JP2006025211A - Peer-to-peer terminal device, peer-to-peer communication system, peer-to-peer communication method, and peer-to-peer terminal program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a peer-to-peer (hereafter P2P) terminal device capable of controlling traffic by an instruction of a network manager. <P>SOLUTION: In the P2P terminal device 10, a control information generating part 12 generates control information on P2P terminal devices 20 and 20-1 in response to the instruction of the network manager 10h. A digital signature generating part 13 reads a signature key N from a key pair N stored inside to generate a digital signature of the control information by the signature key N. A control signal generating part 11 generates a control signal including the control information and the digital signature and transmits it to the P2P terminal devices 20 and 20-1. A public key certificate transmitting part 15 reads, from the storage area in the inside, a public key certificate N of the public key N corresponding to the signature key N and transmits it to the P2P terminal devices 20 and 20-1. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a peer-to-peer terminal apparatus, a peer-to-peer communication system and a peer-to-peer communication method, and a peer-to-peer network management program that mainly control traffic exchanged in a peer-to-peer network.

In recent years, peer-to-peer (hereinafter referred to as P2P) type software has become widespread because of its ease of introduction, and traffic in the network has increased explosively with the spread. The reason for the explosive increase in traffic caused by P2P type software is that P2P terminals installed with P2P type software search each other for data existing in the terminals without using a server. The transmission / reception is performed between an unspecified number of P2P terminals. In addition, with the advent of software that automatically performs searches and data acquisition, the current increase in traffic is accelerating.
For this reason, in networks such as ISP (Internet Service Provider) and universities, 60% to 90% of the available bandwidth is consumed by traffic between P2P terminals. Naturally, this situation affects the communication of the terminals of other users who are not performing P2P type communication.
Therefore, in some ISPs, etc., an application layer switch that can control whether to discard or pass the application layer tag of the packet flowing in the network and introduce the packet by the P2P terminal is introduced. We are taking measures to control and limit the bandwidth.
However, since application layer switches analyze even higher application layer tags compared to low layer switches such as layer 2 switches and layer 3 switches, the operation is slower than low layer switches and the functionality is also high. high.
For this reason, when the traffic between P2P terminals further increases from the present situation, the application layer switch may become a network bottleneck. In such a case, the next means that can be taken by the ISP or the like is to introduce a new device such as a load balancer so as to increase the number of application layer switches and distribute the processing.
However, even if ISPs make capital investments to introduce these new devices, they do not start new services, but are only capital investments to limit traffic between P2P terminals. Can't get a good income. For this reason, ISPs do not limit the traffic that is transmitted and received between P2P terminals, but also consider taking measures that can be easily performed by setting a router or the like that discards traffic between all P2P terminals. It is done.
In order to avoid such a situation and continue P2P communication within the network, the network administrator can manage the traffic transmitted and received between P2P terminals without much capital investment. (For example, refer nonpatent literature 1).
Bernard Traversat et al., “Project JXTA 2.0 Superpeer Virtual Network (Project JXTA 2.0 Super-Peer Virtual Network), [online], May 25, 2003, Sun Microsystems, Sun Microsystems [Search May 31, 2004], Internet <URL: http://www.jxta.org/project/www/docs/JXTA2.0protocols1.pdf>

As a means for the network manager to control the traffic between the P2P terminals without making much capital investment, there is a means for the network manager to directly manage the setting of the P2P type software and limit the traffic transmitted by the P2P terminal. is there.
However, in the conventional P2P type software, means for controlling traffic based on setting information preset by the user or the developer who developed the software, the software itself automatically detects the communication speed and updates the setting information. Only means for controlling traffic and means for performing a combination of these means are provided. Therefore, there is a problem that the network administrator cannot directly control the setting information of the P2P type software and manage the traffic in the network.

  The present invention has been made to solve the above problems, and an object of the present invention is to provide a P2P terminal apparatus and a P2P communication system capable of controlling traffic in accordance with instructions from a network administrator.

