Method for exchanging and consulting secret keys between mobile device and safe access gateway

Abstract

The invention discloses a method for exchanging and consulting secret keys between a mobile device and a safe access gateway. The method comprises the following steps: in the IKE first stage master mode consultation process, the mobile device sends the fifth message carrying user identity identification information to the access gateway; the access gateway performs identity identification on a remote device according to the fifth message; if the identification passes, the access gateway allocates an intranet IP address to the mobile device and sends the sixth message carrying intranet IP address information to the mobile device; and the mobile device receives the sixth message and acquires the intranet IP address. In the method of the invention, standard IKE interactive flow is modified, on the basis of ensuring system safety, the expanding identification of user identity and dynamic intranet IP allocation of client are realized, thus overcoming the defects of low efficiency and poor controllability existing in the prior art and satisfying requirements on user remote safe access under mobile environment.

Description

technical field [0001] The invention belongs to the field of computer communication and data security, and mainly relates to a security key negotiation technology and a remote access technology, in particular to a key exchange negotiation method between a mobile device and a security access gateway. Background technique [0002] The rapid development of smart terminals and wireless network communication makes it easy for people to use smart mobile terminals to access the Internet anytime and anywhere. However, at present, services with high confidentiality requirements are rarely applied on mobile terminals. This is because mobile networks are open networks. In addition to facing the security threats of fixed networks, they also face low bandwidth, Large interference, poor stability, easy packet loss, more vulnerable to eavesdropping and other problems. At the same time, smart mobile terminals also have the characteristics of low computing power, small storage capacity, and...

AI Technical Summary

Problems solved by technology

The disadvantage of this solution is that a DHCP SA needs to be established temporarily, which not only prolongs the IKE interaction time, but also brings a large burden to the remote access server, and because it is difficult for the access server to control the DHCP server, different user identities can choose Different address pools allocate internal addresses, causing access control difficulties

Although the solution combining L2TP (Layer Two Tunneling Protocol) with IPSec can realize the dynamic allocation of intranet addresses and extended authentication of user names and passwords, this solution requires additional L2TP negotiation and multiple encapsulations during IPSec data transmission. lead to inefficiency

Images