ENCRYPTION PROCESSING METHOD AND ENCRYPTION PROCESSING DEVICE

• US 20100306540A1
• Filed: 01/28/2009
• Published: 12/02/2010
• Est. Priority Date: 02/13/2008
• Status: Abandoned Application

• Current Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Inventors: Fang, Chun-Wei, Liu, Hsueh-Teng, Yamada, Kazushige, Senga, Satoshi
• Application Number:
  US12/864,170
• Publication Number:
  US 20100306540A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 65/65 Network streaming protocols, e.g. real-time transport protocol [RTP] or real-time control protocol [RTCP]
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

Provided is an encryption processing device which can effectively improve an encryption processing performance of a secure multi-media communication. The encryption processing device (100) includes: storage means (162) which stores secure processing information containing an identification condition for identifying a packet requiring an encryption/decryption process or an authentication process; transmission means (112) which transmits a multi-media packet in a plain text to a virtual network interface (140); correction means (160) which executes an encryption process or an authentication process on the multi-media packet if the multi-media packet coincides with the identification condition and corrects the payload of the secure multi-media packet so as to be matched with a security protocol; and replacement means (130) which transfers the secure multi-media packet transmitted to the virtual network interface (140) to an inherent network interface (150).

Claims

1. A encrypt processing method for improving encrypt and decrypting processing or authentication processing for multimedia communication secured by a security protocol, the encrypt processing method comprising the steps of:

upon starting the multimedia communication, storing secure processing information including an identification condition for identifying a packet required in the encrypt and decrypting processing or the authentication processing;

transmitting a plaintext multimedia packet to a virtual network interface;

filtering the plaintext multimedia packet in a network protocol stack, based on the identification condition included in the secure processing information;

in a case where the plaintext multimedia packet is filtered, when the plaintext multimedia packet matches the identification condition included in the secure processing information, executing encrypt processing or authentication processing for the plaintext multimedia packet, and modifying a payload of a secure multimedia packet such that the payload of the secure multimedia packet is complied with the security protocol;

transferring the secure multimedia packet to be transmitted to the virtual network interface, to an original network interface; and

transmitting the secure multimedia packet from the original network interface.

2. A encrypt processing apparatus for improving encrypt and decrypting processing or authentication processing for multimedia communication secured by a security protocol, the encrypt processing apparatus comprising:

a storing section that stores secure processing information including an identification condition for identifying a packet required in the encrypt and decrypting processing or the authentication processing;

a transmitting section that transmits a plaintext multimedia packet to a virtual network interface;

a modification section that modifies a payload of a secure multimedia packet such that the payload of the secure multimedia packet complies with a security protocol by deciding whether or not the plaintext multimedia packet matches the identification condition included in the secure processing information and executing encrypt processing or authentication processing for the plaintext multimedia packet when the identification condition is matched;

a replacement section that transfers the secure multimedia packet to be transmitted to the virtual network interface, to an original network interface; and

a transmitting section that transmits the secure multimedia packet from a network interface.

3. A encrypt processing method for improving encrypt and decrypting processing or authentication processing for multimedia communication secured by a security protocol, the encrypt processing method comprising the steps of:

upon starting the multimedia communication, storing secure processing information including an identification condition for identifying a packet required in the encrypt and decrypting processing or the authentication processing;

filtering a secure multimedia packet inputted in a network protocol stack, based on the identification condition included in the secure processing information;

in a case where the secure multimedia packet is filtered, when the secure multimedia packet matches the identification condition included in the secure processing information, executing decrypting processing or authentication processing for the secure multimedia packet and modifying a payload of the secure multimedia packet as a plaintext payload; and

transmitting a plaintext multimedia packet to an application layer of the multimedia communication.

4. A encrypt processing apparatus for improving encrypt and decrypting processing or authentication processing for multimedia communication secured by a security protocol, the encrypt processing apparatus comprising:

a storing section that stores secure processing information including an identification condition for identifying a packet required in the encrypt and decrypting processing or the authentication processing;

a modification section for modifying a payload of a secure multimedia packet as a plaintext payload by deciding whether or not the secure multimedia packet inputted matches the identification condition included in the secure processing information and executing encrypt processing or authentication processing for the secure multimedia packet when the identification condition is matched; and

a transmitting section that transmits a plaintext multimedia packet to an application layer of the multimedia communication.