Communication system and security assurance device
First Claim
1. A communication system comprising:
- first communication device;
second communication device which communicates with the first communication device; and
a security assurance device which assures security during communication with the second communication device, wherein;
the second communication device transmits notification information for notifying its own security during communication to the security assurance device;
the security assurance device receives the notification information, verifies security of the second communication device during communication based upon the notification information, and, if the security during communication is confirmed, generates security assurance information which proves security during communication and transmits it to the second communication device;
the second communication device receives the security assurance information, and transmits the security assurance information to the first communication device according to a connection request from the first communication device; and
the first communication device, after the connection request to the second communication device, receives the security assurance information from the second communication device, and verifies security during communication with the second communication device based upon the security assurance information.
2 Assignments
0 Petitions
Accused Products
Abstract
A communication system and a security assurance device are proposed, which are capable of assuring that a target party for communication is implementing security countermeasures. A server 3 transmits information 104 necessary for AC issuance to a security assurance authority 2. The security assurance authority 2 verifies the security of the server 3 during communication based upon this information necessary for AC issuance 104. And, when the security of the server 3 during communication is confirmed, the security assurance authority 2 issues an AC 105 which proves the security of the server 3 during communication, and transmits it to the server 3. Upon receipt of this AC 105, the server 3 transmits the AC 105 to a client 4, according to a connection request from the client 4. And, upon receipt of this AC 105, the client 4 verifies the security during communication of the server 3, based upon the AC 105.
183 Citations
39 Claims
-
1. A communication system comprising:
-
first communication device;
second communication device which communicates with the first communication device; and
a security assurance device which assures security during communication with the second communication device, wherein;
the second communication device transmits notification information for notifying its own security during communication to the security assurance device;
the security assurance device receives the notification information, verifies security of the second communication device during communication based upon the notification information, and, if the security during communication is confirmed, generates security assurance information which proves security during communication and transmits it to the second communication device;
the second communication device receives the security assurance information, and transmits the security assurance information to the first communication device according to a connection request from the first communication device; and
the first communication device, after the connection request to the second communication device, receives the security assurance information from the second communication device, and verifies security during communication with the second communication device based upon the security assurance information. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 13, 14, 15, 16, 17, 22, 23)
-
-
12. A communication system, comprising:
-
first communication device;
second communication device which processes communication with the first communication device; and
a security assurance device which assures security during communication with the second communication device, and wherein the second communication device transmits security assurance information which proves security of the second communication device during communication to the security assurance device;
the security assurance device receives the security assurance information, appends signature information to the security assurance information, and transmits the security assurance information to the second communication device;
the second communication device receives the security assurance information, and transmits the security assurance information with the signature that is appended to the first communication device in response to a connection request from the first communication device; and
the first communication device receives, after the connection request to the second communication device, the security assurance information from the second communication device, and verifies security during communication with the second communication device based upon the security assurance information and the signature information which has been appended to the security assurance information. - View Dependent Claims (18, 19, 20, 21)
-
-
24. A security assurance device included in a communication system which comprises a first communication device, and a second communication device which processes communication with the first communication device according to a connection request from the first communication device, the security assurance device assuring security during communication with the second communication device, comprising:
-
a reception means which receives notification information which is transmitted by the second communication device, and which notifies security during communication with the second communication device;
a verification means which verifies the security during communication with the second communication device based upon the notification information;
an attestation information generation means which generates, if security during communication with the second communication device is confirmed by the verification means, security assurance information which proves security during communication; and
a transmission means which transmits the security assurance information to the second communication device. - View Dependent Claims (25, 26, 27, 28, 29, 30, 32, 33, 34, 36, 37, 38, 39)
-
-
31. A security assurance device included in a communication system which comprises a first communication device, and a second communication device which performs communication with the first communication device according to a connection request from the first communication device, the security assurance device assuring security during communication with the second communication device, comprising:
-
a reception means which receives security assurance information which is transmitted by the second communication device, and which notifies security during communication with the second communication device;
a signature information appending means which appends signature information to the security assurance information; and
a transmission means which transmits the security assurance information to which the signature information is appended, to the second communication device. - View Dependent Claims (35)
-
Specification