Communication system with function of encryption/decryption by agency

• US 20040107263A1
• Filed: 11/25/2003
• Published: 06/03/2004
• Est. Priority Date: 11/29/2002
• Status: Abandoned Application

• Current Assignee: NEC Infrontia Corporation (NEC Corporation)
• Original Assignee: NEC Infrontia Corporation (NEC Corporation)
• Inventors: Fujiwara, Hidehiko, Kobayashi, Yoshikazu
• Application Number:
  US10/720,129
• Publication Number:
  US 20040107263A1
• Time in Patent Office: Days
• US Class Current: 709/210
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

An agency communication section is equipped in an intranet, and when communications are made with a slave unit on the Internet which is located outside a firewall, the agency communication section executes encryption/decryption by agency in place of a slave unit having no mechanism for encryption in the intranet. The slave unit having a mechanism for encryption judges whether it is located inside or outside the firewall, and executes encryption if it is located outside or executes no encryption if it is located inside.

Claims

1. A system for executing communications between a slave unit in an intranet protected by a firewall and another slave unit located outside the firewall through the Internet, the system comprises:

an agency communication section equipped to the intranet for executing encryption or decryption by agency for a slave unit having no mechanism for encryption in the intranet.

2. The communication system according to claim 1, wherein

said agency communication section executes the communications without encryption, when an access is made from a slave unit which is located outside the firewall and is not adapted to encryption.

3. The communication system according to claim 1, wherein

said agency communication section executes communications without encryption or inhibits communications, when an access is made from a slave unit inside the firewall to a terminal which is located outside the firewall and is not adapted to encryption.

4. The communication system according to claim 2, wherein

said agency communication section executes communications without encryption or inhibits communications, when an access is made from a slave unit inside the firewall to a terminal which is located outside the firewall and is not adapted to encryption.

5. The communication system according to claim 1, wherein

said agency communication section has a virtual slave unit having the function of the slave unit and a function of converting voice and data formats to go beyond the firewall, and said virtual slave unit executes communications by agency.

6. The communication system according to claim 2, wherein

said agency communication section has a virtual slave unit having the function of the slave unit and a function of converting voice and data formats to go beyond the firewall, and said virtual slave unit executes communications by agency.

7. The communication system according to claim 3, wherein

said agency communication section has a virtual slave unit having the function of the slave unit and a function of converting voice and data formats to go beyond the firewall, and said virtual slave unit executes communications by agency.

8. The communication system according to claim 1, wherein

said agency communication section analyzes the encrypted data to judge whether the encrypted data indicates a Web access or encrypted private branch IP telephone communication, and executes the communications to a Web server or a slave unit in the intranet on the basis of the judgment result.

9. The communication system according to claim 2, wherein

said agency communication section analyzes the encrypted data to judge whether the encrypted data indicates a Web access or encrypted private branch IP telephone communication, and executes the communications to a Web server or a slave unit in the intranet on the basis of the judgment result.

10. The communication system according to claim 3, wherein

said agency communication section analyzes the encrypted data to judge whether the encrypted data indicates a Web access or encrypted private branch IP telephone communication, and executes the communications to a Web server or a slave unit in the intranet on the basis of the judgment result.

11. The communication system according to claim 1, wherein

the communications between a slave unit inside the intranet and a slave unit on the Internet are executed through an HTTP port of the firewall.

12. The communication system according to claim 2, wherein

the communications between a slave unit inside the intranet and a slave unit on the Internet are executed through an HTTP port of the firewall.

13. The communication system according to claim 3, wherein

the communications between a slave unit inside the intranet and a slave unit on the Internet are executed through an HTTP port of the firewall.

14. The communication system according to claim 1, wherein

a slave unit having a mechanism for encryption is used, and said slave unit has means for judging whether said slave unit is located inside or outside the firewall, said slave unit executing encryption if it is judged by said means that said slave unit is located outside the firewall or stopping the encryption function if it is judged by said means that said slave unit is located inside the firewall.

15. The communication system according to claim 2, wherein

a slave unit having a mechanism for encryption is used, and said slave unit has means for judging whether said slave unit is located inside or outside the firewall, said slave unit executing encryption if it is judged by said means that said slave unit is located outside the firewall or stopping the encryption function if it is judged by said means that said slave unit is located inside the firewall.

16. The communication system according to claim 3, wherein

a slave unit having a mechanism for encryption is used, and said slave unit has means for judging whether said slave unit is located inside or outside the firewall, said slave unit executing encryption if it is judged by said means that said slave unit is located outside the firewall or stopping the encryption function if it is judged by said means that said slave unit is located inside the firewall.