# US 10,313,374 B2 · Electronic apparatus and method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,313,374 B2
- Document ID: US10313374B2
- Status: Granted
- Kind: B2
- Application number: 14/978,058
- Filed: 2015-12-22
- Published: 2016-04-21
- Granted: 2019-06-04
- Earliest claimed: 2013-06-28
- Assignees: Kabushiki Kaisha Toshiba
- Applicants: Kabushiki Kaisha Toshiba
- Inventors: Haruhiko Toyama
- Web page: https://patentgrep.com/patent/US10313374B2

## CPC

- H04L 63/1425: {Traffic logging, e.g. anomaly detection}
- H04L 41/069: using logs of notifications; Post-processing of notifications
- H04L 63/1416: {Event detection, e.g. attack signature detection}
- H04L 67/568: Storing data temporarily at an intermediate stage, e.g. caching
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

According to one embodiment, an electronic apparatus includes a memory and a hardware processor. The hardware processor is configured to store a log of a received packet in the memory, set a transmission delay time for the log stored in the memory, and transmit the log in accordance with the transmission delay time of the log.

## Claims

### Claim 1

An electronic apparatus comprising:
a receiver configured to receive packets;
a communication log generating circuit configured to generate communication logs for the packets received by the receiver;
a first memory configured to store the communication logs generated by the communication log generating circuit;
a transmitter configured to transmit the communication logs stored in the first memory; and
a hardware processor configured to
set a transmission delay time for the communication logs stored in the first memory to a first time when a number of the communication logs stored in the first memory is larger than a first number,
set the transmission delay time for the communication logs stored in the first memory to zero when the number of the communication logs stored in the first memory is not larger than the first number, and
cause the transmitter to transmit the communication logs stored in the first memory based on the transmission delay time.

### Claim 2 (depends on 1)

The electronic apparatus of claim 1, wherein
the transmitter is configured to transmit the communication logs to an analyzer configured to analyze the communication logs.

### Claim 3 (depends on 1)

The electronic apparatus of claim 1, wherein the first time is based on a random number.

### Claim 4 (depends on 1)

The electronic apparatus of claim 1, further comprising:
a second memory configured to store a transmission time of a last transmitted communication log, wherein
the hardware processor causes the transmitter to transmit an oldest communication log of the communication logs stored in the first memory in accordance with a transmission delay time for the oldest communication log and the transmission time of the last transmitted communication log stored in the second memory.

### Claim 5 (depends on 1)

The electronic apparatus of claim 1, wherein the communication logs comprise at least one of an address of a transmission source of the packets, an address of a transmission target, data of the packets, predetermined bytes of the data of the packets, or a timestamp.

### Claim 6 (depends on 1)

The electronic apparatus of claim 1, wherein
the hardware processor is configured to set a transmission delay time for a newest communication log of the communication logs stored in the first memory to the first time when the number of the communication logs is larger than the first number and the transmission delay time is set for an oldest communication log of the communication logs stored in the first memory; and
the hardware processor is configured to set transmission delay times for all of the communication logs stored in the first memory to the first time when the number of the communication logs is larger than the first number and a transmission delay time is not set for the oldest communication log.

### Claim 7

A method comprising:
receiving, by a receiver, packets;
generating, by a communication log generating circuit, communication logs for the packets received by the receiver;
storing the communication logs in a first memory;
transmitting, by a transmitter, the communication logs stored in the first memory;
setting, by a hardware processor, a transmission delay time for the communication logs stored in the first memory to a first time when a number of the communication logs stored in the first memory is larger than a first number;
setting, by the hardware processor, the transmission delay time for the communication logs stored in the first memory to zero when the number of the communication logs stored in the first memory is not larger than the first number; and
transmitting, by the transmitter, the communication logs stored in the first memory based on the transmission delay time.

### Claim 8 (depends on 7)

The method of claim 7, further comprising:
transmitting, by the transmitter, the communication logs to an analyzer configured to analyze the communication logs.

### Claim 9 (depends on 7)

The method of claim 7, wherein the first time is based on a random number.

### Claim 10 (depends on 7)

The method of claim 7, further comprising:
storing a transmission time of a last transmitted communication log in a second memory; and
transmitting, by the hardware processor, an oldest communication log of the communication logs stored in the first memory in accordance with a transmission delay time for the oldest communication log and the transmission time of the last transmitted communication log stored in the second memory.

### Claim 11 (depends on 7)

The method of claim 7, wherein the communication logs comprise at least one of an address of a transmission source of the packets, an address of a transmission target, data of the packets, predetermined bytes of the data of the packets, or a timestamp.

### Claim 12 (depends on 7)

The method of claim 7, further comprising:
setting a transmission delay time for a newest communication log of the communication logs stored in the first memory to the first time when the number of the communication logs is larger than the first number and the transmission delay time is set for an oldest communication log of the communication logs stored in the first memory; and
setting transmission delay times for all of the communication logs stored in the first memory to the first time when the number of the communication logs is larger than the first number and a transmission delay time is not set for the oldest communication log.

### Claim 13

A non-transitory computer-readable storage medium having stored thereon a computer program which is executable by a computer, the computer program comprising instructions, when executed by the computer to perform functions of:
receiving packets;
generating communication logs for the received packets;
storing the communication logs in a first memory;
transmitting the communication logs stored in the first memory;
setting a transmission delay time for the communication logs stored in the first memory to a first time when a number of the communication logs stored in the first memory is larger than a first number;
setting the value of the transmission delay time for the communication logs stored in the first memory to zero when the number of the communication logs stored in the first memory is not larger than the first number; and
transmitting the communication logs stored in the first memory based on the transmission delay time.

### Claim 14 (depends on 13)

The storage medium of claim 13, further comprising:
transmitting the communication logs to an analyzer configured to analyze the communication logs.

### Claim 15 (depends on 13)

The storage medium of claim 13, wherein the first time is based on a random number.

### Claim 16 (depends on 13)

The storage medium of claim 13, further comprising:
storing a transmission time of a last transmitted communication log in a second memory; and
transmitting an oldest communication log of the communication logs stored in the first memory in accordance with a transmission delay time for the oldest communication log and the transmission time of the last transmitted communication log stored in the second memory.

### Claim 17 (depends on 13)

The storage medium of claim 13, wherein the communication logs comprise at least one of an address of a transmission source of the packets, an address of a transmission target, data of the packets, predetermined bytes of the data of the packets, or a timestamp.

### Claim 18 (depends on 13)

The storage medium of claim 13, further comprising:
setting a transmission delay time for a newest communication log of the communication logs stored in the first memory to the first time when the number of the communication logs is larger than the first number and the transmission delay time is set for an oldest communication log of the communication logs stored in the first memory; and
setting transmission delay times for all of the communication logs stored in the first memory to the first time when the number of the communication logs is larger than the first number and a transmission delay time is not set for the oldest communication log.
