RELAY DEVICE

• US 20100077203A1
• Filed: 07/13/2006
• Published: 03/25/2010
• Est. Priority Date: 07/13/2006
• Status: Abandoned Application

• Current Assignee: Into Company Limited
• Original Assignee: Into Company Limited
• Inventors: Ozaki, Hirotsugu, Ogawa, Keiko
• Application Number:
  US12/373,370
• Publication Number:
  US 20100077203A1
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 69/03 Protocol definition or specification protocol conformance testing H04L1/244
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/32 Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
• CPC Class Codes: H04L 69/326 in the transport layer [OSI layer 4] H04L69/16 takes precedence

Abstract

“Leakage”, “falsifying”, “masquerading”, “approach”, or “attack” of data on the Internet are prevented in a communication between a personal computer and the outside thereof without installing software or hardware in the personal computer. An intermediary apparatus includes NIC (Network Interface Card) drivers connected to networks respectively and a network layer and a transport layer which include “TCP/IP” defining a communication method for communicating while carrying out routing (ROUTING) between any two nodes and is provided for a physical layer and a data-link layer including the NIC drivers. Between the data-link layer and network layer, the function of “TCP2” can be provided.

Claims

1. An intermediary apparatus used when carrying out communication of computerized information by adding an encryption function to a TCP or UDP protocol positioned in a transport layer, the intermediary apparatus comprising:

arrangement means for arranging corresponding encryption and decryption logic with an opposite apparatus thereto;

protocol encryption means for encrypting and transmitting at least a payload of the protocol in packets as information units transmitted and received according to the encryption logic arranged by the arrangement means; and

protocol decryption means for decrypting the received encrypted payload of the TCP or UDP protocol according to the decryption logic arranged by the arrangement means, wherein

communication is carried out based on the encryption and decryption logic using the TCP or UDP protocol of the transport layer.

2. The intermediary apparatus according to claim 1, wherein

encryption and decryption logic which can be an arrangement candidate according to the arrangement means for arranging the encryption and decryption logic is stored in a memory or implemented on a circuit;

and logic changing means for periodically changing the encryption and decryption logic stored or implemented which can be an arrangement candidate is further included.

3. The intermediary apparatus according to claim 1, wherein

the arrangement means for arranging the encryption and decryption logic is allowed to handle a plaintext without encryption in connection with the encryption and decryption logic.

4. The intermediary apparatus according to claim 2, wherein

the arrangement means for arranging the encryption and decryption logic is allowed to handle a plaintext without encryption in connection with the encryption and decryption logic.