  In order to solve the above-described problems, the present invention receives an instruction from an administrator of the peer-to-peer network in a peer-to-peer terminal device (P2P terminal device for network management 10) connected to another peer-to-peer terminal device via a peer-to-peer network. Control information generating means (control information generating unit 12) for generating control information of the other peer-to-peer terminal device, and reading out a signature key stored therein, and generating an electronic signature of the control information using the signature key Electronic signature generation means (electronic signature generation unit 13), a public key certificate of a public key corresponding to the signature key is read from an internal storage area, a control signal including the control information and the electronic signature, Transmission means for transmitting a public key certificate to the other peer-to-peer terminal device (public key certificate transmission unit 15 and P2P type communication) A basic portion 22), a peer to peer terminal device characterized by comprising a.

  The present invention is characterized in that, in the above invention, the control information is traffic control information for causing the other peer-to-peer terminal apparatus to control a traffic amount to be transmitted to the peer-to-peer network.

  In the present invention, a peer-to-peer terminal device (P2P terminal device 20, 20-1) connected to another peer-to-peer terminal device via a peer-to-peer network receives a control signal including control information and an electronic signature via the peer-to-peer network. Receiving means (P2P type communication unit 23), public key certificate obtaining means (public key certificate obtaining unit 26) for receiving a public key certificate via the peer-to-peer network, and verification stored therein A public key certificate verifying unit (public key certificate verifying unit 28) for reading the public key and verifying the public key certificate received by the public key certificate acquiring unit with the verification public key; and the public key When the certificate verification means confirms that the public key certificate is valid, the public key contained in the public key certificate is read. When the electronic signature is verified by the electronic signature verification unit (electronic signature verification unit 25) for verifying the electronic signature with the public key and the electronic signature verification unit, the control information is stored inside A peer-to-peer terminal device comprising: a setting reflection unit (setting reflection unit 27) that reflects the setting.

  The present invention is characterized in that in the above-mentioned invention, it further comprises transfer means (P2P type communication unit 23) for transferring the control signal when communicating with the other peer-to-peer terminal device.

  The present invention is characterized in that, in the above invention, the control information is traffic control information for controlling a traffic amount to be transmitted to the peer-to-peer network when reflected in an internal setting by the setting reflecting means.

  The present invention is a peer-to-peer communication system configured by a peer-to-peer terminal device for network management and a peer-to-peer terminal device connected to a peer-to-peer network, wherein the peer-to-peer terminal device for network management receives instructions from an administrator of the peer-to-peer network Receiving control information generating means for generating control information of the peer-to-peer terminal device, electronic signature generating means for reading out a signature key stored therein, and generating an electronic signature of the control information using the signature key, and Transmission means for reading out a public key certificate of a public key corresponding to a signature key from an internal storage area, and transmitting the control signal including the control information and the electronic signature and the public key certificate to the peer-to-peer terminal device The peer-to-peer terminal device includes the peer-to-peer network. Receiving means for receiving the control signal via a work; public key certificate obtaining means for receiving the public key certificate via the peer-to-peer network; and reading a verification public key stored therein, A public key certificate verifying unit that verifies the public key certificate received by the public key certificate acquiring unit with a verification public key, and the public key certificate is valid by the public key certificate verifying unit. If it is confirmed, the public key included in the public key certificate is read, and the electronic signature is verified by the electronic signature verification means for verifying the electronic signature with the public key. When it is confirmed that this is a peer-to-peer communication system, comprising: setting reflecting means for reflecting the control information to an internal setting.

  The present invention is a peer-to-peer communication method of a peer-to-peer communication system configured by a peer-to-peer terminal device for network management and a peer-to-peer terminal device connected to a peer-to-peer network, wherein the peer-to-peer terminal device for network management manages the peer-to-peer network A process of generating control information of the peer-to-peer terminal device in response to an instruction from the user, and the peer-to-peer terminal device for network management reads out a signature key stored therein, and an electronic signature of the control information is obtained by the signature key. The network management peer-to-peer terminal device reads out a public key certificate of a public key corresponding to the signature key from an internal storage area, and generates the public key certificate, the control information, and the electronic signature. Including the control signal. Transmitting to the terminal device; receiving means for the peer to peer terminal device to receive the control signal via the peer to peer network; and receiving the public key certificate to the peer to peer terminal device via the peer to peer network. A step of reading the public key for verification stored in the peer-to-peer terminal device and verifying the public key certificate received by the public key for verification, and the peer-to-peer terminal device When the key certificate is confirmed to be valid, the process of reading the public key included in the public key certificate and verifying the electronic signature with the public key, and the peer-to-peer terminal device, A process of reflecting the control information in internal settings when the electronic signature is confirmed to be valid. It is a peer-to-peer communication method.

