Patent ID: 7526641
Filing Date: 2009-04-28
Classification: H04L

Abstract:
1. A communication control apparatus comprising: a security policy database that stores a security policy for each communicating terminal with which an encoded communication is performed; a security association database that stores an entry including an encoding parameter for each communicating terminal; a storage unit that stores a security policy in said security policy database using a source IP address of a reception packet; and a policy deletion unit that determines, when an entry for a communicating terminal is deleted from said security association database, whether a security policy for the communicating terminal is effective and deletes the security policy when the security policy is determined not to be effective, wherein, when an entry is deleted from said security association database, said policy deletion unit sets a time limit in a lifetime included in a security policy corresponding to the entry, decreases the time limit as time passes as long as there is no other entry referring to the security policy, and deletes a security policy from said security policy database when the lifetime becomes 0, and when an entry is deleted from said security association database and another entry is referring to a security policy corresponding to the deleted entry, said policy deletion unit sets the lifetime to infinity.