Hitachi, Ltd.

Hitachi Communication Technologies, Ltd.

Mariko Yamada

Yukiko Takeda

Masashi Yano

Tetsuro Yoshimoto

Takehiro Morishige

Akira Date

Takumi Oishi

Masanori Kamata

Katsunori Takahashi

Koh Ohnishi

Makoto Arai

A user's home is connected to a plurality of service providers by a plurality of VPNs, and traffic sent and received by a home terminal is filtered to an appropriate VPN so as to avoid communication disturbance due to IP address duplication by reducing unnecessary traffic. A terminal sends terminal information to inquire a management server about a SIP URI of VPN based on the terminal information sent by the terminal as well as user information. The management server notifies a router about the SIP URI of VPN corresponding to the notified information. The router establishes the VPN based on the notified SIP URI. The router maintains a mapping between the established VPN and a source terminal of a UPnP message, and then transfers traffic sent and received by each terminal after VPN establishment.

Communication equipment

When forming an L2VPN, each VPN server is required to decrypt data received from a VPN client using the source VPN client key and encrypt the data using the destination VPN client key. The loads of the encrypting and decrypting processings are high, thereby the VPN server through-put is lowered. In order to solve the above problem, according to the present invention, the destination address of an IP packet sent from the VPN client is used as a multicast address, then data is encrypted according to the security association of the multicast address distributed from the VPN server. The encrypted IP packet is encapsulated with the IP address of the VPN server and sent to the VPN server. Receiving this IP packet, the VPN server determines the destination VPN client according to the multicast address of the encapsulated IP packet, then encapsulated with the IP address of the destination VPN client and sent to the VPN client.

Server, VPN client, VPN system, and software

L2TP packet forwarding apparatus to be connected to at least two LACs (L2TP Access Concentrators) via L2TP sessions to receive packets transmitted from a gateway, which accommodates user terminals, in the form of a L2TP packet encapsulated in Bridge over PPP, has a lookup table indicating the correspondence of tunnel ID/session ID pairs to an identifier (VPN-IDs) of a wide area network to which a plurality of user terminals belong. The packet forwarding apparatus specifies an VPN-ID from the lookup table based on the tunnel ID and the session ID of a received packet and forwards, if it is confirmed that another tunnel ID/session ID pair associated with the same VPN-ID exists in the lookup table, the received packet to another L2TP session identified by the another tunnel ID/session ID pair in the form of a L2TP packet.

Packet forwarding apparatus and communication network suitable for wide area Ethernet service

Since, in Mobile IP, the correspondence of one Mobile Node home address and a care-of address is assumed to be one to one, it is not possible to associate multiple care-of addresses with one home addresses, select an appropriate care-of address from among these and dynamically modify the forwarding destination. In the invention, the binding update sent by the Mobile Node to the Home Agent is extended in order to make it possible to also report the application ID at the same time. The Home Agent selects an appropriate care-of address, based on the application ID.

Mobile node, server, and communication system

The invention provides a method for selecting a communication IP address whereby traffic of a network can be reduced and a session with the partner of communication can be maintained even when the mobile node has moved. The method prescribes provision of means for judging a state of a foreign network to which the mobile node is connected, and means of monitoring an IP address that an application having been started by the mobile node is using for communication, and enables selection of the mobile IP address so that the mobile node can maintain the session surely even in a visited foreign network.

Growing community of inventors

Tokyo, Japan

Mariko Yamada