# US 2014/0157386 A1 · Communication device, communication method and computer program > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0157386 A1 - Document ID: US20140157386A1 - Status: Published application - Kind: A1 - Application number: 14/088,626 - Filed: 2013-11-25 - Published: 2014-06-05 - Earliest claimed: 2012-11-30 - Assignees: Kabushiki Kaisha Toshiba - Applicants: Kabushiki Kaisha Toshiba - Inventors: Yasuyuki TANAKA; Mitsuru Kanda; Seijiro Yoneyama; Yoshiki Terashima - Web page: https://patentgrep.com/patent/US20140157386A1 ## CPC - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0464: {using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/162: {at the data link layer} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract According to one embodiment, there is provided a communication device including a first communication layer receiving processor to perform a receiving process on a first communication layer on data received from a first communication device. The first communication layer receiving processor includes a first key identifying unit to identify, a key required to process the data; a first attribute identifying unit to identify, pursuant to key data, first attribute information that is attribute information associated with the key as identified; and a data processor to process the data using the key as identified. The data processed by the data processor and the first attribute information are passed to a second communication layer processor configured to perform a process on a second communication layer. ## Claims ### Claim 1 A communication device, comprising: a first communication layer receiving processor configured to perform a receiving process on a first communication layer on data received from a first communication device, the first communication layer receiving processor comprising: a first key identifying unit configured to identify a key required to process the data; a first attribute identifying unit configured to identify first attribute information that is attribute information associated with the key identified by the first key identifying unit pursuant to key data that represents association between a key and attribute information; and a data processor configured to process the data using the key identified by the first key identifying unit, wherein the data processed by the data processor and the first attribute information are passed to a second communication layer processor configured to perform a process on a second communication layer. ### Claim 2 (depends on 1) The communication device according to claim 1, further comprising: a first communication layer transmitting processor configured to perform a transmitting process on the first communication layer, wherein a destination address of data received from the first communication device on the second communication layer is a second communication device, the first communication layer transmitting processor receives data processed on the second communication layer and the first attribute information, from the second communication layer processor, the first communication layer transmitting processor comprises: a second key identifying unit configured to identify a key to be used for communication with the second communication device; a second attribute identifying unit configured to identify second attribute information that is attribute information associated with the key identified by the second key identifying unit pursuant to the key data; and a determining unit configured to determine a data processing method on data received from the second communication layer processor on the basis of a relationship between the first attribute information and the second attribute information. ### Claim 3 (depends on 2) The communication device according to claim 2, wherein the determining unit determines the data processing method on the data pursuant to first communication layer policy data wherein the first communication layer policy data represents association among first attribute information, second attribute information and information on the data processing method. ### Claim 4 (depends on 2) The communication device according to claim 2, wherein the data processing method defines whether to allow the data to be transferred or not. ### Claim 5 (depends on 1) The communication device according to claim 1, further comprising: the second communication layer processor, wherein a destination address of data received from the first communication device on the second communication layer is the own device, and the second communication layer processor identifies a data processing method on data received from the first communication layer receiving processor according to the first attribute information, and processes the data pursuant to the identified data processing method. ### Claim 6 (depends on 5) The communication device according to claim 5, wherein the second communication layer processor identifies, on the basis of second communication layer policy data representing association between first attribute information and information on the data processing method, the data processing method associated with the first attribute information identified by the first attribute identifying unit, and processes the data according to the identified data processing method. ### Claim 7 (depends on 5) The communication device according to claim 5, wherein the data processing method defines whether to allow the data to be passed to an application program or not. ### Claim 8 (depends on 2) The communication device according to claim 2, wherein the second key identifying unit identifies the key to be used for communication with the second communication device on the basis of a destination address of the second communication device on the first communication layer. ### Claim 9 (depends on 1) The communication device according to claim 1, wherein the first key identifying unit identifies the key required to process the data, on the basis of information included in data received from the first communication device. ### Claim 10 (depends on 1) The communication device according to claim 1, wherein if data received from the first communication device includes authentication data, the data processor verifies the authentication data using the key identified by the first key identifying unit. ### Claim 11 (depends on 1) The communication device according to claim 1, wherein if data received from the first communication device is encrypted, the data processor decrypts the data using the key identified by the first key identifying unit. ### Claim 12 (depends on 1) The communication device according to claim 1, wherein the first communication layer is a network interface layer in a TCP/IP four-layer network model, and the second communication layer is an Internet protocol layer in the TCP/IP four-layer network model. ### Claim 13 A communication method, comprising: identifying by a first communication layer receiving processor a key required to process data received from a first communication device; identifying by the first communication layer receiving processor first attribute information that is attribute information associated with the key as identified, based on key data representing association between a key and attribute information; processing by the first communication layer receiving processor the data using the key as identified, passing the processed data and the first attribute information to a second communication layer processor. ### Claim 14 A non-transitory computer readable medium, having instruction stored therein which causes, when executed by a processor, to execute processing of steps comprising: identifying by a first communication layer receiving processor a key required to process data received from a first communication device; identifying by the first communication layer receiving processor first attribute information that is attribute information associated with the key as identified, based on key data representing association between a key and attribute information; processing by the first communication layer receiving processor the data using the key as identified, passing the processed data and the first attribute information to a second communication layer processor.