公开(公告)号：US20080052756A1

公开(公告)日：2008-02-28

申请号：US11776079

申请日：2007-07-11

申请人： Takehiro Morishige ,  Jousuke Matsuki ,  Masashi Yano

发明人： Takehiro Morishige ,  Jousuke Matsuki ,  Masashi Yano

IPC分类号： H04L9/00

CPC分类号： H04L63/0227 ,  H04L63/164

摘要： Security policy databases capable of being fast retrieved while securing sequentiality. An IPSec processing device of the present invention performs communications by encrypting IP packets exchanged between a first IP network and a second IP network. The IPSec processing device includes a security policy database that stores security policies. The security policy database includes first, second, and third security policy databases. The first and third security policy databases include a linear list structure, and the second security policy database includes a hash list structure. The IPSec processing device, when performing at least one of transmission and reception of the IP packet, retrieves a security policy in the order of the first, second, and third security policy databases.

摘要翻译： 能够在确保顺序性的同时快速检索的安全策略数据库。 本发明的IPSec处理装置通过加密在第一IP网络和第二IP网络之间交换的IP分组进行通信。 IPSec处理设备包括存储安全策略的安全策略数据库。 安全策略数据库包括第一，第二和第三安全策略数据库。 第一和第三安全策略数据库包括线性列表结构，第二安全策略数据库包括哈希列表结构。 IPSec处理设备在执行IP包的发送和接收中的至少一个时，按照第一，第二和第三安全策略数据库的顺序检索安全策略。

公开(公告)号：US07917939B2

公开(公告)日：2011-03-29

申请号：US11776079

申请日：2007-07-11

申请人： Takehiro Morishige ,  Jousuke Matsuki ,  Masashi Yano

发明人： Takehiro Morishige ,  Jousuke Matsuki ,  Masashi Yano

IPC分类号： G06F17/30

CPC分类号： H04L63/0227 ,  H04L63/164

摘要： Security policy databases capable of being fast retrieved while securing sequentiality. An IPSec processing device of the present invention performs communications by encrypting IP packets exchanged between a first IP network and a second IP network. The IPSec processing device includes a security policy database that stores security policies. The security policy database includes first, second, and third security policy databases. The first and third security policy databases include a linear list structure, and the second security policy database includes a hash list structure. The IPSec processing device, when performing at least one of transmission and reception of the IP packet, retrieves a security policy in the order of the first, second, and third security policy databases.

摘要翻译： 能够在确保顺序性的同时快速检索的安全策略数据库。 本发明的IPSec处理装置通过加密在第一IP网络和第二IP网络之间交换的IP分组进行通信。 IPSec处理设备包括存储安全策略的安全策略数据库。 安全策略数据库包括第一，第二和第三安全策略数据库。 第一和第三安全策略数据库包括线性列表结构，第二安全策略数据库包括哈希列表结构。 IPSec处理设备在执行IP包的发送和接收中的至少一个时，按照第一，第二和第三安全策略数据库的顺序检索安全策略。