Communication device, communication system, and algorithm selection method

Claim 2

A communication device comprising: an encryption information determination section for selecting an encryption algorithm from among a plurality of previously provided encryption algorithms, the selected encryption algorithm being different depending on a predicted total used resource or an actual total used resource; an encryption/decryption processing section for encrypting a packet in accordance with the encryption algorithm selected by the encryption information determination section; and a communication processing section for transmitting the packet encrypted by the encryption/decryption processing section.

Claim 3

The communication device according to claim 1 , wherein, the total used resource is a total of CPU utilization rates of applications to be executed by a CPU of the communication device, and the encryption/decryption processing section performs code processing using the CPU.

Claim 4

The communication device according to claim 1 , further comprising a resource monitoring section for monitoring a current amount of used resource, wherein the encryption information determination section calculates the total used resource based on the amount of used resource notified from the resource monitoring section.

Claim 5

The communication device according to claim 3 , wherein, the encryption information determination section includes a used amount resource information memory for storing the amount of used resource notified from the resource monitoring section, and calculates the total used resource based on an average of the amount of used resource stored in the used resource amount information memory for a predetermined period.

Claim 6

The communication device according to claim 1 , wherein, instead of encryption algorithms, the communication device is adapted to at least one of: authentication algorithms for performing authentication processes; or compression algorithms for performing compression/decompression processes.

Claim 7

The communication device according to claim 1 , wherein, from among the plurality of previously provided encryption algorithms, the encryption information determination section selects an encryption algorithm such that the predicted total used resource when using the encryption algorithm does not exceed a first reference value.

Claim 8

The communication device according to claim 6 , wherein the encryption information determination section includes an encryption process and used-resource table storing a load of code processing for each encryption algorithm, and calculates a total used resource when using the encryption algorithm based on the encryption process and used-resource table.

Claim 9

The communication device according to claim 6 , wherein the encryption information determination section selects, from among encryption algorithms such that the total used resource when using each encryption algorithm does not exceed a predetermined tolerable value, an encryption algorithm having a highest encryption strength.

Claim 10

The communication device according to claim 6 , wherein the total used resource is a total of an amount of used resource by an encrypted communication application and an amount of used resource by a non-encrypted communication application, the encrypted communication application being defined as an application which requires code processing, and the non-encrypted communication application being defined as an application which does not require code processing.

Claim 11

The communication device according to claim 1 , wherein, if an average of the total used resource for a predetermined period up to a point during code processing is higher than a second reference value, the encryption information determination section selects an encryption algorithm having a lower load than the currently-used encryption algorithm.

Claim 12

The communication device according to claim 1 , wherein, if an average of the total used resource for a predetermined period up to a point during code processing is lower than a third reference value, the encryption information determination section selects an encryption algorithm having a higher encryption strength than the currently-used encryption algorithm.

Claim 13

The communication device according to claim 1 , wherein the encryption information determination section reselects an encryption algorithm if a difference between an actual total used resource in a point in the past and an actual total used resource at present is equal to or greater than a predetermined value.

Claim 14

The communication device according to claim 1 , wherein the encryption information determination section previously negotiates a plurality of encryption algorithms to be used with a communication counterpart of the communication device, and when the encryption/decryption processing section encrypts a packet, selects a different encryption algorithm depending on the predicted total used resource or the actual total used resource from among the plurality of previously negotiated encryption algorithms.

Claim 15

The communication device according to claim 1 , further comprising a schedule section for accepting a preprogramming of an application to be executed and registering execution of the application to a schedule, wherein, based on a total used resource at a point in the future as predicted according to the schedule, the encryption information determination section selects an encryption algorithm to be used at that point.

Claim 16

The communication device according to claim 14 , wherein, the schedule comprises a schedule and used-resource table for registering, a start time, an end time, and a used resource amount for each task involved in a preprogrammed application, the schedule section accepts a preprogramming of an application to be executed and registers execution of a task involved in the application to the schedule and used-resource table, and for each task involved in an encrypted communication application being defined as an application which requires code processing, the encryption information determination section selects an encryption algorithm such that the predicted total used resource when using the encryption algorithm does not exceed a first reference value during a period in which the task is executed.

