US 7,627,752 B2 · Communication system and network control apparatus with encryption processing function, and communication control method

Abstract

A communication system, which performs communication using a transmission packet encrypted by an IP-SEC encrypting method, includes a first encrypting circuit that encrypts a transmission packet by an IP-SEC encrypting method, a second encrypting circuit that encrypt header data to be used to decode the transmission packet encrypted by the first encrypting circuit, and a transmitting circuit that transmit the transmission packet whose header is encrypted by the second encrypting circuit. The communication system further includes a first decoding circuit that decode the authentication data of the reception packet using information to be used to decode the authentication data recorded in the IP-SEC header of the transmission packet and a second decoding circuit that decodes the reception packet using the authentication data decoded by the first decoding circuit.

Claims7

Dependent claims

A network control apparatus comprising:

first encrypting means for receiving a transmitting packet from an upper apparatus to perform IP-SEC encryption on the transmitting packet;
and
second encrypting means for encrypting header data that is used to decode the transmission packet subjected to IP-SEC encryption and is generated at an IP-SEC encrypting time in a predetermined method,
wherein the header data is authentication data in an IP-SEC header of the transmission packet, and
information to be used to decode the encrypted authentication data is recorded onto a predetermined unused portion of the IP-SEC header of the transmission packet.

2 more elements

A network control apparatus comprising:

first encrypting means for receiving a transmitting packet from an upper apparatus to perform IP-SEC encryption on the transmitting packet;
and
second encrypting means for encrypting header data that is used to decode the transmission packet subjected to IP-SEC encryption and is generated at an IP-SEC encrypting time in a predetermined method,
wherein the header data is authentication data in an IP-SEC header of the transmission packet, and
further comprising:
first decoding means for decoding the encrypted authentication data of the received encrypted transmission packet using information to be used to decode the encrypted authentication data recorded in the IP-SEC header of the transmission packet;
second decoding means for decoding the received encrypted transmission packet using the authentication data decoded by said first decoding circuit;
and
means for recording a plurality of encryption keys, serving as information to be used to decode the encrypted authentication data, into the IP-SEC header of the transmission packet.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application

11/862,551Filed 27 Sep 2007 · division

Priority

JP 2002-0027049 Jan 2002

Published

US 2008/0022092 A124 Jan 2008

Granted

1 Dec 2009

Term ends

Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 63/12
Network architectures or network communication protocols for network security: applying verification of the received information
H04L 63/0428
For providing a confidential data exchange among entities communicating through data packet networks: wherein the data content is protected, e.g.…
H04L 63/0485
Wherein the data content is protected, e.g. by encrypting or encapsulating the payload: networking architectures for enhanced packet encryption…
H04L 63/126
Applying verification of the received information: the source of the received data

Communication system and network control apparatus with encryption processing function, and communication control method

Life of this patent

Communication system and network control apparatus with encryption processing function, and communication control method

Life of this patent

Abstract

Claims7