Apparatus and method for performing different cryptographic algorithms in a communication system

A cryptographic algorithm execution method in a communication system including first and second communication apparatuses, the second communication apparatus comprising at least one processor and a hardware security block and being configured to perform encryption on data transmitted from the first communication apparatus by using a first or second cryptographic algorithm, or perform decryption on the data that has been encrypted using the first or second cryptographic algorithm, the second cryptographic algorithm being configured to be executed by the at least one processor and to provide a higher security level than the first cryptographic algorithm that is configured to be executed by the hardware security block, the cryptographic algorithm execution method comprising:ncausing the first communication apparatus to assign first cryptographic classes to a parameter to be used for the encryption or the decryption by the second communication apparatus and to transmit data including one of the first cryptographic classes, that is permitted by the second communication apparatus, to the second communication apparatus, the first cryptographic classes being each configured to identify security parameters to be used for cryptographic processing and the security parameters including a type of service and queuing information for the data for the cryptographic processing, wherein the queuing information provides an indication as to whether the cryptographic processing is based on software or whether the cryptographic processing is subject to buffering; andcausing the second communication apparatus to perform, upon receiving the data including the one of the first cryptographic classes, the encryption or the decryption on the data by using the first or second cryptographic algorithm, based on the one of the first cryptographic classes.

A communication apparatus configured to perform encryption on data transmitted from another communication apparatus by using a first cryptographic algorithm or a second cryptographic algorithm or performs decryption on the data that has been encrypted using the first or second cryptographic algorithm, the second cryptographic algorithm being configured to provide a higher security level than the first cryptographic algorithm, the communication apparatus comprising:nan encryption apparatus including at least one processor and a hardware security block, wherein the encryption apparatus is configured to perform, upon receiving the data including a cryptographic class, the encryption or the decryption of the data based on the cryptographic class, wherein:the cryptographic class is configured to identify security parameters to be used for cryptographic processing, the security parameters including a type of service and queuing information for the data for the cryptographic processing, wherein:the queuing information provides an indication as to whether the cryptographic processing is based on software or whether the cryptographic processing is subject to buffering; andthe first cryptographic algorithm is configured to be executed by the hardware security block and the second cryptographic algorithm is configured to be executed by the at least one processor.

A communication apparatus configured to transmit data to another communication apparatus comprising at least one processor and a hardware security block for cryptographic processing, the another communication apparatus being configured to perform encryption on the data using a first cryptographic algorithm or a second cryptographic algorithm, or perform decryption on the data encrypted by the first or second cryptographic algorithm, the second cryptographic algorithm being configured to be executed by the at least one processor and to provide a higher security level than the first cryptographic algorithm that is configured to be executed by the hardware security block, the communication apparatus comprising:na class assigning apparatus configured to:assign first cryptographic classes to a parameter to be used by the another communication apparatus, when the another communication apparatus performs the encryption or the decryption, the first cryptographic classes each configured to identify security parameters to be used for cryptographic processing and the security parameters including a type of service and queuing information for the data for the cryptographic processing, wherein the queuing information provides an indication as to whether the cryptographic processing is based on software or whether the cryptographic processing is subject to buffering, andtransmit, to the another communication apparatus, the data including the first cryptographic classes.

A communication system comprising:na first communication apparatus comprising at least one processor and a hardware security block for cryptographic processing; anda second communication apparatus configured to perform encryption on data by a first cryptographic algorithm or a second cryptographic algorithm, or perform decryption on the data encrypted by the first or second cryptographic algorithm, the second cryptographic algorithm being configured to be executed by the at least one processor and to provide a higher security level than the first cryptographic algorithm that is to be executed by the hardware security block,wherein:the first communication apparatus is configured to:assign first cryptographic classes to a parameter to be used by the second communication apparatus, when the second communication apparatus performs the encryption or the decryption on the data, the first cryptographic classes being each configured to identify security parameters to be used for cryptographic processing and the security parameters including a type of service and queuing information for the data for the cryptographic processing, wherein the queuing information provides an indication as to whether the cryptographic processing is based on software or whether the cryptographic processing is subject to buffering, andtransmit, to the second communication apparatus, the data including one of the first cryptographic classes, that is permitted by the second communication apparatus; andthe second communication apparatus is configured to perform, upon receiving the data including one of the first cryptographic classes, encryption or decryption by the first or second cryptographic algorithm, based on the one of the first cryptographic classes.