TUNNEL COMMUNICATION SYSTEM, CONTROL DEVICE, AND TUNNEL COMMUNICATION APPARATUS

摘要

PROBLEM TO BE SOLVED: To realize tunnel communication after controlling a transfer resource and preventing a hijacking of a path on a network such as a wide-area IP network.

SOLUTION: The control device receives a path generation request that requests generation of a virtual path in the gap with an incoming-side tunnel communication apparatus from an outgoing-side tunnel communication request, and generates the virtual path by setting a transfer resource required for data transfer between the outgoing-side tunnel communication apparatus and the incoming-side tunnel communication apparatus. Each of the outgoing-side and incoming-side tunnel communication apparatuses uses the virtual path to exchange, with a tunnel communicating party apparatus, inter-authentication information used for inter-authentication for mutually authenticating tunnel communicating party apparatuses each other, and judges whether to set up or to reject tunnel communication with the tunnel communicating party apparatus on the basis of the inter-authentication information acquired from the tunnel communicating party apparatus. If it is determined that the tunnel communication is to be rejected, the establishment of the tunnel communication is rejected.

COPYRIGHT: (C)2008,JPO&INPIT