  The present invention provides a control information for generating a control information of the other peer-to-peer terminal device by receiving a computer of the peer-to-peer terminal device connected to the other peer-to-peer terminal device via the peer-to-peer network in response to an instruction from an administrator of the peer-to-peer network. Generating means, reading out a signature key stored therein, generating an electronic signature of the control information with the signature key, and storing a public key certificate of a public key corresponding to the signature key in an internal storage area The peer-to-peer terminal program is made to function as a transmission unit that reads out the public-key certificate, the control information including the control information, and the electronic signature to the other peer-to-peer terminal device.

  The present invention provides a computer of a peer-to-peer terminal device connected to another peer-to-peer terminal device via a peer-to-peer network, receiving means for receiving a control signal including control information and an electronic signature via the peer-to-peer network, and the peer-to-peer network Public key certificate obtaining means for receiving the public key certificate via the public key certificate, reading the public key for verification stored therein, and receiving the public key certificate by the public key certificate obtaining means with the verification public key If the public key certificate is confirmed to be valid by the public key certificate verifying unit that verifies the public key certificate, the public key included in the public key certificate is read. An electronic signature verification means for verifying the electronic signature with the public key, and the electronic signature is verified by the electronic signature verification means. If it is confirmed as being a peer to peer terminal program for causing to function as setting reflecting means for reflecting the control information within the set.

  According to the present invention, a P2P terminal device used by a network administrator generates control information of another P2P terminal device in response to an instruction from the network administrator, and uses the signature key stored therein to control the electronic information of the control information. Generate a signature. The control signal including the control information and the electronic signature, the public key certificate of the public key corresponding to the signature key, and the other P2P terminal device are transmitted. Therefore, the P2P terminal device used by the network administrator can control other P2P terminal devices with the control signal. As a result, the network administrator can perform control to limit the amount of traffic transmitted from other P2P terminal devices used by the user.

According to the present invention, a P2P terminal device used by a user receives control information including control information and an electronic signature via a peer-to-peer network, and receives a public key certificate.
Then, the verification public key certificate stored inside is read, and the received public key certificate is verified by the verification public key certificate. When it is confirmed that the public key certificate is valid, the public key is read from the public key certificate, and the electronic signature included in the control signal is verified by the read public key. When it is confirmed that the electronic signature is valid, the control information is read from the control signal and reflected in the internal settings. The received control signal is transferred to another peer-to-peer terminal device. Therefore, it is possible to receive the control signal transmitted by the P2P terminal device used by the network administrator and change the traffic setting according to the control information for controlling the traffic amount, for example, regardless of the setting performed by the user. . As a result, the network administrator can uniformly control the amount of traffic transmitted by the P2P terminal device by transmitting control information from the P2P terminal device used by the network administrator. Further, even if there is an act that is implemented because the control information is provided with a public key electronic signature or an act of falsifying the control information, accurate control information can be reliably received.

  Further, according to the present invention, the P2P terminal device used by the user is synchronized with the time when the P2P terminal device communicates with another P2P terminal device as a timing for transferring the received control information to the other P2P terminal device. And transfer. Therefore, it is not necessary for the network administrator to repeatedly transmit control signals, and control information is transmitted in accordance with communication such as normal file exchange, so the load on the network due to control information transmission should be leveled Can do.

