仮想プライベートネットワーク（VPN）は、二つのホスト間に仮想的な一本の回線を引くための技術といえる。このVPN を構築する場合、構築時にユーザー認証は行われるが、その後は認証が行われない。したがって、ホスト上にいるすべてのユーザーがVPN を利用できてしまう。複数のユーザーが存在するサーバーなどからVPN を構築した場合、他のユーザーが勝手にVPN 上のホストにアクセスできるため危険である。ユーザー専用のVPN を構築するために、我々はVPN にユーザーの概念を取り入れたパーソナルVPN を提案する。パーソナルVPN は、OS がVPN を利用するユーザーを制限することで実現する．

抄録全体を表示

A communications satellite (INTELSAT) data receiving system with a 7.6m-diameter parabolic antenna was installed at Syowa Station in February 2004. We have carried out communications with the Antarctica station using a (VPN) employing a S-Box. We began operation of a real-time monitoring system from Japan on August 26, 2004. The earthquake that recently occurred in Sumatra, Indonesia was observed from Japan using the superconducting gravimeter at Syowa Station.

抄録全体を表示

遠隔放射線治療支援システムとして，remote disk mount 方式を採用したシステムを構築した．remote disk mount 方式とは，ネットワーク上の他のワークステーションの記憶装置（ハードディスク）を内蔵記憶装置（ハードディスク）の代わりに読み込み，システムを起動する方式である．この方式によれば，遠隔治療施設が増えてもmount するdiskを変更するだけで対応が可能になる．実際の使用感は，ネットワークを介してのハードディスクの読み込みのため，最初の読み込みに若干の時間を要するが，一度mountしてしまえばストレスなく計画を行えた．使用回線はデータ保護のためにVPNを用いた一般回線を用いている．本システムにより，複数の施設に対応した遠隔放射線治療支援システムが構築できた．

抄録全体を表示

FPN (Flexible Private Network) is a new service, which enables a user to join multiple secure communication groups within an Intranet. FPN defines a secure communication group by a single, encryption key (session key). All communication entities in a FPN request a session key to the key management entity and share the same encryption key. Also, to keep the secrecy of FPNs well, session keys should be updated frequently.
In this paper, we consider a realization method to apply FPN over the enterprise networks and define key distribution method for session key sharing. An application of this method for secure communication systems will show that inexpensive and flexible VPNs with various communication groups can be constructed easily. It is also shown that the proposed method works effectively in an enterprise network system.

抄録全体を表示

A routing protocol for (VPN) in Autonomus System (AS) based on miximizing throughput is proposed. Through a comparison between the proposed protocol and the existing protocols, Open Shortest Path First: OSPF (Widely used), it was found that the required time for transmittion of packets from one node to another node of the proposed protocol is 56.54% less than that of the OSPF protocol.

抄録全体を表示

CCSE/JAEA (Center for Computational Science and e-Systems/Japan Atomic Energy Agency) integrated a prototype system of a network computing infrastructure for sharing tools and data to support the U.S. and Japan collaboration in GNEP (Global Nuclear Energy Partnership). We focused on three technical issues to apply our information process infrastructure, which are accessibility, security, and usability. In designing the prototype system, we integrated and improved both network and Web technologies. For the accessibility issue, we adopted SSL-VPN (Security Socket Layer- ) technology for the access beyond firewalls. For the security issue, we developed an authentication gateway based on the PKI (Public Key Infrastructure) authentication mechanism to strengthen the security. Also, we set fine access control policy to shared tools and data and used shared key based encryption method to protect tools and data against leakage to third parties. For the usability issue, we chose Web browsers as user interface and developed Web application to provide functions to support sharing tools and data. By using WebDAV (Web-based Distributed Authoring and Versioning) function, users can manipulate shared tools and data through the Windows-like folder environment. We implemented the prototype system in Grid infrastructure for atomic energy research: AEGIS (Atomic Energy Grid Infrastructure) developed by CCSE/JAEA. The prototype system was applied for the trial use in the first period of GNEP.