Claim 17

The communication device according to claim 14 , wherein, the schedule comprises a schedule and used-resource table for registering, a start time, an end time, and a used resource amount for each task involved in a preprogrammed application, and an event and used-resource table for registering the total used resource for a respective event slot defined by the start time and the end time of each task, the schedule section accepts a preprogramming of an application to be executed and registers execution of a task involved in the application to the schedule and used-resource table, and generates the event and used-resource table based on the schedule and used-resource table, and for each event slot, the encryption information determination section selects an encryption algorithm such that the total used resource does not exceed a first reference value during the event slot as an encryption algorithm to be used for a task involved in an encrypted communication application defined as an application which requires code processing.

Claim 18

The communication device according to claim 14 , wherein the schedule section registers to the schedule a preprocess of generating a key for encrypted communications prior to starting tasks involved in an encrypted communication application being defined as an application which requires code processing, and determines a start time of the preprocess based on a value obtained by subtracting from a tolerable amount of used resource a total used resource in a period existing before a scheduled start time of a task involved in the encrypted communication application.

Claim 19

The communication device according to claim 14 , wherein, when it is unacceptable to register an additional preprogramming to the schedule because the total used resource would exceed a tolerable amount of used resource, the schedule section reselects an encryption algorithm such that an encryption algorithm whose use is already registered to the schedule is replaced by an encryption algorithm having a smaller load if such is possible.

Claim 20

The communication device according to claim 14 , wherein, when it is unacceptable to register an additional preprogramming to the schedule because the total used resource would exceed a tolerable amount of used resource, the schedule section changes a time to execute an application which is already registered to the schedule or changes an average data transfer amount for encrypted communications.

Claim 21

The communication device according to claim 14 , wherein, when a preprogramming of an application which was registered to the schedule is canceled, the schedule section reselects an encryption algorithm such that an encryption algorithm whose use is already registered to the schedule is replaced by an encryption algorithm having a higher encryption strength if such is possible.

Claim 22

An algorithm selection method comprising: an encryption information determination step of selecting an encryption algorithm from among a plurality of previously provided encryption algorithms, the selected encryption algorithm being different depending on a predicted total used resource or an actual total used resource; a code processing step of encrypting a packet in accordance with the encryption algorithm selected by the encryption information determination step; and a communication processing step of transmitting the packet encrypted by the code processing step.

Claim 23

An algorithm selection method comprising: an encryption information determination step of selecting an encryption algorithm from among a plurality of previously provided encryption algorithms, the selected encryption algorithm being different depending on a predicted total used resource or an actual total used resource; a code processing step of encrypting a packet in accordance with the encryption algorithm selected by the encryption information determination step; and a communication processing step of transmitting the packet encrypted by the code processing step.

Claim 24

A computer-readable recording medium having recorded thereon a program for causing a computer to execute the steps described in claim 21 .

Claim 25

A communication device comprising: an encryption information determination section for selecting an encryption algorithm from among a plurality of previously provided encryption algorithms, the selected encryption algorithm being different depending on an encryption algorithm or encryption algorithms used for one or more packets received from a communication counterpart; an encryption/decryption processing section for encrypting a packet to be transmitted to the communication counterpart in accordance with the encryption algorithm selected by the encryption information determination section; and a communication processing section for transmitting the packet encrypted by the encryption/decryption processing section, wherein the encryption information determination section includes an encryption algorithm statistics table for storing the encryption algorithm or encryption algorithms used for the one or more packets received from the communication counterpart, and selects an encryption algorithm appearing with a highest frequency among the encryption algorithm or encryption algorithms used for the received one or more packets by referring to the encryption algorithm statistics table.

Claim 26

A communication device comprising: an encryption information determination section for selecting an encryption algorithm from among a plurality of previously provided encryption algorithms, the selected encryption algorithm being different depending on an encryption algorithm or encryption algorithms used for one or more packets received from a communication counterpart; an encryption/decryption processing section for encrypting a packet to be transmitted to the communication counterpart in accordance with the encryption algorithm selected by the encryption information determination section; and a communication processing section for transmitting the packet encrypted by the encryption/decryption processing section, wherein the encryption information determination section includes an encryption algorithm statistics table for storing the encryption algorithm or encryption algorithms used for the one or more packets received from the communication counterpart, and selects an encryption algorithm appearing with a highest frequency among the encryption algorithm or encryption algorithms used for the received one or more packets by referring to the encryption algorithm statistics table.

