RELAY DEVICE
“Leakage”, “falsifying”, “masquerading”, “approach”, or “attack” of data on the Internet are prevented in a communication between a personal computer and the outside thereof without installing software or hardware in the personal computer. An intermediary apparatus includes NIC (Network Interface Card) drivers connected to networks respectively and a network layer and a transport layer which include “TCP/IP” defining a communication method for communicating while carrying out routing (ROUTING) between any two nodes and is provided for a physical layer and a data-link layer including the NIC drivers. Between the data-link layer and network layer, the function of “TCP2” can be provided.
1 . An intermediary apparatus used when carrying out communication of computerized information by adding an encryption function to a TCP or UDP protocol positioned in a transport layer, the intermediary apparatus comprising:
arrangement means for arranging corresponding encryption and decryption logic with an opposite apparatus thereto;
protocol encryption means for encrypting and transmitting at least a payload of the protocol in packets as information units transmitted and received according to the encryption logic arranged by the arrangement means; and
protocol decryption means for decrypting the received encrypted payload of the TCP or UDP protocol according to the decryption logic arranged by the arrangement means, wherein
communication is carried out based on the encryption and decryption logic using the TCP or UDP protocol of the transport layer.
2 . The intermediary apparatus according to claim 1 , wherein
encryption and decryption logic which can be an arrangement candidate according to the arrangement means for arranging the encryption and decryption logic is stored in a memory or implemented on a circuit; and logic changing means for periodically changing the encryption and decryption logic stored or implemented which can be an arrangement candidate is further included.
3 . The intermediary apparatus according to claim 1 , wherein
the arrangement means for arranging the encryption and decryption logic is allowed to handle a plaintext without encryption in connection with the encryption and decryption logic.
4 . The intermediary apparatus according to claim 2 , wherein
the arrangement means for arranging the encryption and decryption logic is allowed to handle a plaintext without encryption in connection with the encryption and decryption logic.