Communication apparatus, system, method, and non-transitory medium
AssigneeNEC Corporation
InventorsTakayuki SASAKI, Daniele Enrico ASONI, Adrian PERRIG
Life of this patent
Estimating the term…
Abstract
A monitoring unit verifies authentication information of a packet received and a rule verification unit verifies authentication information of a rule that matches the packet. The monitoring unit generates authentication information for a packet to be forwarded according to the rule having authentication information verified.
Claims23
A communication apparatus comprising:
- a processor;
- and
- a memory storing program instructions executable by the processor;
- wherein the processor is configured to perform
- a monitoring process configured to verify authentication information of a packet received;
- and
- a rule verification process configured to verify authentication information of a rule that matches the packet, wherein
- the monitoring process generates authentication information for a packet to be forwarded according to the rule having authentication information thereof verified.
11-17. (canceled)
A controller that controls a plurality of network elements, comprising:
- a processor;
- and
- a memory storing program instructions executable by the processor;
- wherein the processor is configured to perform
- a key generation process configured to generate a secret key shared by a pair of network elements forming a sender and a receiver of a packet and used for generation and verification of authentication information of the packet by the sender and the receiver, respectively, the key generation process generating secret keys shared by the controller and the network element forming a sender and a receiver of a rule and used for generation and verification of authentication information of the rule by the controller and the network element, respectively;
- a rule generation process configured to generate a rule for the network element;
- a rule management process configured to generate authentication information for the generated rule using the secret key shared by the controller and the network element;
- and
- a rule delivery process that sends the rule along with the authentication information to the network element,
- the network element verifying authentication information of a packet received and verifying authentication information of a rule that matches the packet, the network element generating authentication information for a packet to be forwarded according to the rule having authentication information verified.
A communication method for a network element, comprising:
- verifying authentication information of a packet received;
- verifying authentication information of a rule that matches the packet, the rule being set from a controller to the network element;
- generating authentication information of the packet;
- and
- forwarding the packet along with the generated authentication information of the packet based on the rule having authentication information thereof verified.
(canceled)
A non-transitory computer-readable recording medium storing a program causing a computer to execute processing comprising:
- verifying authentication information of a packet received;
- verifying authentication information of a rule that matches the packet;
- and
- generating authentication information for a packet to be forwarded according to the rule having authentication information verified.
29-30. (canceled)
Dependencies are inferred from the claim text.