Wireless IP network variable area communicating method based on IPSec protocol
A technology of IP network and regional communication, applied in the application field of wireless IP network communication based on IPSec protocol, can solve the problems of incompatibility of network layer security protocols of performance enhancement technology, achieve TCP performance enhancement, HTTP transmission acceleration, performance Enhanced effect
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
specific Embodiment approach 1
[0016] Specific embodiment one: the wireless IP network variable area communication method based on IPSec protocol described in this embodiment is:
[0017] The IP packet to be sent is divided into a plurality of areas according to the rules of the IPSec protocol to generate an IPSec packet. The area mappings of the plurality of areas are all encapsulated in the ESP header, and the areas of different levels are respectively set in the plurality of areas. Security association information; the area mapping information of each encrypted area includes the area number of IP data packets, the area number and the length of the mapped area;
[0018] The sending and receiving endpoints of the data contain the security association information of all areas in each IPSec data packet, and can interpret all the data information in the IPSec data packet;
[0019] Ordinary intermediate nodes in the transmission data path do not contain any security-related information in the IPSec data packet...
specific Embodiment approach 2
[0021] Embodiment 2: The difference between this embodiment and the wireless IP network variable area communication method based on IPSec protocol described in Embodiment 1 is that the IP data packet to be sent is divided into two areas according to the rules of the IPSec protocol.
[0022] Setting application layer is HTTP agreement, comprises the Web page information described in HTML (Hypertext Markup Language), then the transmission model diagram described in the present embodiment is referring to Fig. 1, and this model is sent terminal 1 by IP packet, and two are not Trusted intermediate nodes 2 and 4, performance enhancing gateway 3 authorized by authentication and receiving terminal 5. In this transmission mode model, the IP data packet to be sent is divided into two areas, area 1 contains the TCP header and HTML object links with variable length, and area 1 security-related information is sent by the sending terminal 1, the performance of the authentication and authoriz...
specific Embodiment approach 3
[0037] Embodiment 3: The difference between this embodiment and the IPSec-based wireless IP network variable area communication method described in Embodiment 1 or Embodiment 2 is that the security-associated information is area composite security-associated information CSA, and the area Composite security-associated information CSA is to put together the same information in the original multiple regional security-related information as a common parameter of regional composite security-related information, and use different information in multiple regional security-related information as regional security-related information private parameters, wherein the public parameters may include serial number counter, serial number overflow counter, protocol mode, anti-replay attack window and other information.
[0038] This implementation mode adopts the area compound security association information CSA, and the number of areas of each IP data packet may be inconsistent with the numbe...
PUM
Abstract
Description
Claims
Application Information
- R&D Engineer
- R&D Manager
- IP Professional
- Industry Leading Data Capabilities
- Powerful AI technology
- Patent DNA Extraction
Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.
© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com