INTERNETWORK SECURE COMMUNICATION METHOD, SECURE PACKET PROCESSOR, ITS PROCESSING METHOD, PROGRAM, RECORDING MEDIUM, AND ADDRESS CONVERTER

摘要

PROBLEM TO BE SOLVED: To simply apply IPsec communication between networks with IP address conversion applied. SOLUTION: IP packets sent out from hosts A and B with a private IP address have a private IP address rewritten into a global IP address by an address converter (NAT) device and delivered to a host C. When there is an IPsec device between the host A and the NAT device like a net 10, the IPsec device utilizes UPnP or the like to virtually replace the IP header of the packet received from the host A with a state to be address-converted by the NAT device and then encode or create authentication data, and sends the IPsec packet to the NAT device. If there is the IPsec device ahead of the host B and the NAT device as in a net 20, the IPsec device utilizes the UPnP or the like to virtually replace the IP header of the packet received from the NAT device with a state before the NAT conversion, and applies security policy for each sender host. COPYRIGHT: (C)2006,JPO&NCIPI