Method for safety packaging network message

Abstract

The present invention discloses a network message security package method. It contains generating application layer message; package head generating one random numbers as initial sequence number, serial number added 1 in transmitting one message, using serial number and message length bytes as package head added to message top; load filling its finally bytes meaning filling length; ciphering message; message authentication code message authenticating code calculation; transmitting security packaged signaling message package IP / UDP or TCP head. The present invented method adopts application layer package mode therefore being not related to network address translation equipment NAT, enhancing security.

Description

technical field [0001] The invention relates to a message encapsulation method, in particular to a method for implementing secure encapsulation of network messages. Background technique [0002] In various business network architectures based on packet networks such as NGN and IP Multimedia Subsystem IMS, message security is a basic requirement, and there should be a means to provide source authentication, integrity, Security features such as confidentiality and anti-replay. These features are generally obtained by using various signature, hash, and encryption security algorithms, but the combination of these basic security algorithms can achieve the best security and meet specific application environments, which is not disclosed in the prior art. [0003] At present, there are generally two methods for secure encapsulation of network packets: network layer security technology IPsec and transport layer security technology TLS technology; but their applications have certain ...

AI Technical Summary

Problems solved by technology

[0003] At present, there are generally two methods for secure encapsulation of network packets: network layer security technology IPsec and transport layer security technology TLS technology; but their applications have certain limitations, especially in NGN and IMS and other packet-based In the service network of the network, the following will be described respectively, so that the defects of the prior art can be seen at a glance

[0012] However, the IPsec of the prior art has the following defects: its application has a serious problem of friendliness with NAT, and there are many NAT devices in the actual network environment

Secondly, the use of TLS can only be used in the TCP environment, and the current UDP application will become more and more extensive, especially in the NGN and IMS environments, most of the protocols will use the UDP protocol, resulting in the inability to use the security mechanism of TLS

Moreover, it does not support manual configuration to establish security associations, or other application layer security association establishment methods, such as the IMSAKA security association establishment method defined in the 3GPP specification

Images