Security communication method, security communication system, and apparatus thereof

• US 20010042201A1
• Filed: 04/05/2001
• Published: 11/15/2001
• Est. Priority Date: 04/12/2000
• Status: Abandoned Application

• Current Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Tanaka, Yutaka, Ota, Yusaku, Yamauchi, Hiroki, Yamaguchi, Masashi
• Application Number:
  US09/825,857
• Publication Number:
  US 20010042201A1
• Time in Patent Office: Days
• US Class Current: 713/151
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The object of the invention is to provide an apparatus, system and method for the security communication, wherein it is possible to determine the level of the security communication per user who performs the data transmission, it is easy to change the connection parameter for the security communication, and it is possible to determine automatically the level of the scurrility communication with the connected end.

The invention stores the associating information associating information of user using a communication terminal with a security type, and then selects the security type from the associating information. In addition, the invention stores associating information associating Internet address information with a security type, and then selects the security type from the associating information according to the Internet address information. Moreover, it inquires a specific security information apparatus about the security type, and then selects the security type according to the reply of the inquiry.

Claims

1. A security communication apparatus for assuring the security of the communication sent from a communication terminal on a sending end to a communication terminal on a receiving end connected via network, which comprising:

storage means storing associating information that associates information of a user using the communication terminal on the sending end with a security type; and

security type selecting means selecting the security type from the associating information according to the information of user.

2. A security communication apparatus according to

claim 1

, wherein, when the associating information is changed, the security type selecting means confirms immediately that the communication is establishment based on the changed information.

3. A security communication apparatus according to either

claim 1

or

claim 2

, wherein the security type selected by the security type selecting means is a kind of security protocol.

4. A security communication apparatus according to

claim 3

, wherein the security protocol is IPSEC.

5. A security communication apparatus according to either

claim 1

or

2

, the security type selected by the security type selecting means is a group of definition information used for the security communication.

6. A security communication apparatus according to

claim 5

, wherein the group of definition information is a security policy.

7. A security communication apparatus according to

claim 5

, wherein the group of definition information includes at least either one of an authentication algorithm or an encryption algorithm.

8. A security communication system for assuring the security of the communication sent from a communication terminal on a sending end to a communication terminal on a receiving end connected via network, which comprising:

user authentication means authenticating a user using the communication terminal on the sending end;

storage means storing associating information that associates a user information with a security type; and

security type selecting means selecting the security type from the associating information according to the user information authenticated by the user authentication means .

9. A security communication system according to

claim 8

, wherein, when the associating information is changed, the security type selecting means confirms immediately that the communication is established based on the changed information.

10. A security communication method for assuring the security of the communication between communication terminals, those terminals connected each other via network, which comprising a step of:

selecting the security type according to the information of user using the communication terminal.

11. A security communication apparatus for assuring the security of the communication sent from a communication terminal on a sending end to a communication terminal on a receiving end connected via network, which comprising:

storage means storing associating information that associates Internet address information inputted into an application working in the communication terminal on the sending end with the security type; and

,

security type selecting means selecting the security type from the associating information according to the Internet address information.

12. A security communication apparatus according to

claim 11

, wherein, the associating information further associates the information of user using the communication terminal on the sending end with the security type, and the security type is selected according to the user information, too

13. A security communication apparatus according to either

claim 11

or

12

, the security type is selected by visually associating the visualized Internet address information with the visualized list of security type.

14. A security communication apparatus according to

claim 11

, wherein the Internet address information is converted to an IP address by utilizing the domain name system server.

15. A security communication apparatus according to either one of

claim 11

to 14, wherein the security type is a security protocol.

16. A security communication apparatus according to

claim 15

, wherein the security protocol is IPSEC.

17. A security communication apparatus according to either one of

claim 11

to 14, wherein the security type is a group of definition information used for the security communication.

18. A security communication apparatus according to

claim 17

, wherein the group of definition information is a security policy.

19. A security communication apparatus according to

claim 17

, wherein the group of definition information includes at least either one of an authentication algorithm or an encryption algorithm.

20. A security communication system for assuring the security of the communication sent from a communication terminal on a sending end to a communication terminal on a receiving end connected via network, which comprising:

storage means storing associating information that associates Internet address information inputted into an application working in the communication terminal on the sending end with a security type; and

,

security type selecting means selecting the security type from the associating information according to the Internet address information.