Hereinafter, a P2P terminal apparatus and a P2P communication system according to an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a schematic block diagram showing a P2P communication system configured by the P2P terminal devices 10, 20, and 20-1, and these P2P terminal devices and a network 100 according to the present embodiment. The network 100 is operated by a network administrator 10h, and is a network operated by an ISP, for example. The P2P terminal devices 10, 20, and 20-1 construct a logical P2P network for performing P2P communication on the network 100.
In the figure, P2P terminal devices 20 and 20-1 are P2P terminal devices for users used by users 20h and 20-1h, respectively. P2P terminal devices are connected.
In the P2P terminal apparatus 20, the application unit 21 is a P2P communication application developed by the application developer 50h, and has a function that allows the user to easily handle P2P communication. The P2P communication basic unit 22 includes a P2P type communication unit 23 and a P2P type communication behavior control unit 24, and performs communication based on the P2P protocol with other P2P terminal devices. The P2P communication unit 23 has functions common to P2P communication such as user search, connection, and transmission / reception, and the application unit 21 operates these functions through an application interface (API). The P2P type communication behavior control unit 24 changes the setting of the P2P terminal device 20 according to the control information included in the control signal received from the P2P terminal device 10 of the network administrator 10h via the network 100. As the setting to be changed, for example, there is a change in the amount of outgoing traffic to limit traffic. In the P2P communication behavior control unit 24, the electronic signature verification unit 24 verifies the electronic signature included in the control signal and verifies whether it is valid. The public key certificate acquisition unit 26 receives the public key certificate used when verifying the electronic signature via the network 100, and discloses it to the P2P terminal apparatus 10 when the public key certificate is not valid. Request a key certificate. The setting reflection unit 27 sets the content of the control information that is validated by the electronic signature verification unit 25 in the P2P type communication unit 23. The public key certificate verification unit 28 verifies whether or not the public key certificate received by the public key certificate acquisition unit 26 is valid using a certificate verification public key 29 stored therein. .
The P2P terminal device 10 is a P2P terminal device used by the network administrator 10h for management of the P2P network, and is hereinafter referred to as a network management P2P terminal device 10. In the network management P2P terminal device 10, the P2P type communication basic unit 22 is the same as the P2P type communication basic unit 22 of the user P2P terminal device 20 described above. The control signal generation unit 11 includes a control information generation unit 12 and an electronic signature generation unit 13. The control information generation unit 12 receives the information for setting change input by the user and generates control information. The electronic signature generation unit 13 stores therein a key pair N of a signature key N and a public key N, and generates an electronic signature of control information using the signature key. The public key certificate transmission unit 15 generates a public key certificate of the public key N and transmits it to the P2P terminal device 20 via the network 100. The subscript N of the signature key N, the public key N, and the public key certificate N indicates that they are related to each other. The public key N is a public key corresponding to the signature key N, and the public key certificate N Indicates that the certificate is for the public key N.
The platform provider terminal device 40 is a terminal used by the platform provider 40h that provides the P2P communication basic unit 22 by software. In the platform provider terminal 40, an electronic signature key pair generation unit 41 generates a key pair N necessary for performing an electronic signature. The public key certificate generation unit 42 generates a public key certificate for the public key of the key pair N.

With reference to FIG. 2 to FIG. 5, the means for constructing the network management P2P terminal device 10 and the user P2P terminal device 20, 20-1 and the network management P2P terminal device 10, the user P2P terminal device 20, A procedure for controlling 20-1 will be described.
FIG. 2 is a diagram showing a procedure for constructing a P2P terminal device 20 for a user. First, the platform provider 40h operates the platform provider terminal device 40, and the electronic signature key pair generation unit 41 generates a key pair P composed of the signature key P and the public key P (step S1). The public key P of the key pair P is set as the public key certificate verification public key 29 in the P2P communication basic unit 22 configured by software (step S2). Then, the software of the P2P communication basic unit 22 is distributed to the application developer 50h (step S3). The application developer 50h develops the application unit 21 using the P2P type communication basic unit 22 (step S4), and distributes the application unit 21 and the P2P type communication basic unit 22 together to the user 20h (step S5). Then, the user constructs the P2P terminal device 20 by installing the application unit 21 and the P2P type communication basic unit 22 in the terminal device.

FIG. 3 is a diagram showing a procedure for constructing a network management P2P terminal apparatus.
The network administrator 10h requests the platform provider 40h for software including the control signal generation unit 11, the public key certificate transmission unit 15, and the P2P communication basic unit 22 in order to construct the network management P2P terminal 10. In response to the request, a key pair N composed of the signature key N and the public key N and a public key certificate N of the public key N are also requested (step S6). When the platform provider 40h recognizes that the network administrator is a valid administrator, the electronic signature key pair generation unit 41 of the platform provider terminal device 40 generates the key pair N, and the public key certificate The certificate generation unit 42 generates a public key certificate N. The public key certificate N includes an electronic signature of the public key N using the public key N and the signature key P (step S7). Then, the platform provider 40h distributes the key pair N and the public key certificate N together with the software (step S8). The network administrator 10h installs the received software to construct the network management P2P terminal apparatus 10, and receives the received key pair N in the electronic signature generation unit 13 and the public key certificate N in the public key certificate transmission unit 15 Set to.

