| 摘要 |
<p><P>PROBLEM TO BE SOLVED: To encrypt a packet fragmented in advance, in IPsec processing in a transport mode, regarding technology for processing a fragment packet in encrypting and transmitting an IP packet on a network. <P>SOLUTION: In a fragment packet, fragment information included in an IP header 1901 shown as 2001 is saved in high-order 16 bits of a security pointer index (SPI) field in an encapsulating security payload (ESP) header 301 to be inserted as a result of encryption, as shown in 304. The fragment information included in the IP header 1901 is cleared, as shown in 303. As a result, a packet obtained by applying IPsec processing to the fragment packet in a transport mode, is transferred as an apparently unfragmented IPsec packet. As a result, a decryption side discriminates the packet from the packet fragmented after IPsec processing. <P>COPYRIGHT: (C)2010,JPO&INPIT</p> |
