IPSec Policy Selection Using Address-Based Priority
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing information processing apparatuses using IPSec for communication face challenges in setting and managing policy information, leading to unsuccessful communications due to mismatching attributes when registering policy information with different address specifications, burdening users with complex priority settings.
Innovation Solution
An information processing apparatus with a registering unit for prioritizing policy information based on address specifications, a selecting unit for choosing the appropriate policy information for communication, and a control unit that restricts priority settings to prevent mismatching, ensuring successful communication by managing policy information effectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If policy information is registered with different address specifications (single address vs. multiple addresses), then the system can support more communication scenarios, but communication may become unsuccessful due to attribute mismatching
Solution Approach 1:
The system performs preliminary actions by automatically determining and setting the order of priority for policy information during the registration process. When policy information is registered, the control unit checks if it includes a single address or multiple addresses, and automatically assigns priority levels accordingly. This preliminary setup prevents attribute mismatching during communication by ensuring that more specific single-address policies are evaluated before broader multi-address policies.
2Reliability
If users manually set priority orders for policy information, then communication reliability can be improved, but the operation becomes complex and burdensome
Solution Approach 1:
The system implements self-service by automatically determining the order of priority for policy information based on their address specifications. The control unit autonomously evaluates whether policy information includes a single address or multiple addresses and assigns appropriate priority levels without requiring user intervention. This eliminates the complexity of manual priority setting while maintaining reliable communication by ensuring that single-address policies take precedence over multi-address policies.
3Ease of operation
If the system automatically determines priority order, then ease of operation is improved, but the device complexity increases
Solution Approach 1:
The system applies local quality by making the control unit's decision-making process context-dependent on the specific characteristics of the policy information being registered. The control unit examines the local property of the policy information (whether it specifies a single address or multiple addresses) and automatically assigns priority levels based on this local characteristic. This localized automatic determination simplifies user operation while managing device complexity through rule-based logic that adapts to the specific policy information being processed.
Data Source
AI summary
An information processing apparatus for selecting encryption key using policy. The information processing apparatus includes at least one processor executes instructions to input a first policy which defines a first encryption key configured to be used in communication between the information processing apparatus and plural communication apparatuses and a second policy which defines a second encryption key configured to be used in communication between the information processing apparatus and a single communication apparatus.