Information processing apparatus and non-transitory computer readable medium

Patent metadata

Field	Value
Publication number	US-11050718-B2
Application number	US-201916381119-A
Country	US
Kind code	B2
Filing date	Apr 11, 2019
Priority date	Oct 1, 2018
Publication date	Jun 29, 2021
Grant date	Jun 29, 2021

Abstract

An information processing apparatus includes a first cryptographic communication control unit, a second cryptographic communication control unit, and a timeout control unit. The first cryptographic communication control unit issues an encrypted connection request to a communication destination node and performs cryptographic communication. The second cryptographic communication control unit issues, concurrently with the connection request by the first cryptographic communication control unit, a connection request by plain text to the communication destination node, establishes connection, and then performs cryptographic communication. The timeout control unit changes a period for a timeout set in advance for the connection request by the first cryptographic communication control unit in a case where a response to the connection request by the second cryptographic communication control unit is received from the communication destination node before a response to the connection request by the first cryptographic communication control unit is received from the communication destination node.

First claim

What is claimed is:

1. An information processing apparatus comprising:
a hardware processor programmed to function as:
a first cryptographic communication control unit that issues an encrypted connection request to a communication destination node and performs cryptographic communication;
a second cryptographic communication control unit that issues, concurrently with the connection request by the first cryptographic communication control unit, a connection request by plain text to the communication destination node, establishes connection, and then performs cryptographic communication; and
a timeout control unit that changes a period for a timeout set in advance for the connection request by the first cryptographic communication control unit in a case where a response to the connection request by the second cryptographic communication control unit is received from the communication destination node before a response to the connection request by the first cryptographic communication control unit is received from the communication destination node,
wherein the timeout control unit changes the period for the timeout set for the connection request by the first cryptographic communication control unit to a period based on a point in time when the response to the connection request by the second cryptographic communication control unit is received from the communication destination node, and
wherein in a case where after the response to the connection request by the second cryptographic communication control unit is received, the response to the connection request by the first cryptographic communication control unit is received within the changed period for the timeout, the first cryptographic communication control unit establishes connection based on the connection request by the first cryptographic communication control unit instead of based on the connection request by the second cryptographic communication control unit.

2. The information processing apparatus according to claim 1 ,
wherein in a case where the response to the connection request by the second cryptographic communication control unit is received from the communication destination node before the response to the connection request by the first cryptographic communication control unit is received from the communication destination node, the timeout control unit changes the period for the timeout set for the connection request by the first cryptographic communication control unit to a period shorter than a default period.

3. The information processing apparatus according to claim 1 ,
wherein the hardware processor is further configured to function as a determination unit that determines whether communication executed under control of application software is cryptographic communication or plain-text communication,
wherein in a case where the determination unit determines that the communication is plain-text communication, the first cryptographic communication control unit and the second cryptographic communication control unit concurrently issue the connection requests to the communication destination node.

4. The information processing apparatus according to claim 3 ,
wherein in a case where both the connection request by the first cryptographic communication control unit and the connection request by the second cryptographic communication control unit time out, the first cryptographic communication control unit and the second cryptographic communication control unit interrupt the communication executed under control of the application software.

5. A non-transitory computer readable medium storing a program causing a computer to execute a process for information processing, the process comprising:
determining whether communication executed under control of application software is cryptographic communication or plain-text communication;
concurrently issuing, in a case where the communication is plain-text communication, a connection request by first cryptographic communication control in which an encrypted connection request is issued to a communication destination node and cryptographic communication is performed and a connection request by second cryptographic communication control in which a connection request by plain text is issued to the communication destination node, connection is established, and cryptographic communication is then performed;
changing a period for a timeout set in advance for the connection request by the first cryptographic communication control in a case where a response to the connection request by the second cryptographic communication control is received from the communication destination node before a response to the connection request by the first cryptographic communication control is received from the communication destination node,
wherein the changing changes the period for the timeout set for the connection request by the first cryptographic communication control to a period based on a point in time when the response to the connection request by the second cryptographic communication control is received from the communication destination node, and
wherein in a case where after the response to the connection request by the second cryptographic communication control is received, the response to the connection request by the first cryptographic communication control is received within the changed period for the timeout, the first cryptographic communication control establishes connection based on the connection request by the first cryptographic communication control instead of based on the connection request by the second cryptographic communication control; and
performing the cryptographic communication by the first cryptographic communication control in a case where the response to the connection request by the first cryptographic communication control is received from the communication destination node and performing the cryptographic communication by the first cryptographic communication control in a case where the response to the connection request by the second cryptographic communication control is received from the communication destination node and the period for the timeout for the connection request by the first cryptographic communication control has passed.

6. An information processing apparatus comprising:
first cryptographic communication control means for issuing an encrypted connection request to a communication destination node and performing cryptographic communication;
second cryptographic communication control means for issuing, concurrently with the connection request by the first cryptographic communication control means, a connection request by plain text to the communication destination node, establishing connection, and then performing cryptographic communication; and
timeout control means for changing a period for a timeout set in advance for the connection request by the first cryptographic communication control means in a case where a response to the connection request by the second cryptographic communication control means is received from the communication destination node before a response to the connection request by the first cryptographic communication control means is received from the communication destination node,
wherein the timeout control means changes the period for the timeout set for the connection request by the first cryptographic communication control means to a period based on a point in time when the response to the connection request by the second cryptographic communication control means is received from the communication destination node, and
wherein in a case where after the response to the connection request by the second cryptographic communication control means is received, the response to the connection request by the first cryptographi

Assignees

• Fujifilm Business Innovation Corp

Inventors

• Aoki Koji

Classifications

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/108

  when the policy decisions are valid for a limited amount of time · CPC title

• H04L2463/121

  Timestamp · CPC title

• H04L63/205

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title

• H04W12/61

  Time-dependent · CPC title