Communication device, communication system, communication method, and computer program product

• US 9,509,589 B2
• Filed: 02/19/2014
• Issued: 11/29/2016
• Est. Priority Date: 03/25/2013
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Tanizawa, Yoshimichi, Sato, Hideaki, Takahashi, Ririka
• Primary Examiner(s): Su, Sarah
• Application Number:
  US14/183,882
• Publication Number:
  US 20140289520A1
• Time in Patent Office: 1,014 Days
• Field of Search: 713/168, 713/153, 709/238
• US Class Current: 1/1
• CPC Class Codes: H04L 45/12 Shortest path evaluation
• CPC Class Codes: H04L 45/14 Routing performance; Theoretical aspects
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838

Abstract

According to an embodiment, a communication device is connected to a first network and a second network. The communication device includes a generating unit and a converting unit. The generating unit is configured to generate a first set of route information that is route information of the first network. The converting unit is configured to convert the first set of route information, and generate a second set of route information that is route information of the second network.

Claims

1. A communication device connected to a first network in which nodes are connected and a second network in which the nodes are connected, the communication device comprising:

a generating unit configured to generate a first set of route information that is route information of the first network by communicating with nodes over the first network;

a converting unit configured to convert the first set of route information to a second set of route information that is route information of the second network by converting at least a portion of addresses in the first set of route information, without communicating with nodes over the second network; and

a storage configured to store key information that is consumed after every instance of data exchange, wherein

the first network is used to share the key information between the nodes,

the storage stores the key information that is shared by using the first network, and

the second network is used for cryptographic communication between the nodes using the key information that is stored in the storage.

2. The device according to claim 1, wherein

the first set of route information contains addresses in the first network,

the second set of route information contains addresses in the second network, and

the converting unit is configured to generate the second set of route information that contains converted addresses in the first network.

3. The device according to claim 1, wherein

the second network is encrypted and subjected to data authentication with the key information, and

the first network is subjected to data authentication with the key information.

4. The device according to claim 1, wherein the generating unit is configured to generate the first set of route information using cost information assigned to each of a plurality of links included in the second network.

5. The device according to claim 1, further comprising a transfer processing unit configured to stop a data transfer operation while the converting unit is generating the second set of route information.

6. The device according to claim 1, wherein

the first set of route information contains first-type link addresses, which are assigned to a plurality of links included in the first network, and first-type representative addresses, which are used as at least either destinations or sources in the first network,

the second set of route information contains second-type link addresses, which are assigned to a plurality of links included in the second network, and second-type representative addresses, which are used at least as either destinations or sources in the second network, and

the converting unit is configured to

convert the first-type link addresses into the second-type link addresses, and

convert the first-type representative addresses into the second-type representative addresses.

7. The device according to claim 1, further comprising:

a quantum communication interface configured to communicate with another device using a photon communication link.

8. A communication system comprising:

a plurality of communication devices connected to a first network in which nodes are connected and a second network in which the nodes are connected, wherein

each of the communication devices includes

a generating unit configured to generate a first set of route information that is route information of the first network by communicating with nodes over the first network;

a converting unit configured to convert the first set of route information to a second set of route information that is route information of the second network, by converting at least a portion of addresses in the first set of route information, without communicating with nodes over the second network; and

a storage configured to store key information that is consumed after every instance of data exchange, wherein

the first network is used to share the key information between the nodes,

the storage stores the key information that is shared by using the first network, and

the second network is used for cryptographic communication between the nodes using the key information that is stored in the storage.

9. A communication method implemented in a communication device that is connected to a first network in which nodes are connected and a second network in which the nodes are connected, the communication method comprising:

generating a first set of route information that is route information of the first network by communicating with nodes over the first network; and

converting the first set of route information to a second set of route information that is route information of the second network, by converting at least a portion of addresses in the first set of route information, without communicating with nodes over the second network, the second network being encrypted with key information that is consumed after every instance of data exchange and that is stored in a storage, the first network being used to share the key information between the nodes, the storage storing the key information that is shared by using the first network, and the second network being used for cryptographic communication between the nodes using the key information that is stored in the storage.