Network apparatus, IPsec setting method therein, and computer-readable recording medium storing a control program for executing the method

• US 8,281,124 B2
• Filed: 03/12/2007
• Issued: 10/02/2012
• Est. Priority Date: 03/14/2006
• Status: Expired due to Fees

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Tamura, Hiroshi
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): SCHMIDT, KARI L
• Application Number:
  US11/684,709
• Publication Number:
  US 20070220250A1
• Time in Patent Office: 2,031 Days
• Field of Search: 713/153, 713/154, 726/1, 726/3, 726/11, 726/14, 380/247, 380/248, 380/270
• US Class Current: 713/153
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

A network apparatus which is connected to a network is disclosed. The network apparatus includes a managing unit which manages an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other, an address generating unit which generates an address for the destination network apparatus by selecting an address in the address range, and an encryption unit which encrypts the data to be transmitted to the address generated by the address generating unit based on the encryption parameters.

Claims

1. A network apparatus which is connected to a network, comprising:

a controller including a CPU and a system memory;

a managing unit responsive to the controller which manages an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other;

an input unit which receives a user selection of a combination of encryption parameters;

an address generating unit responsive to the controller which generates an address for the destination network apparatus by selecting an address in the address range, wherein the address in the address range is registered with a combination of the encryption parameters and the address range is determined as the address range corresponding to the user selection of the combination of the encryption parameters; and

an encryption unit responsive to the controller which encrypts the data to be transmitted to the address generated by the address generating unit based on the encryption parameters, and encrypts the data to be transmitted to the generated address by IPsec,

wherein the selected address in the address range is registered beforehand with a predetermined security level, and

the security level is one of at least a high level, a middle level, and a low level, and the security level is registered in association with the encryption parameters such that the encryption parameters, which include a protocol, can be set based on receiving an input of the security level from the user without receiving an input of the protocol from the user.

2. The network apparatus as claimed in claim 1, wherein:

the generated address is an IPv6 address or an IPv4 address.

3. The network apparatus as claimed in claim 1, wherein:

the addresses in the address range are registered by a user.

4. The network apparatus as claimed in claim 1, wherein:

the address in the address range is registered with a combination of the encryption parameters and user information.

5. The network apparatus as claimed in claim 1, wherein:

the address in the address range is registered with a combination of the encryption parameters and a global address or a local address.

6. The network apparatus as claimed in claim 1, wherein:

the address range and algorithms for the encryption parameters are stored in an external device attachable to the network apparatus.

7. The network apparatus as claimed in claim 1, wherein the address generating unit generates the address for the destination network apparatus and the encryption unit encrypts the data to be transmitted to the generated address by IPsec without informing the user of the generated address for the destination network apparatus.

8. The network apparatus as claimed in claim 1, wherein the address range is a specific IP address range of IPsec communication and IPsec communication is not setup between the network apparatus and another network apparatus to communicate with which shares a same IP address setting system with the network apparatus.

9. An IPsec setting method in a network apparatus having a CPU and a system memory, which is connected to a network, comprising the steps of:

managing, at the network apparatus, an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other;

receiving, at the network apparatus, a user selection of a combination of encryption parameters;

generating, at the network apparatus, an address for the destination network apparatus by selecting an address in the address range, wherein the address range is determined as the address range corresponding to the user selection of the combination of the encryption parameters; and

encrypting, at the network apparatus, the data to be transmitted to the generated address based on the encryption parameters,

wherein the selected address in the address range is registered beforehand with a predetermined security level, and

the security level is one of at least a high level, a middle level, and a low level, and the security level is registered in association with the encryption parameters such that the encryption parameters, which include a protocol, can be set based on receiving an input of the security level from the user without receiving an input of the protocol from the user.

10. The IPsec setting method in the network apparatus as claimed in claim 9, wherein:

the generated address is an IPv6 address or an IPv4 address.

11. The IPsec setting method in the network apparatus as claimed in claim 9, wherein:

the addresses in the address range are registered by a user.

12. The IPsec setting method in the network apparatus as claimed in claim 9, wherein:

the address in the address range is registered with a combination of the encryption parameters and user information.

13. The IPsec setting method in the network apparatus as claimed in claim 9, wherein:

the address in the address range is registered with a combination of the encryption parameters and a global address or a local address.

14. The IPsec setting method in the network apparatus as claimed in claim 9, wherein:

the address range and algorithms for the encryption parameters are stored in an external device attachable to the network apparatus.

15. A non-transitory computer-readable recording medium storing a control program for executing an IPsec setting method, the method comprising:

managing an address range in which addresses to be allocated to a destination network apparatus are registered and encryption parameters for encrypting data to be transmitted to the destination network apparatus so that the address range and the encryption parameters are related to each other;

receiving a user selection of a combination of encryption parameters;

generating an address for the destination network apparatus by selecting an address in the address range, wherein the address range is determined as the address range corresponding to the user selection of the combination of the encryption parameters; and

encrypting the data to be transmitted to the generated address based on the encryption parameters,

wherein the selected address in the address range is registered beforehand with a predetermined security level, and

the security level is one of at least a high level, a middle level, and a low level, and the security level is registered in association with the encryption parameters such that the encryption parameters, which include a protocol, can be set based on receiving an input of the security level from the user without receiving an input of the protocol from the user.