Apparatus for Encrypted Communication on Network

• US 20070162748A1
• Filed: 01/05/2007
• Published: 07/12/2007
• Est. Priority Date: 01/06/2006
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Tanaka, Akira, Okayama, Masataka
• Application Number:
  US11/620,185
• Publication Number:
  US 20070162748A1
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

An adapter device connected to a network for encrypted communication includes: a connection management unit for performing connection control for connection with a first communication device connected to a network via an access management server or a network outside the network; a storage unit for storing connection policy information for a first communication device and a second communication device directly connected to the adapter device; a communication control unit for judging a method of communication with the first communication device and the second communication device by using the connection policy information; and an encrypted communication unit for encrypting/decrypting communication data to/from the first communication device and the second communication device if the communication control unit makes a judgment of encrypted communication.

Claims

1. An adapter device connected to a network for encrypted communication, the apparatus comprising:

a memory for storing connection policy information for a first communication device connected to the network and a second communication device connected to the adapter device;

a communication controller for judging a method of communication from the first communication device to the second communication device by using the connection policy information; and

an encrypted communication unit for discarding communication data received from the first communication device if the communication controller makes a judgment of encrypted communication and the communication data is not encrypted.

2. The adapter device as claimed in claim 1, wherein

an access management device connected to the network includes a connection controller for registering the adapter device;

and

the connection controller detects a connection with the second communication device and registers it in the access management device.

3. The adapter device as claimed in claim 2, wherein

the adapter device includes a user information read unit;

and

the connection controller compares user information transmitted from the second communication device with user information read from the user information read unit and registers the information if they coincide.

4. The adapter device as claimed in claim 2, wherein

the connection controller releases the registration from the access management device upon detection of that the connection with the second communication device is cut off.

5. An adapter device connected to a network for performing encrypted communication, the adapter device comprising:

a memory for storing connection policy information for a first communication device connected to the network and a second communication device connected to the adapter device;

a communication controller for judging a method of communication from the second communication device to the first communication device by using the connection policy information; and

an encrypted communication unit for encrypting communication data received from the second communication device and transmitting it to the first communication device if the communication controller makes a judgment of encrypted communication.

6. The adapter device as claimed in claim 5, wherein

an access management device connected to the network includes a connection controller for registering the adapter device;

and

the connection controller detects a connection with the second communication device and registers it in the access management device.

7. The adapter device as claimed in claim 6, wherein

the adapter device includes a user information read unit;

and

the connection controller compares user information transmitted from the second communication device with user information read from the user information read unit and registers the information if they coincide.

8. The adapter device as claimed in claim 6, wherein

the connection controller releases the registration from the access management device upon detection of that the connection with the second communication device is cut off.

9. An encrypted communication method comprising steps of:

storing connection policy information for a first communication device connected to the network and a second communication device connected to the adapter device;

judging a method of communication from the first communication device to the second communication device by using the connection policy information; and

discarding communication data received from the first communication device if a judgment of encrypted communication is made and the transmission data is not encrypted.

10. The encrypted communication method as claimed in claim 9, wherein

when the communication controller makes a judgment of encrypted communication, the communication data received from the second communication device is encrypted before transmitted to the first communication device.

11. The encrypted communication method as claimed in claim 9, wherein

after connection with the second communication is detected, the adapter device is registered in the access management device.

12. The encrypted communication method as claimed in claim 11, wherein

user information received from the second communication device is compared to the user information read by the adapter device, and if the information coincide, it is registered in the access management device.

13. The encrypted communication method as claimed in claim 11, wherein

upon detection of that the connection with the second communication device is cut off, the registration is released from the access management device.