Device and method for communicating with another communication device via network forwarding device

1. A communication device, comprising:

a first transmitting unit that transmits to a server a first message created according to a first protocol, the first protocol being a protocol in which a network forwarding device translates a source port number, the network forwarding device translating each source port number contained in a protocol header of transmitted messages into a source port number for communicating with an external network;

a receiving unit that receives a port number message including a translated port number from the server via the network forwarding device, the translated port number being a source port number obtained after the network forwarding device performs an address translation when the first message is transmitted to the server;

a storing unit that stores the translated port number;

a first protocol processing unit that generates a second message that is to be transmitted according to the first protocol and in which a source port number contained in a protocol header according to the first protocol is specified as a same value as the stored translated port number, which differs for each source, the second message being transmitted to the server by an application that communicates with the server using the translated port number;

a second protocol processing unit that generates a third message, in which the first protocol is concealed, by appending, to the generated second message, a header encrypted according to a second protocol which is not decrypted by the server;

a third protocol processing unit that generates a fourth message, in which the first protocol is concealed, by appending a header according to a third protocol to the generated third message, the third protocol being a protocol in which the network forwarding device translates a source port number contained in the header according to the third protocol, and the source port number contained in the header according to the third protocol being a value to be translated to the translated port number; and

a second transmitting unit that transmits the generated fourth message to the server via the network forwarding device.

2. The communication device according to claim 1 , wherein

the first transmitting unit further transmits to the server a communication establishment message that is transmitted according to the first protocol and includes information used when a communication according to an encryption protocol is to be established, and

the receiving unit receives the port number message via the network forwarding device, the port number message having been transmitted by the server and having been arranged so that a source port number contained in a protocol header of the communication establishment message is specified as the translated port number.

3. The communication device according to claim 2 , wherein the first transmitting unit further transmits to the server the communication establishment message that is transmitted according to the first protocol and includes information used when a communication according to an Internet Key Exchange (IKE) protocol is to be established.

4. The communication device according to claim 3 , wherein the receiving unit receives, via the network forwarding device, the port number message that has been arranged and transmitted by the server so that an area into which the translated port number is stored is added to an IKE message transmitted according to the IKE protocol and the source port number contained in the protocol header of the communication establishment message is specified as the translated port number in the added area.

5. The communication device according to claim 3 , wherein the receiving unit receives, via the network forwarding device, the port number message that has been arranged and transmitted by the server so that the source port number contained in the protocol header of the communication establishment message is specified as the translated port number in an unused area included in an IKE message transmitted according to the IKE protocol.

6. A communication device, comprising:

a first transmitting unit that transmits a first message to an address information providing device that provides information related to an address including a source port number, via a network forwarding device, the first message being transmitted according to a first protocol, the first protocol being a protocol in which the network forwarding device translates a source port number, and the network forwarding device translating a source Internet Protocol (IP) address and the source port number into values to make it possible to communicate with an external network, for each of a plurality of corresponding tuples, source IP address, and source port number contained in a protocol header of a transmitted message;

a receiving unit that receives an address information message from the address information providing device via the network forwarding device, the address information message including a translated port number that is a source port number obtained after the network forwarding device performs an address translation when the first message is transmitted to the address information providing device;

a storing unit that stores the translated port number;

a first protocol processing unit that generates a second message to be transmitted according to the first protocol and in which a source port number contained in a protocol header according to the first protocol is specified as a same value as the stored translated port number, which differs for each source, the second message being transmitted to the server by an application that communicates with the server using the translated port number;

a second protocol processing unit that generates a third message, in which the first protocol is concealed, by appending, to the generated second message, a header encrypted according to a second protocol which is not decrypted by the server;

a third protocol processing unit that generates a fourth message, in which the first protocol is concealed, by appending a header according to a third protocol to the generated third message, the third protocol being a protocol in which the network forwarding device translates a source port number contained in the header according to the third protocol, and the source port number contained in the header according to the third protocol being a value to be translated to the translated port number; and

a second transmitting unit that transmits the generated fourth message to a server via the network forwarding device.

