US 8,798,063 B2Granted

Information processing apparatus and information processing method

AssigneeKabushiki Kaisha Toshiba

InventorsFangming Zhao, Toshinari Takahashi, Shinji Yamanaka, Yuichi Komano, Kentaro Umesawa

Life of this patent

Estimating the term…

Loading patent…

Abstract

An apparatus includes a first processing unit to judge, whether the route information storing unit stores a second next destination address; a second processing unit to judge whether a received packet includes an message authentication code, in the case where the route-information storing unit stores the second next destination address; a third processing unit to judge whether the key-information storing unit stores a second shared key, which is a first shared key shared between the information processing apparatus, in the case where the received packet does not include the message authentication code for the second next destination address; a third packet generating unit to generate a third packet, which includes a next destination and information indicating that the generation of an message authentication code is impossible, in the case where the key information storing unit does not store the second shared key.

Claims15

Dependent claims

An information processing apparatus comprising:

a receiving unit configured to receive a packet sent from a first apparatus, the packet including data and an ultimate destination address which represents address information of an ultimate destination;
a route information storing unit configured to store the ultimate destination address and one or more first next destination addresses in association with each other, each first next destination address representing information of an address of a next forwarding destination;
a key information storing unit configured to store one or more first shared keys, each first shared key being a key shared between the information processing apparatus itself and a different information processing apparatus;
a first processing unit configured to judge, on the basis of the received ultimate destination address, whether or not the route information storing unit stores one or more associated first next destination addresses, and, if so, extracting one of the associated first next destination addresses as a second next destination address;
a second processing unit configured to judge whether or not a received packet includes a message authentication code for the second next destination address, on the basis of the received packet and the second next destination address;
a first packet generating unit configured to generate a first packet on the basis of the received packet and the second next destination address in the case where the received packet includes the message authentication code for the second next destination address;
a third processing unit configured to judge whether or not the key information storing unit stores, as a second shared key, a first shared key shared between the information processing apparatus itself and another information processing apparatus specified by the second next destination address, in the case where the received packet does not include the message authentication code for the second next destination address;
a message authentication code generating unit configured to generate a first message authentication code on the basis of the data and the second shared key in the case where the key information storing unit stores the second shared key;
a second packet generating unit configured to generate a second packet including the ultimate destination address, the data, and the first message authentication code;
a third packet generating unit configured to generate a third packet, which includes a next destination and information indicating that the generation of a message authentication code is impossible, in the case where the key information storing unit does not store the second shared key;
and
a transmitting unit configured to transmit one of the first packet, the second packet or the third packet.

9 more elements

An information processing apparatus comprising:

a receiving unit configured to receive a first packet sent from a first apparatus, the first packet including data, a message authentication code and an ultimate destination address representing address information of an ultimate destination;
a message authentication code verifying unit configured to verify whether or not the received packet includes a proper message authentication code;
a route information storing unit configured to store the ultimate destination address and one or more first next destination addresses in association with each other, each first next destination address representing address information of a next forwarding destination;
a transfer control information processing unit configured to change a value set in transfer control information by a predetermined method if a result of the verification shows that the received packet includes the proper message authentication code;
a first processing unit configured to judge, on the basis of the received ultimate destination address, whether or not the route information storing unit stores one or more associated first next destination addresses, and, if so, extracting one of the associated first next destination addresses as a second next destination address;
a second processing unit configured to judge whether or not a received packet includes a message authentication code for the second next destination address, on the basis of the received packet and the second next destination address;
a key information storing unit configured to store one or more first shared keys, each first shared key being a key shared between the information processing apparatus itself and a different information processing apparatus;
a first packet generating unit configured to generate a first packet on a basis of the received packet and the second next destination address in the case where the received packet includes the message authentication code for the second next destination address;
a third processing unit configured to judge whether or not the key information storing unit stores, as a second shared key, a first shared key shared between the information processing apparatus itself and another information processing apparatus specified by the second next destination address, in the case where the received packet does not include the message authentication code for the second next destination address;
a message authentication code generating unit configured to generate a first message authentication code on the basis of the data and the first shared key in the case where the key information storing unit stores the second shared key;
a second packet generating unit configured to generate a second packet including the ultimate destination address, the data, and the first message authentication code;
a third packet generating unit configured to generate a third packet, which includes a next destination and information indicating that the generation of a message authentication code is impossible, in the case where the key information storing unit does not store the first shared key;
and
a transmitting unit configured to transmit one of the first packet, the second packet or the third packet.

11 more elements

Dependencies are inferred from the claim text.