Packet transmitting and receiving apparatus and packet transmitting and receiving method

• US 8,897,441 B2
• Filed: 05/17/2010
• Issued: 11/25/2014
• Est. Priority Date: 05/26/2009
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Inoue, Toshifumi, Fukuda, Isamu, Fukuda, Kenji, Hoshino, Kiyohisa, Fukuda, Nobuyuki, Fukunaga, Yoshiaki, Hirasawa, Satoru
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): JHAVERI, JAYESH M
• Application Number:
  US12/781,435
• Publication Number:
  US 20100303233A1
• Time in Patent Office: 1,653 Days
• Field of Search: 380277-286, 380 44- 46, 713/150, 713/160, 713/171
• US Class Current: 380/44
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0471 Key exchange

Abstract

When being triggered by a call setting request that has been made, dummy information that is different from information to be transmitted and is information used for creating a path on which encrypted communication is to be performed is generated. The path on which the encrypted communication is to be performed is established by using the generated dummy information. A responding process of responding to the call setting request is performed after the path on which the encrypted communication is to be performed has been established. Thus, in the case where information that is obtained after the responding process of responding to the call setting request is encrypted and transmitted, it is possible to transmit the information while maintaining the real-time characteristics of the information to be transmitted.

Claims

1. A packet transmitting and receiving apparatus comprising:

a memory; and

a processor coupled to the memory, wherein

the processor executes a process comprising;

generating dummy data to establish a security association for user data;

transmitting the dummy data to a transmission destination of the user data when the transmitting and receiving apparatus performs encrypted communication with the transmission destination of the user data bidirectionally, the dummy data making the transmission destination of the user data exchange an encryption key with the packet transmitting and receiving apparatus and the dummy data containing information which requests the transmission destination of the user that the transmission destination of the user return the dummy data to the transmitting and receiving apparatus, and not transmitting the dummy data to the transmission destination of the user data when the transmitting and receiving apparatus performs the encrypted communication with the transmission destination of the user data one-way;

establishing the security association for the user data in accordance with the dummy data.

2. The packet transmitting and receiving apparatus according to claim 1, wherein the transmitting includes transmitting the dummy data for each of transmission destinations each of which is to receive the user data.

3. A packet transmitting and receiving method comprising:

generating dummy data to establish a security association for user data;

transmitting the dummy data to a transmission destination of the user data when the transmitting and receiving apparatus performs encrypted communication with the transmission destination of the user data bidirectionally, the dummy data making the transmission destination of the user data exchange an encryption key with a transmission origin of the user data and the dummy data containing information which requests the transmission destination of the user that the transmission destination of the user return the dummy data to the transmitting and receiving apparatus, and not transmitting the dummy data to the transmission destination of the user data when the transmitting and receiving apparatus performs the encrypted communication with the transmission destination of the user data one-way;

establishing the security association for the user data in accordance with the dummy data.

4. The packet transmitting and receiving method according to claim 3, wherein the transmitting includes transmitting the dummy data for each of transmission destinations each of which is to receive the user data.