抄録全体を表示

Cochlear implants have become the standard of care for patients suffering from profound sensorineural hearing loss. Unfortunately, access to cochlear implantation as well as cochlear implant rehabilitation may be limited. In order to facilitate access to cochlear implantation and cochlear implant rehabilitation, implantation was performed at a satellite medical facility over 250 miles from the Carolina Ear and Hearing Clinic's cochlear implant center, and the implants were programmed over the Internet via a (VPN). A separate video conferencing system was used to insure synchronization of the video and audio signals.
Initially, an IRB approved pilot study was conducted comparing the postoperative HINT and CNC word scores for seven patients who had undergone remote mapping and programing of their cochlear implants. Their scores were compared with the mean scores of seven patients who had been programmed at the Carolina Ear and Hearing Clinic by the same audiologist over a twelve-month period. All patients in each group were successfully programmed and there were no statistically significant differences in postoperative HINT and CNC word scores.
Based on the success of this pilot study, the remote programming system was expanded to include young children. Their ages ranged from 22 months to 5 years of age. All five children were successfully programmed remotely. To date, over 48 adult and pediatric patients have been implanted and successfully programmed using this remote programming system. The ability to remotely program cochlear implant patients offers the potential to extend cochlear implantation to areas without a tertiary cochlear implant center. This model, which is safe, effective, and maintains patient confidentiality, may have application for other implant centers attempting to provide patients access to cochlear implant technology.

抄録全体を表示

This paper presents a novel “virtual fiber” network service that exploits wavebands. This service provides virtual direct tunnels that directly convey wavelength paths to connect customer facilities. To improve the resource utilization efficiency of the service, a network design algorithm is developed that can allow intermediate path grooming at limited nodes and can determine the best node location. Numerical experiments demonstrate the effectiveness of the proposed service architecture.

抄録全体を表示

 郵政省・マルチメディア・パイロットタウン構想のマルチメディア・モデル医療展開事業システムとして高精細画像の転送を中心とした実験・研究システムを平成10年より開発している．このシステムでは，遠隔医療を主たるフィールドとしていることから，本学４キャンパスに既設された学内LANを利用する共に，インターネットを通じての教育を行うWEBシステムも合わせて開発されている．

 この学内LANにおけるセキュリティは，ファイアーウォールにて行っていたものの，遠隔医療実験・研究システムの導入に際して画像データはもとより，診断レポートや患者情報などの医療情報を扱うことから，セキュリティの大幅な強化に取り組んだ．

 当初本システムのセキュリティ対策としては，指紋認証システム，暗号化装置を実装していたが今回，サーバー・クライアント間で交わされるデータそのものに暗号化通信を構築してセキュリティを強化した．

抄録全体を表示

Background

To improve the quality of clinical study, it is desirable to be involved of many researchers contributed in various stage of the study, from the research planning until presenting a paper. For this purpose, a protocol management system in our institute is supported by the specialized research experts from the research planning based on the concept of "Quality by Design". The ultimate goal in our study is to foster the experts on clinical study. We reported here development of a cloud-based interactive learning system on protocol management available for many researchers.

Methods

The proposed system is composed of following 4 basic strategies:

1. Purpose-oriented format for prospective research/ retrospective research/ questionnaire survey,

2. Progress status confirmation during editing,

3. Paragraph co-editing and insertion function,

4. The web browser enables us to output the Word formatted file.

These characteristics are especially cared for security, privacy and confidentiality from the demand of cloud system.

Results

Concerning the format setting, determination of the type of research is realized with any platform regardless Windows/Mac operating system. Even for the complex format, the output document has the universal standard which enables easy to use for multiple user contribution in commenting and paragraph editing. Thus this property contribute to improve the quality of research from the very early stage. The special consideration of the cloud system strengthens the safety of the system in security, privacy and confidentiality by establishment of

(VPN) and the management of user's controllable function.

Conclusion

Under the web-based cloud system, the editable bread-board model of protocol management system has been developed. The system contributes not only support for the description of application form but also promote for familiarity in the quality of application from the very early stage of planning. For the future perspective, we should consider the more user-friendly interface with high standards of usability and operation.

抄録全体を表示

The success and scale of the Internet and its protocol IP has spurred emergent distributed technologies such as fog/edge computing and new application models based on distributed containerized microservices. The Internet of Things and Connected Communities are poised to build on these technologies and models and to benefit from the ability to communicate in a peer-to-peer (P2P) fashion. Ubiquitous sensing, actuating and computing implies a scale that breaks the centralized cloud computing model. Challenges stemming from limited IPv4 public addresses, the need for transport layer authentication, confidentiality and integrity become a burden on developing new middleware and applications designed for the network's edge. One approach - not reliant on the slow adoption of IPv6 - is the use of virtualized overlay networks, which abstract the complexities of the underlying heterogeneous networks that span the components of distributed fog applications and middleware. This paper describes the evolution of the design and implementation of IP-over-P2P (IPOP) - from its purist P2P inception, to a pragmatic hybrid model which is influenced by and incorporates standards. The hybrid client-server/P2P approach allows IPOP to leverage existing robust and mature cloud infrastructure, while still providing the characteristics needed at the edge. IPOP is networking cyber infrastructure that presents an overlay

which self-organizes with dynamic membership of peer nodes into a scalable structure. IPOP is resilient to partitioning, supports redundant paths within its fabric, and provides software defined programming of switching rules to utilize these properties of its topology.

