Method for negotiating security capability between PCC and PCE and network system thereof

Abstract

The invention provides a method for coordinating the security capacity between a PCC and a PCE and a network system thereof. The method comprises the steps that: a path computation element sends a message carrying security policy capacity information to a path computation client; after receiving the message, the path computation client obtains security policy capacity supported or required by thepath computation element or obtains security policy capacity supported by the path computation element and the path computation client; the path computation client is connected or communicated with the path computation element according to the obtained security policy capacity. In the method, the coordination between the PCC and the PCE and between the PCC and the PCC is carried out by sending the message carrying the security policy capacity information, thereby greatly simplifying security policy configuration between the PCC and the PCE and between the PCC and the PCC, and the deployment complexity of the path computation element (PCE).

Description

technical field [0001] The present invention relates to a communication system, in particular to the method of negotiating security capabilities between a Path Computation Client (PCC: Path ComputationClient) and a Path Computation Element (PCE: Path Computation Element) in traffic engineering (TE: Traffic Engineering) path calculation of a communication system method and its network system. Background technique [0002] The process of mapping communication traffic on the physical topology of the network and locating resources for these communication traffic is called traffic engineering (TE: Traffic Engineering). [0003] Currently, Path Computation Element (PCE: Path Computation Element) is a new model for TE path computation in traffic engineering. Compared with the traditional way of completing traffic engineering TE path calculation by each router, the traffic engineering TE path calculation model based on the path calculation unit PCE separates the path calculation fu...

AI Technical Summary

Problems solved by technology

[0011] 1. Untrusted nodes illegally intercept calculation request and response messages transmitted between PCE and PCE;

[0012] 2. Untrusted nodes counterfeit PCC or PCE;

[0018] In the process of realizing the present invention, the inventors found that the disadvantage of adopting static configuration of the security mechanism between the path computation client PCC and the path computation unit PCE is that the configuration is cumbersome and complicated

Images