Relay method of encryption communication, gateway server, and program and program memory medium of encryption communication

A relay method of an encryption communication in a gateway server for relaying the encryption communication performed between a client device for receiving a user access request to content information and sending an access request message based on the access request to a network and a content server for receiving the access request message sent via the network from the client device and sending the content information indicated by the access request message, wherein the gateway server includes a database for registering a temporary encryption communication relay permit, a private key of a counterpart thereof and an effective date of the key, and any one of a destination server name, an IP address of a sender's client device, and an encryption communication method name included in an encryption communication connection message or all of these, the method performed by the gateway server comprising:

• a first step of receiving said encryption communication connection message to said content server from said client device;
• a second step of searching said database with making it a search key any one of said destination server name and said IP address of said sender's client device included in said encryption communication connection message or both of these, resultingly, when there exists registration information matching said search key and an effective date included in the registration information is within an effective period, reading a temporary encryption communication relay permit and a private key of a counterpart thereof for a content server of said destination server name from said registration information, and when there exists no registration information matching said search key or when the effective date included in the registration information is out of date even if there exists the registration information matching said search key, producing a temporary encryption communication relay permit and a private key of the counterpart thereof for a content server of said destination server name included in said encryption communication connection message, and registering in said database said produced temporary encryption communication relay permit, the private key of the counterpart thereof and the effective date of the key, and any one of the destination server name, the IP address of said sender's client device, and said encryption communication method name included in said encryption communication connection message or all of these;
• a third step of sending said temporary encryption communication permit to said client device;
• a fourth step of performing an End-End encryption communication with said client device, receiving an encrypted access request message sent by said client device, and decrypting and converting the encrypted access request message to an access request message of a plain text;
• a fifth step of performing an End-End encryption communication with said content server, depending on the access request message of said plain text, and acquiring content information instructed by said access request message;
• and
• a sixth step of performing value added processing for the acquired content information and a communication header thereof, encrypting said content information and said communication header where said value added processing is performed, and sending said content information and said communication header to said client device.

A gateway server for relaying an encryption communication for relaying the encryption communication performed between a client device for receiving a user access request to content information and sending an access request message based on the access request to a network and a content server for receiving the access request message sent via the network from the client device and sending the content information indicated by the access request message, the gateway server comprising:

• a first mechanism for receiving an encryption communication connection message to said content server from said client device;
• a second mechanism for producing a temporary encryption communication permit and a private key of a counterpart thereof with respect to said content server of a destination server name included in said connection message;
• a third mechanism for sending said temporary encryption communication permit to said client device;
• a fourth mechanism for performing an End-End encryption communication with said client device, receiving an encrypted access request message sent by said client device, and decrypting and converting the encrypted access request message to an access request message of a plain text;
• a fifth mechanism for performing an End-End encryption communication with said content server, depending on the access request message of said plain text, and acquiring content information instructed by said access request message;
• and
• a sixth mechanism for performing value added processing for the acquired content information and a communication header thereof, encrypting said content information and said communication header where said value added processing is performed, and sending said content information and said communication header to said client device.

A gateway server for relaying an encryption communication for relaying the encryption communication performed between a client device for receiving a user access request to content information and sending an access request message based on the access request to a network and a content server for receiving the access request message sent via the network from the client device and sending the content information indicated by the access request message, the gateway server comprising:

