Communication apparatus, authentication system and authentication method

Abstract

A communication apparatus transmits an authentication frame to an authentication apparatus and receiving a response frame for response to the authentication frame from the authentication apparatus so that an authentication process is performed for the communication apparatus by the authentication apparatus. The communication apparatus includes a receiving section which receives a communication frame transmitted from another apparatus, and an authentication processing section which determines whether the received communication frame is a frame of EAP-response (Extensible Authentication Protocol-response) or not. The authentication processing section discards the received communication frame if it is determined that the received communication frame is the frame of EAP-response.

What is claimed is: 
     
         1 . A communication apparatus for transmitting an authentication frame to an authentication apparatus and receiving a response frame for response to the authentication frame from the authentication apparatus so that an authentication process is performed for the communication apparatus by the authentication apparatus, the communication apparatus comprising:
 at least one processor and memory;   a receiving section which receives a communication frame transmitted from another apparatus; and   an authentication processing section which determines whether the received communication frame is a frame of EAP-response (Extensible Authentication Protocol-response) or not, wherein   the authentication processing section discards the received communication frame if it is determined that the received communication frame is the frame of EAP-response.   
     
     
         2 . The communication apparatus according to  claim 1 , wherein
 the received communication frame includes a header and a payload, and   fields of Code, Identifier and Length are defined in the header, and data based on the Code field is stored in the payload.   
     
     
         3 . The communication apparatus according to  claim 2 , wherein
 the authentication processing section determines whether the received communication frame is the frame of EAP-response or not by checking the Code field.   
     
     
         4 . The communication apparatus according to  claim 3 , wherein
 the authentication processing section determines that the received communication frame is the frame of EAP-response if the Code field has a value of 2 that indicates a frame of a response.   
     
     
         5 . A communication apparatus for transmitting an authentication frame to an authentication apparatus and receiving a response frame for response to the authentication frame from the authentication apparatus so that an authentication process is performed for the communication apparatus by the authentication apparatus, the communication apparatus comprising:
 at least one processor and memory;   a receiving section which receives a communication frame transmitted from another apparatus; and   an authentication processing section which determines whether the received communication frame is a frame of EAP-response (Extensible Authentication Protocol-response) or a frame of EAP-request (Extensible Authentication Protocol-request), wherein   the authentication processing section discards the received communication frame if it is determined that the received communication frame is the frame of EAP-response, whereas the authentication processing section recognizes the communication frame as an authentication frame transmitted to the communication apparatus if it is determined that the received communication frame is the frame of EAP-request.   
     
     
         6 . An authentication system, comprising:
 a plurality of communication apparatuses including the communication apparatus as defined in  claim 1 ;   a hub connected to the plurality of communication apparatuses; and   an authentication apparatus connected to the hub.   
     
     
         7 . The communication apparatus according to  claim 1 , wherein the communication apparatus is a network camera. 
     
     
         8 . The communication apparatus according to  claim 1 , wherein the communication apparatus is an IP phone. 
     
     
         9 . An authentication method in a communication apparatus for transmitting an authentication frame to an authentication apparatus and receiving a response frame for response to the authentication frame from the authentication apparatus so that an authentication process is performed for the communication apparatus by the authentication apparatus, the authentication method comprising:
 receiving a communication frame transmitted from another apparatus;   determining whether the received communication frame is a frame of EAP-response (Extensible Authentication Protocol-response) or not; and   discarding the received communication frame if it is determined that the received communication frame is the frame of EAP-response, wherein said receiving, said determining and said discarding are performed by a configured communication apparatus including at least one processor and memory.   
     
     
         10 . An authentication method in a communication apparatus for transmitting an authentication frame to an authentication apparatus and receiving a response frame for response to the authentication frame from the authentication apparatus so that an authentication process is performed for the communication apparatus by the authentication apparatus, the authentication method comprising:
 receiving a communication frame transmitted from another apparatus;   determining whether the received communication frame is a frame of EAP-response (Extensible Authentication Protocol-response) or a frame of EAP-request (Extensible Authentication Protocol-request); and   discarding the received communication frame if it is determined discarding that the received communication frame is the frame of EAP-response, whereas recognizing the communication frame as an authentication frame transmitted to the communication apparatus if it is determined that the received communication frame is the frame of EAP-request, wherein said receiving, said determining, said discarding and said recognizing are performed by a configured communication apparatus including at least one processor and memory.