FIG. 4 is a diagram showing a procedure for controlling the user P2P terminal apparatus 20 by the network management P2P terminal apparatus 10.
First, the network administrator 10h examines the control purpose of the user P2P terminal device 20, determines a setting value corresponding to the purpose, and inputs it to the network management P2P terminal device 10. The control information generation unit 12 of the network management P2P terminal apparatus 10 generates control information including date and time information at the time of generation based on the input setting value (step S9). Next, the electronic signature generation unit 13 generates an electronic signature of the control information generated by the control information generation unit 12 using the signature key N of the key pair N (step S10). The control signal generation unit 11 converts the generated control information and the electronic signature into a control signal. The network management P2P terminal device broadcasts the control signal and the public key certificate N to the network 100 using the P2P communication function of the P2P type communication basic unit 22. This transmission is basically performed only once, and is not transmitted except when a control signal is newly generated under the operation of the network administrator 10h, or when a control signal is transmitted again according to an instruction from the network administrator 10h ( Step S11). The P2P terminal device 20 of the user 20h that has received the control signal including the electronic signature and the public key certificate N reads the date / time information of the control information of the received control signal and confirms whether it is older than the control information received in the past. (Step S12). If the received control information is old, the control signal and the public key certificate N are discarded. If the received control information is new or has not been received in the past, the control information is verified. First, in order to confirm whether or not the received public key certificate N is the latest one, the public key certificate acquisition unit 26 has received the public key certificate transmission unit 15 of the network management P2P terminal device 10. An inquiry is made as to whether or not the public key certificate N is the latest one (step S13). If it is the latest public key certificate, the received public key certificate N is used, and if it is not the latest public key certificate, the latest public key certificate N is received from the network management P2P terminal apparatus 10. Is received (step S14). Further, when the communication with the network management P2P terminal device 10 is not possible, the received public key certificate N is used.

FIG. 5 is a diagram showing a procedure until the user P2P terminal apparatus 20 receives a control signal from the network management P2P terminal apparatus 10 and sets it inside.
First, the public key certificate verification unit 28 verifies the public key certificate N based on the public key P stored therein. As long as the public key certificate N has not been tampered with, the electronic signature is applied with the signature key P corresponding to the public key P, and verification can be performed based on the content decrypted with the public key P. As a result of the verification, if it is determined that it is not valid, the control signal and the public key certificate N are discarded (step S15). When the public key certificate N is valid, the electronic signature verification unit 25 reads the public key N from the public key certificate N, and verifies the electronic signature included in the control signal. As a result of the verification, if it is determined that it is not valid, the control signal and the public key certificate N are similarly discarded (step S16). If the electronic signature is valid, the setting reflection unit 27 reflects the control information included in the control signal in the internal setting (step S17). Finally, when communicating with another P2P type terminal apparatus 20-1, the P2P type terminal apparatus 20 transmits the control signal and public key certificate N received by itself to the P2P type terminal apparatus 20-1 ( Step S18). The other P2P type terminal apparatus 20-1 performs the same processing as the above-described steps S12 to S18, so that the control signal is propagated to the network 100.
As a result, the network administrator 10h can control the amount of traffic transmitted by the P2P terminal devices 20 and 20-1 in the network 100 according to the set value of the control information included in the control signal. The setting is reflected earlier in P2P terminal devices that are frequently connected to the network 100 and that are frequently communicating with other P2P terminal devices or other P2P terminal devices.

