Patent ID: 9065815
Filing Date: 2015-06-23
Classification: H04L

Abstract:
1. A computer system comprising: a controller; and a switch configured to perform a relay operation for a received packet conforming to a flow entry set by the controller, the relay operation being defined by the flow entry, wherein the switch is configured to transmit, to the controller, the received packet not conforming to the flow entry set in the switch, wherein the controller is configured to reference authentication information included in the received packet to authenticate the received packet, and set, in the switch, the flow entry for defining the relay operation for a packet which includes information which is in header information of the received packet determined to be valid and for identifying a source of the received packet, wherein the controller comprises a storage device in which policy information for defining a relay operation policy is recorded, and is configured to set, in the switch, the flow entry which conforms to the policy information corresponding to authentication information included in the received packet determined to be valid, wherein the authentication information includes a policy ID for identifying the policy information, and a first authentication ID used in authentication, wherein the policy information is recorded in the storage device, relating the policy ID for identifying the policy information with a second authentication ID, and wherein the controller is configured to determine the received packet, in which the second authentication ID related to the policy ID included in the authentication information corresponds to the first authentication ID, to be a valid received packet.