Peer-to-peer communication apparatus and communication method

• US 7,337,465 B2
• Filed: 10/30/2003
• Issued: 02/26/2008
• Est. Priority Date: 03/11/2003
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Kiyoto, Satoshi, Hoshino, Kazuyoshi, Yumoto, Kazuma, Hidaka, Minoru
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): LEMMA, SAMSON B
• Application Number:
  US10/695,944
• Publication Number:
  US 20040181689A1
• Time in Patent Office: 1,580 Days
• Field of Search: 726/3, 726/1, 713/150, 713/168
• US Class Current: 726/1
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

A peer-to-peer communication apparatus connected to an IP network acquires, from a peer'"'"'s communication apparatus, presence information including information for judging a communication security environment of the peer'"'"'s communication apparatus and a security policy to be applied by the peer'"'"'s communication apparatus to a packet, displays the presence information and security policy information such that a user can judge the prosperity of the security policy information based on the presence information, and processes a data packet to be transmitted to the peer'"'"'s communication apparatus in accordance with the security policy approved by the user.

Claims

1. A peer-to-peer communication apparatus for performing one-to-one communication with another communication apparatus via an Internet Protocol (IP) network, comprising:

first means for performing an encryption process and/or an authentication process with respect to a packet;

second means for acquiring, from a peer'"'"'s communication apparatus specified by a user of the peer-to-peer communication apparatus, presence information including information for judging a communication security environment of said peer'"'"'s communication apparatus and security policy information including an encryption rule and an authentication rule, each to be applied to packets by said peer'"'"'s communication apparatus; and

third means for displaying said presence information and said security policy information such that said user judges propriety of the security policy information based on the presence information, and for allowing the user to partly change the security policy information,

wherein said first means processes a packet to be transmitted to said peer'"'"'s communication apparatus in accordance with a security policy approved by the user.

2. The peer-to-peer communication apparatus according to claim 1, further comprising:

a memory for storing the security policy information acquired from said peer'"'"'s communication apparatus or the security policy information partly changed by the user via said third means,

wherein said first means processes the packet to be transmitted to the peer'"'"'s communication apparatus in accordance with a security policy stored in the memory.

3. The peer-to-peer communication apparatus according to claim 1, further comprising:

a first memory for storing default security policy information to be applied by the peer-to-peer communication apparatus to peer-to-peer communication with the peer'"'"'s communication apparatus;

a second memory for storing the presence information including the information for judging the communication security environment of the peer'"'"'s communication apparatus; and

fourth means for returning, in response to a request for the presence information and the security policy information from the peer'"'"'s communication apparatus, a response message including the default security policy information read out from said first memory and the presence information read out from said second memory.

4. The peer-to-peer communication apparatus according to claim 3, further comprising:

a presence information processing unit for partly changing, upon occurrence of a change in the communication environment resulting from movement of the peer'"'"'s communication apparatus, said presence information stored in said second memory.

5. The peer-to-peer communication apparatus according to claim 1, wherein said first means processes a data packet to be transmitted and a packet received from the IP network in accordance with a security policy of IP security protocols defined by the Internet Engineering Task Force (IETF).

6. A method for peer-to-peer communication between a first communication apparatus and a second communication apparatus each connected to an Internet Protocol (IP) network, the method comprising the steps of:

requesting, from the first communication apparatus to the second communication apparatus, presence information for judging a communication security environment of said second communication apparatus and security policy information including an encryption rule and an authentication rule to be applied to a packet by said second communication apparatus;

transmitting, from the second communication apparatus to the first communication apparatus, the presence information and security policy information of the second communication apparatus;

outputting to a display screen by the first communication apparatus, the presence information and security policy information received from said second communication apparatus, such that a user can judge propriety of the security policy information based on the presence information; and

performing packet communication with the second communication apparatus by the first communication apparatus in accordance with the security policy approved by the user on said display screen.

7. The method for peer-to-peer communication according to claim 6, further comprising the step of:

allowing the user to partly correct the security policy information outputted to said display screen by the first communication apparatus,

wherein the first communication apparatus performs the packet communication with the second communication apparatus in accordance with said corrected security policy.