Packet filtering method for securing security in communications and packet communications system
AssigneeFujitsu Limited
InventorNaoki Matsuhira
Life of this patent
Estimating the term…
Abstract
A packet filtering system able to streamline the filter conditions for filtering and to handle even IPsec, comprised of (i) a step of storing in a packet to be sent to a receiving side filtering information for use in filtering at the receiving side and sending this from the sending side and (ii) a step of receiving the packet from the sending side, detecting the filtering information stored in the packet, and use this for filtering at the receiving side. Further, this filtering information is comprised of a simple filter key.
Claims10
A packet filtering method characterized by storing filtering information for use in filtering at a receiving side in a packet to be sent to the receiving side and sending it from a sending side.
A packet filtering method characterized by receiving a packet from a sending side, detecting filtering information stored in that packet, and using it for filtering at a receiving side.
Communication equipment at a packet sending side including a function unit for achieving a packet filtering,
- said communication equipment characterized by having at least:
- a setting unit for setting freely determined filtering information,
- a filter key holding unit for holding the filtering information input by the setting unit as a filter key, and
- a filter key storing function unit for receiving as input the held filter key and storing the filter key in a header portion of a packet.
Communication equipment of a packet receiving side including a function unit for packet filtering,
- said communication equipment characterized by being provided with:
- a filter key detecting unit for receiving a packet sent from a sending side while storing freely determined filtering information as a filter key in a header portion of the packet and detecting the filter key from the header portion and
- a comparing function unit for comparing a filter key of a sending side detected by the filter key detecting unit with a filter key of the receiving side held in advance,
- determining if the two do not match, and, when they do not match, discarding the received packet.
An authentication apparatus having:
- a filtering authentication function unit for receiving user authentication information input from a user receiving a filtering service and authenticating the user and
- a filter key providing function unit for assigning and distributing a filter key as filtering information corresponding to the user authentication information to the user after the authentication at the filtering authentication function unit.
A packet communication system where a transferred packet is filtered,
- said packet communication system characterized by being provided with:
- a packet transmitting apparatus for storing filtering information for use in filtering at a receiving side in a packet to be sent to the receiving side and sending it from a sending side,
- a packet receiving apparatus for receiving a packet from the sending side through a network between a server and client, detecting filtering information stored in the received packet, and using it for filtering at the receiving side, and
- an authentication apparatus for receiving user authentication information input from a user receiving the filtering service, authenticating the user, and assigning and distributing a filter key as filtering information corresponding to the user authentication information to the user after the authentication.
A packet communication system where a filtering service is provided for a packet transferred through a network between a server and a client,
- the packet communication system characterized by being provided with:
- function units used for access from the server or client of the user side to the network, that is,
- a first function unit for receiving user authentication information and authenticating the user and
- a second function unit for restricting access by assigning and distributing a filter key as filtering information corresponding to the user authentication information to the user after the authentication.
A packet communication system where a filtering service is provided for a packet transferred through a network between a server and a client,
- the packet communication system characterized by being provided with:
- function units used for access from a user on a network side to the server or client, that is,
- a first function unit for receiving user authentication information and authenticating the user and
- a second function unit for restricting access by assigning and distributing a filter key as filtering information corresponding to the user authentication information to the user after the authentication.
Dependencies are inferred from the claim text.