COMMUNICATION APPARATUS AND METHOD FOR DETECTING ABNORMALITY OF ENCRYPTION COMMUNICATION

• US 20170149743A1
• Filed: 10/24/2016
• Published: 05/25/2017
• Est. Priority Date: 11/19/2015
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Fukuda, Isamu
• Application Number:
  US15/332,093
• Publication Number:
  US 20170149743A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

A communication apparatus includes: a memory configured to store negotiation information used to negotiate a path of encryption communication established with a opposite apparatus; and a processor coupled to the memory and configured to execute a monitoring process. The monitoring process includes a process of monitoring a monitoring target packet specified using the negotiation information among a plurality of packets transmitted and received on the path, and a process of detecting abnormality of the encryption communication in a case in which the monitoring target packet is not received within a predetermined time.

Claims

1. A communication apparatus, the apparatus comprising:

a memory configured to store negotiation information used to negotiate a path of encryption communication established with a opposite apparatus; and

a processor coupled to the memory and configured to execute a monitoring process, the monitoring process including a process of monitoring a monitoring target packet specified using the negotiation information among a plurality of packets transmitted and received on the path, and a process of detecting abnormality of the encryption communication in a case in which the monitoring target packet is not received within a predetermined time.

2. The apparatus according to claim 1,

wherein the processor is configured to execute a recovery process, the recovery process including a process of executing a recovery method specified using the negotiation information in a case in which the abnormality of the encryption communication is detected.

3. The apparatus according to claim 1,

wherein the processor is configured to execute a negotiation process, the negotiation process including:

a process of putting information for negotiation of the monitoring target packet included in the negotiation information into a message for the negotiation of the path and transmitting the message to the opposite apparatus; and

a process of receiving a reply message including a result of the negotiation of the path and a negotiation result of the monitoring target packet, and

wherein the monitoring process includes a process of monitoring the monitoring target packet specified based at least in part on the negotiation result of the monitoring target packet.

4. The apparatus according to claim 1,

wherein the processor is configured to execute a negotiation process, the negotiation process including:

a process of putting information for negotiation of the monitoring target packet and information for negotiation of a recovery method included in the negotiation information into a message of establishment negotiation of the path and transmitting the message to the opposite apparatus; and

a process of receiving a reply message including a negotiation result of the path, a negotiation result of the monitoring target packet, and a negotiation result of the recovery method,

wherein the monitoring process includes a process of monitoring the monitoring target packet specified based at least in part on the negotiation result of the monitoring target packet, and

wherein the recovery process includes executing a recovery method specified based at least in part on the negotiation result of the recovery method.

5. The apparatus according to claim 3,

wherein the information for the negotiation of the monitoring target packet includes a plurality of candidates of the monitoring target packet, and

wherein the monitoring process includes a process of monitoring at least one monitoring target packet selected by the opposite device from the plurality of candidates of the monitoring target packet.

6. The apparatus according to claim 4,

wherein the information for the negotiation of the recovery method includes a plurality of candidates of the recovery method, and

wherein the monitoring process includes executing at least one recovery method selected by the opposite apparatus from the plurality of candidates of the recovery method.

7. The apparatus according to claim 1,

wherein the negotiation information stored in the memory includes specific information of a target packet of the encryption communication and specific information of the monitoring target packet regulated using a common information item.

8. The apparatus according to claim 2,

wherein the recovery process includes executing a recovery method corresponding to a recovery state stored in a nonvolatile storage medium among a plurality of recovery methods decided in the negotiation with the opposite apparatus.

9. A method for detecting abnormality of encryption communication, the method comprising:

storing negotiation information for negotiating a path of the encryption communication to be established with a opposite apparatus; and

detecting abnormality of the encryption communication in a case in which a monitoring target packet specified using the negotiation information is not received within a predetermined time, the monitoring target packet being a packet transmitted or received on the path.