7. The communication device according to claim 6 , wherein

the first transmitting unit further transmits a modified first message to the address information providing device via the network forwarding device, the modified first message being obtained by changing one of a destination IP address and a destination port number that are contained in a protocol header of the first message, and

the communication device further comprising:

a translation method verifying unit that judges whether a first translated port number is same as a second translated port number and terminates a communication when having judged that the first translated port number is not the same as the second translated port number, the first translated port number being the translated port number contained in the address information message transmitted by the address information providing device in response to the first message before the one of the destination IP address and the destination port number is changed, and the second translated port number being the translated port number contained in the address information message transmitted by the address information providing device in response to the modified first message obtained by changing the one of the destination IP address and the destination port number.

8. The communication device according to claim 1 , wherein each of the first protocol and the third protocol is one of User Datagram Protocol (UDP) and Transmission Control Protocol (TCP).

9. The communication device according to claim 6 , wherein each of the first protocol and the third protocol is one of User Datagram Protocol (UDP) and Transmission Control Protocol (TCP).

10. The communication device according to claim 1 , wherein the second protocol is an Encapsulating Security Payload (ESP).

11. The communication device according to claim 6 , wherein the second protocol is an Encapsulating Security Payload (ESP).

12. A communicating method, comprising:

transmitting to a server, using a first transmitting unit, a first message transmitted according to a first protocol, the first protocol being a protocol in which a network forwarding device translates a source port number, the network forwarding device translating each source port number contained in a protocol header of transmitted messages into a source port number for communicating with an external network;

receiving, using a receiving unit a port number message including a translated port number from the server via the network forwarding device, the translated port number being a source port number obtained after the network forwarding device performs an address translation when the first message is transmitted to the server;

storing the translated port number into a storing unit;

generating, using a first protocol processing unit, a second message to be transmitted according to the first protocol and in which a source port number contained in a protocol header according to the first protocol is specified as a same value as the stored translated port number, which differs for each source, the second message being transmitted to the server by an application that communicates with the server using the translated port number;

generating, using a second protocol processing unit, a third message, in which the first protocol is concealed, by appending, to the generated second message, a header encrypted according to a second protocol which is not decrypted by the server;

generating, using a third protocol processing unit, a fourth message, in which the first protocol is concealed, by appending a header according to a third protocol to the generated third message, the third protocol being a protocol in which the network forwarding device translates a source port number contained in the header according to the third protocol, and the source port number contained in the header according to the third protocol being a value to be translated to the translated port number; and

transmitting, using a second transmitting unit, the generated fourth message to the server via the network forwarding device.

13. A communicating method, comprising:

transmitting, using a first transmitting unit, a first message to an address information providing device that provides information related to an address including a source port number, via a network forwarding device, the first message being transmitted according to a first protocol, the first protocol being a protocol in which the network forwarding device translates a source port number, and the network forwarding device translating a source Internet Protocol (IP) address and the source port number into values to make it possible to communicate with an external network, for each of a plurality of corresponding tuples, source IP address, and source port number contained in a protocol header of a transmitted message;

receiving, using a receiving unit, an address information message from the address information providing device via the network forwarding device, the address information message including a translated port number that is a source port number obtained after the network forwarding device performs an address translation when the first message is transmitted to the address information providing device;

storing the translated port number into a storing unit;

generating, using a first protocol processing unit, a second message to be transmitted according to the first protocol and in which a source port number contained in a protocol header according to the first protocol is specified as a same value as the stored translated port number, which differs for each source, the second message being transmitted to the server by an application that communicates with the server using the translated port number;

generating, using a second protocol processing unit, a third message, in which the first protocol is concealed, by appending, to the generated second message, a header encrypted according to a second protocol which is not decrypted by a server;

generating, using a third protocol processing unit, a fourth message, in which the first protocol is concealed, by appending a header according to a third protocol to the generated third message, the third protocol being a protocol in which the network forwarding device translates a source port number contained in the header according to the third protocol, and the source port number contained in the header according to the third protocol being a value to be translated to the translated port number; and

transmitting, using a second transmitting device, the generated fourth message to the server via the network forwarding device.