摘要 |
<p><P>PROBLEM TO BE SOLVED: To establish SA between computers which communicate with each other by way of a NAT or a load balancer. <P>SOLUTION: A computer system comprises a first computer, a second computer equipped with a second processor and a second memory, and a communication control device for controlling communication between the first computer and the second computer. The communication control device, upon receiving a packet from the first computer, converts the address information of the received packet and transfers it to the second computer. The second memory stores SA candidate information of which a part of address information is unknown. The second processor, upon receiving the packet encrypted by the first computer from the first computer, decrypts the encrypted packet using the SA candidate information. When succeeding in decrypting the encrypted packet, the SA information is generated based on the SA candidate information used for decryption and the address information of the encrypted packet. <P>COPYRIGHT: (C)2007,JPO&INPIT</p> |