Communication system, communication device, and communication method with a security policy for communication between devices

A communication device performing communication with other communication devices through a network, comprising:

• a security policy storing unit that is able to store a first security policy including an encryption method and an encryption key applied to predetermined communication with a predetermined communication device in a predetermined communication target range and a second security policy including an encryption method and an encryption key applied to all communication to which the first security policy in the communication target range is not applied, the second security policy being set by a user and inputted via an input unit of the communication device;
• a first communication unit that performs communication of a communication packet with other communication devices;
• and
• a first encryption processing unit that performs an encryption process on the transmitted communication packet and a decryption process of the received communication packet according to the second security policy when it is determined that the first security policy does not apply to the other communication devices, the other communication devices receiving the encryption key via an input in the other communication devices.

A communication method in a communication system including a first communication device and a second communication device connected through a network, the first communication device and the second communication device performing a communication process on the basis of a security policy set for each device,

• wherein the first communication device includes a security policy storing unit that is able to store a first security policy including an encryption method and an encryption key applied to predetermined communication with a predetermined communication device in a predetermined communication target range and a second security policy including an encryption method and an encryption key applied to all communication to which the first security policy in the communication target range is not applied, the second security policy being set by a user and inputted via an input unit of the first communication device,
• the communication method comprising:
• receiving an input of the encryption key stored in the second security policy of the first communication device by a user input of the second communication device comprising an first encryption key receiving unit;
• generating a third security policy including the encryption method of the second security policy and the input encryption key by a policy generating unit of the second communication device;
• performing an encryption process on the communication packet transmitted to the first communication device and a decryption process of the communication packet received from the first communication device according to the third security policy by a second encryption processing unit of the second communication device;
• performing communication of the communication packet with the first communication device through the network by a second communication unit of the second communication device;
• performing communication of the communication packet with the second communication device through the network by a first communication unit of the first communication device;
• and
• performing the encryption process on the transmitted communication packet and the decryption process of the received communication packet according to the second security policy by a first encryption processing unit of the first communication device, when it is determined that the first security policy does not apply to the second communication device.