When the above-described embodiment is specifically used for traffic suppression between P2P type terminal devices in ISP, the network administrator 10h needs to further consider the following procedure. First, the ISP network administrator 10h examines the level of the setting value that limits the traffic between the P2P type terminal devices so that the traffic between the P2P type terminal devices does not affect other communications. Furthermore, the level that can be maintained to ensure the convenience of the user of the P2P type terminal device is also considered.
Next, an application layer switch is introduced into the network 100 in order to limit the traffic caused by the P2P terminal device that cannot be controlled by the network management P2P terminal device 10 described above. And the traffic from the P2P terminal device which cannot be restrict | limited is set so that the traffic of the P2P terminal devices 20 and 20-1 which can be controlled by the network management P2P terminal device 10 is not blocked. With this setting, the traffic of the P2P type terminal device existing in the network 100 is only the traffic by the P2P type terminal devices 20 and 20-1 that can be controlled by the network management P2P terminal device 10.
Next, when traffic from the P2P terminal apparatuses 20 and 20-1 increases during operation, the network administrator 10h examines information to be set in the P2P type terminal apparatuses 20 and 20-1.
For example, at the time of installation, the P2P terminal device 20 performs (1) search for another user as a user search frequency once every 10 minutes (send search packet from search source or receive search response packets from multiple search destinations). It is set to do automatically. Also, (2) the status confirmation frequency is set to confirm the status (existence status or line status) of another user once every 3 minutes. Furthermore, (3) the file search frequency is set to search for a file once every 10 minutes based on a keyword set by the user.
Under these settings (1) to (3), for example, when traffic increases due to an increase in the number of users, the network administrator 10h changes the setting value, and the network management P2P terminal device 10 is changed. A control signal including the set value is transmitted to the P2P terminal apparatus 20. For example, setting values to be changed include (1) user search frequency: once every 30 minutes, (2) status confirmation frequency: once every 10 minutes, and (3) file search frequency: once every 30 minutes. Can be considered. By changing the setting, the interval at which the traffic is generated becomes longer, and it is possible to control the traffic as a whole network.

  In the above-described embodiment, an example for mainly controlling the amount of traffic transmitted from the P2P terminal apparatus 20 to the network 100 has been described. However, the present invention is not limited to traffic control. For example, highly reliable access right management information is set by setting information for managing access rights to content existing on the network as control information. And can be applied to an operation for uniformly controlling the P2P terminal apparatus 20.

  The P2P terminal device described above has a computer system inside. The traffic control processing process using the control signal described above is stored in a computer-readable recording medium in the form of a program, and the above processing is performed by the computer reading and executing the program. Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to the computer via a communication line, and the computer that has received the distribution may execute the program.

It is a block diagram which shows the P2P terminal device and P2P communication system by this embodiment. It is the figure which showed the procedure (the 1) which controls the P2P terminal device in the embodiment. It is the figure which showed the procedure (the 2) which controls the P2P terminal device in the same embodiment. It is the figure which showed the procedure (the 3) which controls the P2P terminal device in the same embodiment. It is the figure which showed the procedure (the 4) which controls the P2P terminal device in the same embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Network management P2P terminal apparatus 10h Network administrator 11 Control information generation part 12 Control information generation part 13 Electronic signature generation part 15 Public key certificate transmission part 20 P2P terminal apparatus 20-1 P2P terminal apparatus 100 Network

Claims (9)