• a database for registering a temporary encryption communication relay permit, a private key of a counterpart thereof and an effective date of the key, and any one of a destination server name, an IP address of a sender's client device, and an encryption communication method name included in an encryption communication connection message or all of these, the gateway server further comprising:
• a first mechanism for receiving the encryption communication connection message to said content server from said client device;
• a second mechanism for searching the database with making it a search key any one of the destination server name and the IP address of the sender's client device included in the encryption communication connection message or both of these;
• resultingly, when there exists registration information matching said search key and an effective date included in the registration information is within an effective period, for reading a temporary encryption communication relay permit and a private key of a counterpart thereof for a content server of said destination server name from the registration information;
• when there exists no registration information matching said search key or when the effective date included in the registration information is out of date even if there exists the registration information matching said search key, producing a temporary encryption communication relay permit and a private key of a counterpart thereof for a content server of said destination server name included in said encryption communication connection message, and registering in said database the produced temporary encryption communication relay permit, the private key of the counterpart and the effective date of the key, and any one of the destination server name, the IP address of the sender's client device, and the encryption communication method name included in the encryption communication connection message;
• a third mechanism for sending said temporary encryption communication permit to said client device;
• a fourth mechanism for performing an End-End encryption communication with said client device, receiving an encrypted access request message sent by said client device, and decrypting and converting the encrypted access request message to an access request message of a plain text;
• a fifth mechanism for performing an End-End encryption communication with said content server, depending on the access request message of said plain text, and acquiring content information instructed by said access request message;
• and
• a sixth mechanism for performing value added processing for the acquired content information and a communication header thereof, encrypting said content information and said communication header where said value added processing is performed, and sending said content information and said communication header to said client device,

A relay program of an encryption communication in a gateway server for relaying the encryption communication performed between a client device for receiving a user access request to content information and sending an access request message based on the access request to a network, and a content server for receiving the access request message sent via the network from the client device and sending the content information indicated by the access request message, the program programmed to make a computer run the program comprising:

• a first step of receiving an encryption communication connection message to said content server from said client device;
• a second step of producing a temporary encryption communication permit and a private key of a counterpart thereof with respect to said content server of a destination server name included in said connection message;
• a third step of sending said temporary encryption communication permit to said client device;
• a fourth step of performing an End-End encryption communication with said client device, receiving an encrypted access request message sent by said client device, and decrypting and converting the encrypted access request message to an access request message of a plain text;
• a fifth step of performing an End-End encryption communication with said content server, depending on the access request message of said plain text, and acquiring content information instructed by said access request message;
• and
• a sixth step of performing value added processing for the acquired content information and a communication header thereof, encrypting said content information and said communication header where said value added processing is performed, and sending said content information and said communication header to said client device.

A relay program of an encryption communication in a gateway server for relaying the encryption communication performed between a client device for receiving a user access request to content information and sending an access request message based on the access request to a network, and a content server for receiving the access request message sent via the network from the client device and sending the content information indicated by the access request message, wherein the gateway server includes a database for registering a temporary encryption communication relay permit, a private key of a counterpart thereof and an effective date of the key, and any one of a destination server name, an IP address of a sender's client device, and an encryption communication method name included in an encryption communication connection message or all of these, the program programmed to make a computer run the program comprising:

• a first step of receiving said encryption communication connection message to said content server from said client device;
• a second step of searching said database with making it a search key any one of said destination server name and said IP address of said sender's client device included in said encryption communication connection message or both of these, resultingly, when there exists registration information matching said search key and an effective date included in the registration information is within an effective period, reading a temporary encryption communication relay permit and a private key of a counterpart thereof for a content server of said destination server name from said registration information, and when there exists no registration information matching said search key or when the effective date included in the registration information is out of date even if there exists the registration information matching said search key, producing a temporary encryption communication relay permit and a private key of the counterpart thereof for a content server of said destination server name included in said encryption communication connection message, and registering in said database said produced temporary encryption communication relay permit, the private key of the counterpart thereof and the effective date of the key, and any one of the destination server name, the IP address of said sender's client device, and said encryption communication method name included in said encryption communication connection message or all of these;
• a third step of sending said temporary encryption communication permit to said client device;
• a fourth step of performing an End-End encryption communication with said client device, receiving an encrypted access request message sent by said client device, and decrypting and converting the encrypted access request message to an access request message of a plain text;
• a fifth step of performing an End-End encryption communication with said content server, depending on the access request message of said plain text, and acquiring content information instructed by said access request message;
• and
• a sixth step of performing value added processing for the acquired content information and a communication header thereof, encrypting said content information and said communication header where said value added processing is performed, and sending said content information and said communication header to said client device.