NETWORK APPARATUS, IPSEC SETTING METHOD THEREIN, AND COMPUTER-READABLE RECORDING MEDIUM STORING A CONTROL PROGRAM FOR EXECUTING THE METHOD

• US 20070220250A1
• Filed: 03/12/2007
• Published: 09/20/2007
• Est. Priority Date: 03/14/2006
• Status: Active Grant

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: TAMURA, Hiroshi
• Granted Patent: US 8,281,124 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

A network apparatus which is connected to a network is disclosed. The network apparatus includes a managing unit which manages an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other, an address generating unit which generates an address for the destination network apparatus by selecting an address in the address range, and an encryption unit which encrypts the data to be transmitted to the address generated by the address generating unit based on the encryption parameters.

Claims

1. A network apparatus which is connected to a network, comprising:

a managing unit which manages an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other;

an address generating unit which generates an address for the destination network apparatus by selecting an address in the address range; and

an encryption unit which encrypts the data to be transmitted to the address generated by the address generating unit based on the encryption parameters.

2. The network apparatus as claimed in claim 1, wherein:

the encryption unit encrypts the data to be transmitted to the generated address by IPsec.

3. The network apparatus as claimed in claim 1, wherein:

the generated address is an IPv6 address or an IPv4 address.

4. The network apparatus as claimed in claim 1, wherein:

the addresses in the address range are registered by a user.

5. The network apparatus as claimed in claim 1, wherein:

the address in the address range is registered with a combination of the encryption parameters.

6. The network apparatus as claimed in claim 1, wherein:

the address in the address range is registered with a combination of the encryption parameters and user information.

7. The network apparatus as claimed in claim 1, wherein:

the address in the address range is registered with a combination of the encryption parameters and a global address or a local address.

8. The network apparatus as claimed in claim 1, wherein:

the address in the address range is registered with a security level.

9. The network apparatus as claimed in claim 8, wherein:

the security level is a simple level having a few levels such as a high level, a middle level, and a low level without depending on a protocol.

10. The network apparatus as claimed in claim 1, wherein:

the address range and algorithms for the encryption parameters are stored in an external device attachable to the network apparatus.

11. An IPsec setting method in a network apparatus which is connected to a network, comprising the steps of:

managing an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other;

generating an address for the destination network apparatus by selecting an address in the address range; and

encrypting the data to be transmitted to the generated address based on the encryption parameters.

12. The IPsec setting method in the network apparatus as claimed in claim 11, wherein:

the generated address is an IPv6 address or an IPv4 address.

13. The IPsec setting method in the network apparatus as claimed in claim 11, wherein:

the addresses in the address range are registered by a user.

14. The IPsec setting method in the network apparatus as claimed in claim 11, wherein:

the address in the address range is registered with a combination of the encryption parameters.

15. The IPsec setting method in the network apparatus as claimed in claim 11, wherein:

the address in the address range is registered with a combination of the encryption parameters and user information.

16. The IPsec setting method in the network apparatus as claimed in claim 11, wherein:

the address in the address range is registered with a combination of the encryption parameters and a global address or a local address.

17. The IPsec setting method in the network apparatus as claimed in claim 11, wherein:

the address in the address range is registered with a security level.

18. The IPsec setting method in the network apparatus as claimed in claim 17, wherein:

the security level is a simple level having a few levels such as a high level, a middle level, and a low level without depending on a protocol.

19. The IPsec setting method in the network apparatus as claimed in claim 11, wherein:

the address range and algorithms for the encryption parameters are stored in an external device attachable to the network apparatus.

20. A computer-readable recording medium storing a control program for executing an IPsec setting method, wherein

the control program includes the steps of:

managing an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other;

generating an address for the destination network apparatus by selecting an address in the address range; and

encrypting the data to be transmitted to the generated address based on the encryption parameters.