Patent ID: 8646066

Claim:
A security protocol control apparatus, comprising: a transmission unit configured to transmit a packet to a communication partner; an establishment determination unit configured to determine whether a communication according to a Secure Socket Layer (SSL) has been established; a communication establishment unit configured to establish a communication according to the SSL; a generation determination unit configured to determine whether to generate a second parameter for an IP Security Protocol (IPsec) according to a first parameter for the SSL and control information for the security protocol control apparatus; a generation unit configured to generate, within the security protocol control apparatus and based on the first parameter generated for the SSL previously established with the communication partner, the second parameter for the IPsec that has not yet been established; a processing unit configured to generate a security association based on the second parameter for the IPsec, and perform an IPsec processing according to the security association on the packet to be transmitted by the transmission unit; and a discard unit configured to discard the packet without the processing unit performing IPsec processing on the packet according to a security association when the first parameter for the SSL has not yet been generated.