21. A security communication system according to

claim 20

, which further comprising user authentication means authenticating a user who uses the communication terminal on the sending end,

and wherein:

the associating information further associates information of user using the communication terminal on the sending end with the security type; and

the security type is selected according to the user information, too.

22. A security communication system according to either

claim 20

or

21

, wherein the security type is selected by visually associating the visualized Internet address information with the visualized list of security type.

23. A security communication method for assuring the security of the communication between communication terminals, those terminals connected via network, which comprising a step of:

associating Internet address information inputted into an application working in the communication terminal with the security type;

selecting the security type according to the Internet address information.

24. A security information apparatus which comprising:

storage means storing associating information that associates terminal specifying information specifying a communication terminal with a recommendable security type to the communication with the communication terminal;

recommendable security type managing means selecting the recommendable security type from the associating information according to the terminal specifying information in response to an inquiry about the recommendable security type to the communication terminal from a communication terminal other than the communication terminal; and

sending and receiving means sending the selected recommendable security type.

25. A security information apparatus according to

claim 24

, which further comprising inquiry means, in case where the terminal specifying information cannot be found out in the associating information, inquires the communication terminal about the recommendable security type to the communication with the communication terminal.

26. A security information apparatus according to either

claim 24

or

25

, wherein the security type is a security protocol.

27. A security information apparatus according to

claim 26

, wherein the security protocol is IPSEC.

28. A security information apparatus according to either

claim 24

or

25

, wherein the security type is a group of definition information used for the security communication.

29. A security information apparatus according to

claim 28

, wherein the group of definition information is a security policy.

30. A security information apparatus according to

claim 28

, wherein the group of definition information includes at least either one of an authentication algorithm or an encryption algorithm.

31. A security communication apparatus for assuring the security of the communication sent from a communication terminal on a sending end to a communication terminal on a receiving end connected via network, which comprising:

inquiry means inquiring a specific security information apparatus about the security type used for assuring the security;

security type selecting means selecting the security type according to a reply from the specific security information apparatus in response to the inquiry.

32. A security communication apparatus according to

claim 31

, wherein the reply includes one and more security type.

33. A security communication apparatus according to

claim 31

or

32

, wherein the security type is a security protocol.

34. A security communication apparatus according to

claim 33

, wherein the security protocol is IPSEC.

35. A security communication apparatus according to either

claim 31

or

32

, wherein the security type is a group of definition information used for the security communication.

36. A security communication apparatus according to

claim 35

, wherein the group of definition information is a security policy.

37. A security communication apparatus according to

claim 35

, wherein the group of definition information includes at least either one of an authentication algorithm or an encryption algorithm.

38. A security communication system provided with a security communication apparatus for assuring the security of the communication sent from a communication terminal on a sending end to a communication terminal on a receiving end connected via network,

wherein the security communication apparatus comprises inquiring means inquiring a specific security information apparatus about the security type used for assuring the security;

and security type selecting means selecting the security type according to a reply from the specific security information apparatus in response to the inquiry; and

the specific security information apparatus comprises storage means storing associating information that associates a terminal specifying information specifying a communication terminal with a recommendable security type to the communication with the communication terminal; and

recommendable security type managing means selecting the recommendable security type from the associating information according to the terminal specifying information in response to the inquiry about the recommendable security type to the communication terminal from a communication terminal other than the communication terminal;

sending means sending the selected recommendable security type.

39. A security communication system according to

claim 38

, wherein the specific security information apparatus is provided with inquiry means, in case where the terminal specifying information cannot be found out in the association information, inquires the communication on the receiving end about the recommendable security type to the communication terminal.

40. A security communication method provided with a security communication apparatus for assuring the security of the communication between communication terminals connected via network, wherein,

the security communication apparatus inquires the specific security information apparatus about the recommendable security type to a communication apparatus other than the communication apparatus;

the specific security information apparatus selects the recommendable security type in response to the inquiry from the communication apparatus, and then send it to the communication apparatus;

the security communication apparatus determines the security type according to the recommendable security type sent from the security information apparatus.