Claim 27

A communication device comprising: an encryption information determination section for selecting an encryption algorithm from among a plurality of previously provided encryption algorithms, the selected encryption algorithm being different depending on an encryption algorithm or encryption algorithms used for one or more packets received from a communication counterpart; an encryption/decryption processing section for encrypting a packet to be transmitted to the communication counterpart in accordance with the encryption algorithm selected by the encryption information determination section; and a communication processing section for transmitting the packet encrypted by the encryption/decryption processing section, wherein the encryption information determination section includes an encryption algorithm statistics table for storing the encryption algorithm or encryption algorithms used for the one or more packets received from the communication counterpart, and an encryption process and used-resource table for storing information concerning an encryption strength and a calculation amount of each of the previously provided encryption algorithms, and selects an encryption algorithm having a highest encryption strength among those encryption algorithms whose calculation amounts are equal to or less than a statistical value derived from the calculation amounts of the encryption algorithms used for the received packets, by referring to the encryption algorithm statistics table and the encryption process and used-resource table.

Claim 28

A communication device comprising: an encryption information determination section for selecting an encryption algorithm from among a plurality of previously provided encryption algorithms, the selected encryption algorithm being different depending on an encryption algorithm or encryption algorithms used for one or more packets received from a communication counterpart; an encryption/decryption processing section for encrypting a packet to be transmitted to the communication counterpart in accordance with the encryption algorithm selected by the encryption information determination section; and a communication processing section for transmitting the packet encrypted by the encryption/decryption processing section, wherein the encryption information determination section includes an encryption algorithm statistics table for storing the encryption algorithm or encryption algorithms used for the one or more packets received from the communication counterpart, and an encryption process and used-resource table for storing information concerning an encryption strength and a calculation amount of each of the previously provided encryption algorithms, and selects an encryption algorithm having a highest encryption strength among those encryption algorithms whose calculation amounts are equal to or less than a statistical value derived from the calculation amounts of the encryption algorithms used for the received packets, by referring to the encryption algorithm statistics table and the encryption process and used-resource table.

Claim 29

A communication device comprising: an encryption information determination section having a function of selecting an encryption algorithm from among a plurality of previously provided encryption algorithms such that the selected encryption algorithm is different depending on a predicted total used resource or an actual total used resource, and a function of selecting an encryption algorithm from among a plurality of previously provided encryption algorithms such that the selected encryption algorithm is different depending on an encryption algorithm or encryption algorithms used for one or more packets received from a communication counterpart; an encryption/decryption processing section for encrypting a packet to be transmitted to the communication counterpart in accordance with the encryption algorithm selected by the encryption information determination section; and a communication processing section for transmitting the packet encrypted by the encryption/decryption processing section.

Claim 30

A communication device comprising: an encryption information determination section having a function of selecting an encryption algorithm from among a plurality of previously provided encryption algorithms such that the selected encryption algorithm is different depending on a predicted total used resource or an actual total used resource, and a function of selecting an encryption algorithm from among a plurality of previously provided encryption algorithms such that the selected encryption algorithm is different depending on an encryption algorithm or encryption algorithms used for one or more packets received from a communication counterpart; an encryption/decryption processing section for encrypting a packet to be transmitted to the communication counterpart in accordance with the encryption algorithm selected by the encryption information determination section; and a communication processing section for transmitting the packet encrypted by the encryption/decryption processing section.

Claim 31

The communication device according to claim 25 , wherein the encryption information determination section performs a primary-subordinate negotiation process through communications with the communication counterpart to confirm whether to work as a primary or a subordinate with respect to the communication counterpart, and based on a result of the primary-subordinate negotiation process, switches between the function of selecting a different encryption algorithm depending on the predicted total used resource or the actual total used resource and the function of selecting a different encryption algorithm depending on the encryption algorithm or encryption algorithms used for the one or more packets received from the communication counterpart.

Claim 32

The communication device according to claim 26 , wherein, in the primary-subordinate negotiation process, the encryption information determination section compares a performance of the communication device and a performance of the communication counterpart, and selects a different encryption algorithm depending on the predicted total used resource or the actual total used resource if the performance of the communication device is lower than the performance of the communication counterpart, and selects a different encryption algorithm depending on the encryption algorithm or encryption algorithms used for the one or more packets received from the communication counterpart if the performance of the communication device is higher than the performance of the communication counterpart.

Claim 33

The communication device according to claim 25 , wherein, instead of encryption algorithms, the communication device is adapted to at least one of: authentication algorithms for performing authentication processes; or compression algorithms for performing compression/decompression processes.