Cooperation method and system between send mechanism and IPSec protocol in IPV6 environment

A non-transitory recorded medium tangibly embodying a program of instructions executable by a computer to enable a cooperation system between a SEND processing block and an IPSec processing block comprising the steps of:

• receiving an authentication completion report message including an IP address of a host whose authentication is completed by the SEND processing block;
• generating new authentication information corresponding to the same host and storing the new authentication information in a temporary storage area, when authentication information for the host is not present in the temporary storage area, wherein the authentication information includes the IP address of the host;
• and
• when an authentication check request message including an IP address is received from the IPSec processing block, checking, by referring to the temporary storage area, whether the IP address included in the authentication check request message is the same as the IP address of the host whose authentication was previously completed by the SEND processing block and sending the result of checking to the IPSec processing block,
• wherein, when the IP address included in an authentication check request message is present in the temporary storage area, authentication of the host corresponding to the IP address included in an the authentication check request message is determined to be completed, and an authentication check pass message is sent to the IPSec processing block, and
• wherein both the SEND processing block and the IPSec processing block are implemented on a computing device.

A system enabling cooperation between a SEND processing block and an IPSec processing block, the system comprising:

• a processor;
• an authentication cache, temporarily storing authentication information of a host whose authentication is completed;
• a SEND processing block, configured to perform user authentication for an opposite host and send an IP address of the authenticated opposite host to an authentication cache management module;
• an authentication cache management module, configured to, when an IP address of an authenticated host is received from the SEND processing block, store the IP address in the authentication cache or check for authentication of the IP address by referring to the authentication cache in accordance with an authentication check request from an IPSec processing block;
• and
• an IPSec processing block, configured to send an authentication check request message including an IP address of a host to be authenticated to the authentication cache management module and determine whether the host associated with the authentication check request message is authenticated in accordance with a result of the authentication check received from the authentication cache management module,
• wherein the authentication cache management module is further configured to send an authentication check pass message, indicating that user authentication of the host associated with the authentication check request message was previously completed by the SEND processing block, to the IPSec processing block, when, upon referring to the authentication cache, the authentication cache management module determines that the IP address for which the authentication check is requested is the same as the IP address of the previously authenticated host, and
• wherein both the SEND processing block and the IPSec processing block are executed by the processor.