摘要 |
PROBLEM TO BE SOLVED: To realize shortening of operation time by use of hardware for encryption/decryption processing and authentication processing, to realize reduction of data transfer frequency and transfer waiting time to improve packet throughput as a whole. SOLUTION: In packet processing of a received packet, a CPU 11 performs header analysis of the received packet corresponding to Ipsec and inputs the received packet to which the header analysis is performed to an IPsec packet data processing part 20. Authentication data corresponding to an authentication range are segmented from the received packet in the IPsec packet data processing part 20, inputted in an authentication circuit 31 and on the other hand, when the authentication data are encrypted, the encrypted data are segmented from the receiving packet and inputted in an encryption/decryption circuit 32. An authentication operation is performed by a method corresponding to a header analysis result in the authentication circuit 31 and when the authentication data are encrypted, the encrypted data are decoded by a method corresponding to the header analysis result in the encryption/decryption circuit 32. COPYRIGHT: (C)2006,JPO&NCIPI
|