Network apparatus, IPsec setting method therein, and computer-readable recording medium storing a control program for executing the method
First Claim
1. A network apparatus which is connected to a network, comprising:
- a controller including a CPU and a system memory;
a managing unit responsive to the controller which manages an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other;
an input unit which receives a user selection of a combination of encryption parameters;
an address generating unit responsive to the controller which generates an address for the destination network apparatus by selecting an address in the address range, wherein the address in the address range is registered with a combination of the encryption parameters and the address range is determined as the address range corresponding to the user selection of the combination of the encryption parameters; and
an encryption unit responsive to the controller which encrypts the data to be transmitted to the address generated by the address generating unit based on the encryption parameters, and encrypts the data to be transmitted to the generated address by IPsec,wherein the selected address in the address range is registered beforehand with a predetermined security level, andthe security level is one of at least a high level, a middle level, and a low level, and the security level is registered in association with the encryption parameters such that the encryption parameters, which include a protocol, can be set based on receiving an input of the security level from the user without receiving an input of the protocol from the user.
1 Assignment
0 Petitions
Accused Products
Abstract
A network apparatus which is connected to a network is disclosed. The network apparatus includes a managing unit which manages an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other, an address generating unit which generates an address for the destination network apparatus by selecting an address in the address range, and an encryption unit which encrypts the data to be transmitted to the address generated by the address generating unit based on the encryption parameters.
-
Citations
15 Claims
-
1. A network apparatus which is connected to a network, comprising:
-
a controller including a CPU and a system memory; a managing unit responsive to the controller which manages an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other; an input unit which receives a user selection of a combination of encryption parameters; an address generating unit responsive to the controller which generates an address for the destination network apparatus by selecting an address in the address range, wherein the address in the address range is registered with a combination of the encryption parameters and the address range is determined as the address range corresponding to the user selection of the combination of the encryption parameters; and an encryption unit responsive to the controller which encrypts the data to be transmitted to the address generated by the address generating unit based on the encryption parameters, and encrypts the data to be transmitted to the generated address by IPsec, wherein the selected address in the address range is registered beforehand with a predetermined security level, and the security level is one of at least a high level, a middle level, and a low level, and the security level is registered in association with the encryption parameters such that the encryption parameters, which include a protocol, can be set based on receiving an input of the security level from the user without receiving an input of the protocol from the user. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. An IPsec setting method in a network apparatus having a CPU and a system memory, which is connected to a network, comprising the steps of:
-
managing, at the network apparatus, an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other; receiving, at the network apparatus, a user selection of a combination of encryption parameters; generating, at the network apparatus, an address for the destination network apparatus by selecting an address in the address range, wherein the address range is determined as the address range corresponding to the user selection of the combination of the encryption parameters; and encrypting, at the network apparatus, the data to be transmitted to the generated address based on the encryption parameters, wherein the selected address in the address range is registered beforehand with a predetermined security level, and the security level is one of at least a high level, a middle level, and a low level, and the security level is registered in association with the encryption parameters such that the encryption parameters, which include a protocol, can be set based on receiving an input of the security level from the user without receiving an input of the protocol from the user. - View Dependent Claims (10, 11, 12, 13, 14)
-
-
15. A non-transitory computer-readable recording medium storing a control program for executing an IPsec setting method, the method comprising:
-
managing an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other; receiving a user selection of a combination of encryption parameters; generating an address for the destination network apparatus by selecting an address in the address range, wherein the address range is determined as the address range corresponding to the user selection of the combination of the encryption parameters; and encrypting the data to be transmitted to the generated address based on the encryption parameters, wherein the selected address in the address range is registered beforehand with a predetermined security level, and the security level is one of at least a high level, a middle level, and a low level, and the security level is registered in association with the encryption parameters such that the encryption parameters, which include a protocol, can be set based on receiving an input of the security level from the user without receiving an input of the protocol from the user.
-
Specification