Data communication method and system

• US 20070288754A1
• Filed: 03/30/2007
• Published: 12/13/2007
• Est. Priority Date: 03/30/2006
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Kaji, Tadashi, Hoshino, Kazuyoshi, Takeuchi, Keisuke, Takata, Osamu, Fujishiro, Takahiro, Yato, Akifumi
• Application Number:
  US11/729,947
• Publication Number:
  US 20070288754A1
• Time in Patent Office: Days
• US Class Current: 713/175
• CPC Class Codes: H04L 61/45 Network directories; Name-to-address mapping
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

An encrypted communication method, and a system for the method, can transfer a session control message designated by identification information inherent to an application to a connection destination through a session management server. When an application program of a client or encrypted communication software issues a connection request in the form designating an application server by identification information inherent to each application, the identification information is automatically changed to a desired address-of-record capable of domain identification and a transfer destination domain of a reception message is judged.

Claims

1. A data communication method between a client and an application server in a communication system including a communication network having a plurality of domains, management servers for managing respective domains, and clients and service servers connected to mutually different domains, comprising:

a first step in which a client designates a service identifier and inquires an address-of-record of the application server to which the service identifier is allocated which the address-of-record contains a belonging domain name, to a first management server managing the domain to which the client belongs;

a second step in which the first management server receiving the query from the client acquires the belonging domain name of the application server from the domain management table managing a mapping between the service identifier and its belonging domain, designates a service identifier of the application server to a second management server managing the belonging domain and inquires an address-of-record allocated to the application server and containing the belonging domain name of the application server;

a third step in which the second management server acquires an address-of-record corresponding to the service identifier of the application server from an identification information management table managing a mapping between the service identifier and the address-of-record, and reporting the address-of-record to the client;

a fourth step in which the client transmits a connection request message containing the address-of-record of the application server acquired to the first management server; and

a fifth step in which the first management server judges a transmission destination of the connection request message received on the basis of the domain name contained in the address-of-record described in the connection request message received, and transfers the connection request message to the application server or the second management server managing the belonging domain of the application server.

2. The data communication method as defined in claim 1, wherein the first management server is a session management server managing a communication session of the domain to which the client belongs, and the second management server accepting the query from the first management server is a session management server managing a communication session of the domain to which the application server belongs.

3. The data communication method as defined in claim 1, wherein the first management server is an identification information management server managing identification information of the domain to which the client belongs, and the second management server accepting the query from the first management server is an identification information management server managing identification information of the domain to which the application server belongs.

4. The data communication method as defined in claim 1, which further comprises:

a sixth step in which the application server returns a connection response message containing parameter information necessary for encrypted communication to the requesting client through the management server in response to the reception of the connection request message; and

a seventh step in which a message encrypted in accordance with the parameter information designated by the connection response message is communicated between the client and the application server.

5. The data communication method as defined in claim 2, wherein the session management server comprises an SIP (Session Initiation Protocol) server, a communication message between the client and the session management server is encrypted, and the service identifier is an IP address of the application server.

6. The data communication method as defined in claim 5, wherein communication data between the client and the application server is encrypted.

7. A management server DSV for communicating with clients and servers and managing respective domains in a communication network including a plurality of domains, comprising:

a domain management table for managing a correspondence relation between a service identifier and its belonging domain;

the management server acquiring a belonging domain name of an application server from the domain management table when receiving from the client a query of an address-of-record containing a belonging domain name of the application server to which the service identifier is allocated, by designating a service identifier;

inquiring an address-of-record containing a belonging domain name of the application server allocated to the application server to other management server by designating a service identifier of the application server;

acquiring the address-of-record of the application server inquired, from other management server;

reporting the address-of-record acquired to the client, judging a transmission destination of the connection request message received on a basis of the domain name contained in the address-of-record described in the connection request message received when receiving the connection request message containing the address-of-record of the application server reported; and

transferring the connection request message to the application server or other management server managing the belonging domain of the application server.