A sink sends a registration request to a source and the source validates same, and the source sends a registration response including a secret to the sink. The source then sends a proximity message including a nonce to the sink and concurrently notes a start time. The sink employs the secret and the nonce to generate a proximity value and sends same to the sources. The source receives the proximity value and concurrently notes an end time, verifies the proximity value based on the secret and the...

A method, system and apparatus for automated management and validation of access permissions to referenced shared resources. A method for access validation and management of access permissions to referenced shared resources in a networked environment can include incorporating a reference to an underlying shared resource within a primary shared resource configured for distribution in the networked environment and specifying a designated viewer for the primary shared resource. It can be determined...

There is disclosed an information processing apparatus for providing information on resources for which predetermined permission is given to a subject trying to access the resources. The information processing apparatus comprises a permission status information generating part to generate permission status information based on resource classification information, subject classification information, and rule information. The permission status information indicates whether the subject trying to ac...

A system and method is provided for securely duplicating digital documents of disparate types, such that there is a cryptographically secure link between the duplicate and the original. The system also provides each document with a serial number that is both sequential with all other copied documents and cryptographically linked with the document itself, and which includes verifiable proof against tampering and modification. The system further produces copies of documents in a canonical format s...

A method for ensuring security and a data storage apparatus that enable an efficient security check on a notebook PC or like that are taken outside are provided. By executing a program that is read from the data storage apparatus, the processing for determining whether or not a piece of security ensuring data is applied; reading the piece of security ensuring data that is determined to be applied; and applying the same to a predetermined program in a terminal is executed.

A system and method comprising providing a plurality of signature strings, inputting a plurality of strings, separating the signature strings into a plurality of signature groups, respectively detecting common features for the signature strings for each of the signature groups and the input strings, comparing the detected common features for each of the signature groups with those of the input strings, and matching the input strings and the signature groups if the detected common features for th...

A method and system for preventing the detection of an operating system by an intruder, the operating system installed on a host in a network, is provided. The intruder transmits a network probe for operating system detection. The network probe is identified and a response is generated to the network probe, generated by the operating system, is modified. The modified response provides the intruder with false information related to the operating system, thereby misleading the intruder about the t...

An intrusion detection system for detecting intrusion events in a computer network and assessing the vulnerability of the network components to the detected events. The intrusion detection system comprises a scanner, one or more sensors and a security console for operation within a networked computing environment. A sensor of the inventive intrusion detection system can monitor the networked computing environment for possible intrusion events representing an unauthorized access or use of the net...

In a password authenticating apparatus, a control section displays an image of a keyboard including multiple character keys on a display section. An input section sends input data to the control section on reception of an input of a position on a display screen. In connection with the displayed keyboard, the control section specifies a character corresponding to the input position as an input character, checks the input character against a character that forms a registered password, determines w...

A method and system for enabling interconnection of VPNs is disclosed. An interconnection device manages an interconnection process at one or more facilities including, for example, a gateway device. The gateway device has information relating to a plurality of VPNs, and may facilitate interconnection between devices on at least two of the VPNs by determining that one device is in fact a member of a first one of the VPNs, and by forwarding connection parameters of the first VPN to the second VPN...