Dual-protocol based VPN implementing method

Abstract

The invention provides a method for realizing a dual protocol-based VPN, which is based on a code, an integrated circuit board of an industrial computer, a chip and network technique. The design concept of a special operation system of a microkernel is used for establishing an encryption system with a plurality of key systems; the method of pre-sharing the key is adopted to share the key secretly under the protection of encryption algorithm; each IP data packet has a key to establish standard encryption channel of IPSec and select an IP level (a third level) to establish a special encryption channel; the encryption channels are used for managing all the remote VPN gateways, establishing the function of auditing and logging and integrating the main safety function modules such as encryption algorithm, key management, a VPN standard protocol, a VPN special protocol, management tools and the function of auditing and logging into a whole; at the same time, the self-destruction function of a VPN functional module driven by a hardware is realized; thereby, a virtual special network based on the dual protocol is established.

Description

Technical field: [0001] The invention relates to the field of information security, can encrypt and decrypt the data of the private network in real time, and is applicable to various networks of government, enterprise, army, bank, securities, insurance and other units. Background technique: [0002] At present, there are many VPN products using the IPSec protocol in the world, and most of them have the following weaknesses: low function integration, slow speed, high price, poor security, and insufficient ability to resist group attacks. At the same time, there are also weaknesses in the use of VPN. The low efficiency of the general-purpose operating system, the high cost of distribution and management of various keys, and the difficulty of daily maintenance of the system have directly affected the application and popularization of VPNs. Invention content: [0003] The present invention adopts cipher, industrial computer board card, chip and network technology, sets up the ...

AI Technical Summary

Problems solved by technology

[0002] At present, there are many VPN products using the IPSec protocol in the world, and most of them have the following weaknesses: low function integration, slow speed, high price, poor security, and insufficient ability to resist group attacks. At the same time, there are also weaknesses in the use of VPN. Low efficiency of general-purpose operating system, high cost of distribution and management of various keys, difficulty in daily maintenance of the system, etc., have directly affected the application and popularization of VPN

Images