Method and system for establishing secure connection between local area network nodes

Abstract

The invention discloses a method for establishing secure connection between local area network nodes. The method comprises the following steps that: 1) a sending source node Nsource sends a key request packet to switching equipment SWFirst; 2) the switching equipment SWFirst sends a temporary key negotiation request packet to switching equipment SWLast; 3) the switching equipment SWLast sends a key announcement packet to a destination node NDestination; 4) the destination node NDestination sends a key announcement response packet to the switching equipment SWLast; 5) the switching equipment SWLast sends a temporary key negotiation response packet to the switching equipment SWFirst; 6) the switching equipment SWFirst sends a key response packet to the sending source node Nsource; and 7) the sending source node Nsource receives the key response packet. The invention provides the method and a system for establishing the secure connection between the local area network nodes. In the method, keys between the legal local area network nodes can be flexibly established and updated.

Description

technical field [0001] The invention relates to a method and system for establishing a secure connection between nodes of a local area network. Background technique [0002] The wired LAN is generally a broadcast network, and the data sent by one node can be received by other nodes. All nodes on the network share the channel, which brings great security risks to the network. As long as the attacker accesses the network to monitor, he can capture all the data packets on the network. The local area network LAN defined by the existing national standard GB / T 15629.3 (corresponding to IEEE 802.3 or ISO / IEC 8802-3) does not provide data security methods, which makes it easy for attackers to steal key information. [0003] In a wired LAN, IEEE implements security at the link layer by enhancing the security of IEEE 802.3. IEEE 802.1AE provides a data encryption protocol for protecting Ethernet, and adopts hop-by-hop encryption security measures to realize the safe transmission of...

AI Technical Summary

Problems solved by technology

However, this security measure requires the switching device to decrypt, encrypt, and then forward each data packet that needs to be forwarded, which undoubtedly brings a huge computational burden to the switching device in the LAN, and it is easy to cause attackers to attack the switching device. attack; and the delay of the data packet from the sending node to the destination node will also increase, reducing the network transmission efficiency

[0004] The topology of wired LAN is relatively complex, and the number of nodes involved (here, terminals and switching devices are collectively referred to as nodes) is also relatively large, so the data communication in the network is relatively complicated.

If a static key pair is assigned between LAN nodes to establish a secure connection between nodes, the distribution and update process is extremely complicated

Images