抄録全体を表示

(VPN) is a cost effective method to provide integrated multimedia services. Usually heterogeneous multimedia data can be categorized into different types according to the required Quality of Service (QoS). Therefore, VPN should support the prioritization among different services. In order to support multiple types of services with different QoS requirements, efficient bandwidth management algorithms are important issues. In this paper, I employ the Kalai-Smorodinsky Bargaining Solution (KSBS) for the development of an adaptive bandwidth adjustment algorithm. In addition, to effectively manage the bandwidth in VPNs, the proposed control paradigm is realized in a dynamic online approach, which is practical for real network operations. The simulations show that the proposed scheme can significantly improve the system performances.

抄録全体を表示

Various network services, such as , cloud computing and Internet protocol television, are often provided across multiple network operators. The difficulty in managing the quality of service across multiple operator domains is the barrier to adoption especially to service level agreement-sensitive and mission critical cases. Federating network resources among operators is necessary to manage the quality of service across operators. To manage network resources of other operator domains, the network operator's federation mechanisms aiming at a future open access network model are essential. In this paper, the mechanisms of the signaling process as well as the capability of the bandwidth broker are proposed for open access networking, where multiple operators are connected via a common access network operator. Considering that both the next generation network and the non-next generation network architectures must coexist, we have analyzed federation mechanisms for establishing practical functional extensions to existing bandwidth broker implementations for the federation signaling. Based on the analysis, the designs of the federation signaling and the required bandwidth broker functional models are proposed. The proposed design is prototyped and the demonstration of the federation signaling shows that the federation mechanism can assure the bandwidth of a targeted live data stream on demand across the trunk and the access network operators even under a congested situation.

抄録全体を表示

 病院情報システムに大規模な改修を行うことなく，セキュリティを向上するための手法について検討を行った．その結果，病院端末に導入されているOSが持つ機能である (VPN)機能を利用することにより，その実現が可能であることが示された．
 実際に，病院情報システム改修費用と比較して安価なサーバを導入することで，100 Mbps程度の帯域が確保できることが確認された．さらに通常の医療情報システムの応答性には，大きな影響を与えることなく利用が可能であることも確認した．
 今後の病院情報システムは院内LAN上であっても，その内容を保証するためにVPNあるいはIPsec等によるセキュリティ対策を行うことが必要であるものと考えられる．

抄録全体を表示

 鹿児島大学医学部附属病院は，1999年に病院ATMネットワークを構築した．このネットワークは２段階のファイアウォールとVPN(

)による遠隔医療システムのインフラストラクチャとして応用可能な機能を有する．今回我々はVPNに対応した遠隔医療システムを開発した．本システムは，ユーザによる操作の簡便性を第一に考慮した．ユーザはネットワークに関する特殊な知識は不要であり，画像のスキャナへのセット，送信先の選択，パスワードの入力の３つの操作のみで，インターネットを介した安全な医療情報を共有可能である．さらに，本システムは通常はインターネット端末としても利用可能であり，実用的な遠隔医療システムと言える．

抄録全体を表示

本邦のデジタルマンモグラフィの大半はComputed Radiography (CR) である。一方，マンモグラフィ検診に関わる人材は全国的には増加したが，その偏在のため，特に地方では読影医が不足している。CRを含む遠隔診断ネットワークの構築はこの問題の一つの解決策である。
われわれは厚生労働省の平成18年度マンモグラフィ検診遠隔診断支援モデル事業を受け，高知大学医学部に高知検診クリニック，高知リハビリテーション，図南，仁淀および幡多けんみん病院の5施設を結ぶ「高知マンモグラフィ遠隔診断ネットワーク」を構築した。5施設のマンモグラフィはCRで，コニカミノルタPCM3，富士フィルムFCR2である。ネットワークは光ファイバーを利用し，VPN ( ) と暗号化でセキュリティを確保している。診断にはGE横河のSenoAdvantageとケアストリームのマンモ・ビューワを使用している。
将来は全県を網羅するためのネットワークの拡充・カンファレンス機能の追加・他地域のネットワークとの連携など，広域での人材活用ができる発展が望まれる。
CRソフトコピーはメーカーごとに特性が異なり，同一ビューワでの診断に難渋する。ソフトコピーの標準化が望まれる。また，ネットワークの維持に必要な通信費，データ保存やメンテナンス費用が高額で運営面でも課題も残っている。

抄録全体を表示