Server apparatus, and method of distributing a security policy in communication system

• US 20050055579A1
• Filed: 08/19/2004
• Published: 03/10/2005
• Est. Priority Date: 08/21/2003
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Tamada, Yuzo, Kanda, Mitsuru
• Application Number:
  US10/921,203
• Publication Number:
  US 20050055579A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A server comprises a server memory to store data indicating a plurality of different security policies necessary for communications in a network, a server receiver to receive a request message for requesting transmission of data of a security policy from a host computer, and a server transmitter to transmit a notification message including data of the security policy in response to the request message.

Claims

1. A server apparatus connectable to a network, comprising:

a server memory to store data indicating a plurality of different security policies necessary for communications in the network;

a server receiver to receive a request message for requesting transmission of data of a security policy; and

a server transmitter to transmit a notification message including the data of the security policy in response to the request message.

2. A communication system comprising:

at least one host computer connectable to the network and to, via the network, at least one server including the server according to claim 1 whose address is unclear for the host computer, the host computer including a host transmitter to transmit the request message to a server multicast address of the server, a host receiver to receive the notification message from the server, and a host memory to store data of a security policy included in the notification message received by the host receiver, the host computer performing communication according to data of the security policy stored in the host memory.

3. The communication system-according to claim 2, wherein the server transmitter includes means for transmitting, in response to the request message, the notification message to an address of the host computer specified by a host multicast address receivable by the host computer or a transmission source address included in a packet of the request message received by the server receiver.

4. The communication system according to claim 2, wherein the host transmitter transmits the request message when the host computer is connected to the network.

5. The communication system according to claim 2, wherein the server transmitter transmits the notification message to the host multicast address by ciphering and signing it in a public key, and the host receiver receives the ciphered notification message and decodes it and authenticates it based on the public key.

6. A server apparatus connectable to a network, comprising:

a server memory to store security policy data indicating a plurality of security policies necessary for communications in the network, and

a server transmitter to transmit a notification message including the security policy data to a multicast address periodically or when contents stored in the server memory changes.

7. A communication system comprising:

at least one host computer connectable to the network and to at least one server including the server according to claim 6 via the network, the host computer including a host receiver to receive the notification message addressed to the multicast address, a host memory to store data of a security policy included in the notification message, the host computer performing communication according to the data of the security policy stored in the host memory.

8. The communication system according to claim 7, wherein the server transmitter transmits the notification message to the multicast address by ciphering and signing it in a public key, and the host receiver receives the ciphered notification message and decodes it and authenticates it based on the public key.

9. The communication system according to claim 7, wherein the host computer includes a host transmitter to transmit a request message for requesting transmission of the data of the security policy to a server multicast address of the server, and the server includes a server receiver that receives the request message to transmit the notification from the sever transmitter in response to the request message.

10. The communication system according to claim 9, wherein the host transmitter transmits the request message after a give time from when the host computer is connected to the network.

11. The communication system according to claim 10, wherein the server transmitter transmits the notification message to the host multicast address by ciphering and signing it in a public key, and the host receiver receives the ciphered notification message and decodes it and authenticates it based on the public key.

12. A method of distributing a security policy to a network, comprising:

connecting a security policy server storing data indicating a plurality of different security policies necessary for communications in the network to the network;

requesting transmission of data of a security policy to the security policy server; and

transmitting a notification message including the data of the security policy from the security policy server to a multicast address in response to the requesting.

13. The method according to claim 12, wherein the requesting includes requesting the data of the security policy by at least one host computer connectable to the network and to, via the network, at least one server including the server whose address is unclear for the host computer, and the transmitting includes transmitting the notification message to the host computer.

14. The method according to claim 13, wherein the transmitting includes transmitting, in response to the request message, the notification message to an address of the host computer specified by a host multicast address receivable by the host computer or a transmission source address included in a packet of the request message.

15. The method according to claim 13, wherein the host transmitter transmits the request message when the host computer is connected to the network.

16. The method according to claim 13, wherein the transmitting includes transmitting the notification message to the host multicast address by ciphering and signing it in a public key.

17. A method of distributing a security policy to a network, comprising:

connecting a security policy server storing security policy data indicating a plurality of security policies necessary for communications in the network, and

transmitting a notification message including the security policy data to a multicast address periodically or when contents stored in the server memory changes.

18. The method according to claim 17, wherein the transmitting includes transmitting the notification message to the multicast address of at least one host computer connectable to the network and to at least one server including the server via the network.

19. The method according to claim 18, wherein the transmitting includes transmitting the notification message to the multicast address by ciphering and signing it in a public key.

20. The method according to claim 18, which includes transmitting a request message for requesting transmission of the data of the security policy to a server multicast address of the server after a give time from when the host computer is connected to the network.