP2005328373A (ja) * 2004-05-14 2005-11-24 Nippon Signal Co Ltd:The ネットワークセキュリティシステム
JP2006268141A (ja) * 2005-03-22 2006-10-05 Nec Corp コンテンツ配信システム及び方法並びにプログラム

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7099956B2 (en) * 2000-01-31 2006-08-29 Ideaflood, Inc. Method and apparatus for conducting domain name service
EP1407378B1 (en) * 2001-06-15 2012-08-29 Advanced Network Technology Laboratories Pte Ltd. Computer networks
JP2004248198A (ja) 2003-02-17 2004-09-02 Fujitsu Ltd ＤｏＳ攻撃防御方法及び装置
JP2004248185A (ja) 2003-02-17 2004-09-02 Nippon Telegr & Teleph Corp <Ntt> ネットワークベース分散型サービス拒否攻撃防御システムおよび通信装置
JP2004266568A (ja) * 2003-02-28 2004-09-24 Nec Corp 名前解決サーバおよびパケット転送装置
US8023958B2 (en) * 2003-03-05 2011-09-20 Qualcomm Incorporated User plane-based location services (LCS) system, method and apparatus
US7562384B1 (en) * 2003-03-07 2009-07-14 Cisco Technology, Inc. Method and apparatus for providing a secure name resolution service for network devices
GB0311921D0 (en) * 2003-05-23 2003-06-25 Ericsson Telefon Ab L M Mobile security
JP4326423B2 (ja) 2004-08-02 2009-09-09 日本電信電話株式会社 管理装置および不正アクセス防御システム
US8060084B2 (en) * 2005-04-28 2011-11-15 Research In Motion Limited Network selection scheme using a roaming broker (RB)
CN1984155B (zh) * 2005-12-15 2010-09-15 上海贝尔阿尔卡特股份有限公司 一种IPv6接入网中的域名配置方法及其网络设备
US7995994B2 (en) * 2006-09-22 2011-08-09 Kineto Wireless, Inc. Method and apparatus for preventing theft of service in a communication system

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1996007256A1 (en) * 1994-08-30 1996-03-07 Kokusai Denshin Denwa Co., Ltd. Certifying system
JP2004078280A (ja) * 2002-08-09 2004-03-11 Fujitsu Ltd リモートアクセス仲介システム及び方法
JP2005328373A (ja) * 2004-05-14 2005-11-24 Nippon Signal Co Ltd:The ネットワークセキュリティシステム
JP2006268141A (ja) * 2005-03-22 2006-10-05 Nec Corp コンテンツ配信システム及び方法並びにプログラム

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2022038406A (ja) * 2020-08-26 2022-03-10 京セラドキュメントソリューションズ株式会社 データ連携システム、制御システムおよびシステム
JP7545635B2 (ja) 2020-08-26 2024-09-05 京セラドキュメントソリューションズ株式会社 データ連携システムおよび制御システム

Also Published As

Publication number Publication date
US8510822B2 (en) 2013-08-13
JPWO2008123015A1 (ja) 2010-07-15
US20100107237A1 (en) 2010-04-29
JP5299269B2 (ja) 2013-09-25

Similar Documents

Publication Publication Date Title
WO2008017015A3 (en) Systems and methods for policy based triggering of client- authentication at directory level granularity
WO2006101667A3 (en) Authenticating an endpoint using a stun server
WO2006050074A3 (en) System and method for providing a multi-credential authentication protocol
WO2009001197A3 (en) A method of preventing web browser extensions from hijacking user information
WO2004004139A8 (en) System and method for communicating images between intercommunicating users
WO2008142455A3 (en) A method and system for the creation, management and authentication of links between entities
WO2011158217A3 (en) Device and method for providing secured access to services
EP3410670B1 (en) System and method for communicating between devices using a one-time password
WO2010011731A3 (en) Methods and systems for secure key entry via communication networks
WO2007109671A3 (en) Systems and methods for providing secure communications for transactions
US20190068594A1 (en) End-To-End Realtime Telephony Authentication Using Biometrics And Cryptography
WO2008104835A3 (en) System and method of providing access to instant messaging services via a wireless network
WO2007038896A3 (en) Method and devices for user authentication
WO2010060704A3 (en) Method and system for token-based authentication
TW200625905A (en) A system and method for performing application layer service authentication and providing secure access to an application server
WO2007067848A3 (en) Service provider subsidy lock
WO2008030527A3 (en) Systems and methods for acquiring network credentials
WO2007042826A3 (en) Remote access to resources
WO2007098282A3 (en) System and method for an integrated communications framework
WO2011039460A3 (fr) Procede et dispositifs de communications securisees contre les attaques par innondation et denis de service (dos) dans un reseau de telecommunications
WO2008123015A1 (ja) 通信システム、信頼通信機構及びそれらに用いる通信方法
WO2011074880A3 (en) System and method of multi-media conferencing between universal plug and play (upnp) enabled telephony devices and wireless area network (wan) devices
WO2009156108A3 (de) Freischalten eines dienstes auf einem elektronischen gerät
WO2006136752A3 (fr) Systeme de gestion de donnees d &#39; authentification reçues par sms pour un acces a un service
GB2375697B (en) Automatic identity protection system with remote third party monitoring

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08720370

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2009508876

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 12530440

Country of ref document: US

122 Ep: pct application non-entry in european phase

Ref document number: 08720370

Country of ref document: EP

Kind code of ref document: A1