Network, system and method of differentiated security service

Abstract

The system thereof comprises: at least one DSS server, at least two DSS classifiers and at least two security gateways. Said DSS server is used for storing the differential security service policy base, and according to the security policy for triggering the DSS classifier, determines the security level information, and managing and controlling the DSS classifier. Said DSS classifier is used for making security service negotiation according to different security level information, and according to the negotiation result, triggering the relevant security service in security gateway. Said security gateway is used for receiving the negotiation result of DSS classifier and triggering and executing relevant security service.

Description

technical field [0001] The invention relates to the field of communication network security, in particular to a network, system and method of differentiated security services. Background technique [0002] From the perspective of information assets in the network transmission and storage process. For different information assets, the requirements for network security often vary greatly. For example, e-commerce often requires relatively high security requirements, while ordinary Internet web browsing only requires relatively low security requirements. [0003] From the perspective of the amount of information transmission, with the development of the network, the amount of data transmitted on the network is increasing, and for multimedia systems, data must be transmitted in real time. This trend makes the network put forward higher requirements for data security protection. For example, in Global System Mobile (GSM), since the transmitted data is mainly voice information an...

AI Technical Summary

Problems solved by technology

[0006] All in all, with the development of the communication network, the existing communication network security technology cannot provide a variety of network secur

Images