In a peer-to-peer terminal device connected to another peer-to-peer terminal device via a peer-to-peer network,
In response to an instruction from an administrator of the peer-to-peer network, control information generating means for generating control information of the other peer-to-peer terminal device;
An electronic signature generating means for reading out a signature key stored therein and generating an electronic signature of the control information by the signature key;
A public key certificate corresponding to the signature key is read from an internal storage area, and a control signal including the control information and the electronic signature and the public key certificate are transmitted to the other peer-to-peer terminal device. Sending means to
A peer-to-peer terminal device comprising:   The peer-to-peer terminal apparatus according to claim 1, wherein the control information is traffic control information for causing the other peer-to-peer terminal apparatus to control a traffic amount to be transmitted to the peer-to-peer network. In a peer-to-peer terminal device connected to another peer-to-peer terminal device via a peer-to-peer network,
Receiving means for receiving a control signal including control information and an electronic signature via the peer-to-peer network;
Public key certificate acquisition means for receiving a public key certificate via the peer-to-peer network;
A public key certificate verification unit that reads a verification public key stored therein and verifies the public key certificate received by the public key certificate acquisition unit with the verification public key;
If the public key certificate verification means confirms that the public key certificate is valid, the electronic key that reads the public key contained in the public key certificate and verifies the electronic signature with the public key Signature verification means;
If the electronic signature verification means confirms that the electronic signature is valid, a setting reflection means for reflecting the control information to an internal setting;
A peer-to-peer terminal device comprising:   The peer-to-peer terminal apparatus according to claim 3, further comprising a transfer unit that transfers the control signal when communicating with the other peer-to-peer terminal apparatus.   The peer-to-peer terminal according to claim 3 or 4, wherein the control information is traffic control information for controlling a traffic amount to be transmitted to the peer-to-peer network when reflected in an internal setting by the setting reflecting means. apparatus. A peer-to-peer communication system comprising a peer-to-peer terminal device for network management and a peer-to-peer terminal device connected to a peer-to-peer network,
The peer-to-peer terminal device for network management is
In response to an instruction from an administrator of the peer-to-peer network, a control information generation unit that generates control information of the peer-to-peer terminal device, and a signature key stored therein are read out, and an electronic signature of the control information is read by the signature key An electronic signature generation means for generating, a public key certificate of a public key corresponding to the signature key is read from an internal storage area, and a control signal including the control information and the electronic signature and the public key certificate are obtained. Transmitting means for transmitting to the peer-to-peer terminal device,
The peer-to-peer terminal device is
Receiving means for receiving the control signal via the peer-to-peer network, public key certificate obtaining means for receiving the public key certificate via the peer-to-peer network, and reading a verification public key stored therein A public key certificate verifying unit for verifying the public key certificate received by the public key certificate acquiring unit with the verification public key; and the public key certificate is valid by the public key certificate verifying unit. When it is confirmed that the electronic key is read, the public key included in the public key certificate is read, and the electronic signature is verified by the electronic signature verifying unit that verifies the electronic signature with the public key. When it is confirmed that the signature is valid, a setting reflection unit that reflects the control information in an internal setting;
A peer-to-peer communication system comprising: A peer-to-peer communication method of a peer-to-peer communication system comprising a peer-to-peer terminal device for network management and a peer-to-peer terminal device connected to a peer-to-peer network,
The network management peer-to-peer terminal device generating control information of the peer-to-peer terminal device in response to an instruction from an administrator of the peer-to-peer network;
The network management peer-to-peer terminal device reads a signature key stored therein, and generates an electronic signature of the control information using the signature key;
The peer-to-peer terminal device for network management reads out a public key certificate of a public key corresponding to the signature key from an internal storage area, and a control signal including the public key certificate, the control information, and the electronic signature; Transmitting to the peer-to-peer terminal device;
Receiving means for the peer-to-peer terminal device to receive the control signal via the peer-to-peer network;
The peer-to-peer terminal device receiving the public key certificate via the peer-to-peer network;
The peer-to-peer terminal device reads a verification public key stored therein, and verifies the public key certificate received by the verification public key;
When the peer-to-peer terminal apparatus confirms that the public key certificate is valid, the process of reading the public key included in the public key certificate and verifying the electronic signature with the public key When,
When the peer-to-peer terminal apparatus confirms that the electronic signature is valid, the process of reflecting the control information in an internal setting;
A peer-to-peer communication method comprising: A computer of a peer-to-peer terminal device connected to another peer-to-peer terminal device via a peer-to-peer network;
Control information generation means for generating control information of the other peer-to-peer terminal device in response to an instruction from an administrator of the peer-to-peer network;
An electronic signature generating means for reading out a signature key stored therein and generating an electronic signature of the control information by the signature key;
A public key certificate of a public key corresponding to the signature key is read from an internal storage area, and a control signal including the public key certificate, the control information, and the electronic signature is transmitted to the other peer-to-peer terminal device. Transmission means to
A peer-to-peer terminal program characterized by functioning as A computer of a peer-to-peer terminal device connected to another peer-to-peer terminal device via a peer-to-peer network;
Receiving means for receiving a control signal including control information and an electronic signature via the peer-to-peer network;
Public key certificate acquisition means for receiving a public key certificate via the peer-to-peer network;
A public key certificate verification unit that reads a verification public key stored therein and verifies the public key certificate received by the public key certificate acquisition unit with the verification public key;
If the public key certificate verification means confirms that the public key certificate is valid, the electronic key that reads the public key contained in the public key certificate and verifies the electronic signature with the public key Signature verification means,
When the electronic signature verification means confirms that the electronic signature is valid, a setting reflection means for reflecting the control information to an internal setting;
A peer-to-peer terminal program characterized by functioning as

Images