Method, device and system for negotiating business bearing tunnels

Abstract

The invention discloses a method for negotiating business bearing tunnels, which comprises the following steps: receiving an internet key exchange (IKE) authentication request, wherein the IKE authentication request carries information of non-encrypted tunnels supported by user equipment; when the security level of the business is lower than the preset level, according to the information of the non-encrypted tunnels supported by the user equipment, selecting the non-encrypted tunnels for bearing the business from the non-encrypted tunnels supported by the user equipment; and sending an IKE authentication response, wherein the IKE authentication response carries the information of the non-encrypted tunnels for bearing the business. The invention also discloses a grouping gateway device, the user equipment and a communication system. In the method, the non-encrypted tunnel for bearing the business can be negotiated, so that the encryption / decryption treatment and / or the consistency check are not carried out when the subsequent business bearing is performed, thus reducing the transmission delay of the messages and the device cost.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a method, device and system for negotiating a service bearer tunnel. Background technique [0002] IKE (Internet Key Exchange, Internet Key Exchange) protocol is the preferred key exchange protocol in the implementation of IPSec (Internet Protocol Security, Internet Protocol Security), and the new version of IKEv2 (IKE version 2, Internet Key Exchange Version 2) protocol retains The basic functions of traditional IKE are revised according to the problems found in the IKE research process, while taking into account the needs of simplicity, efficiency, security and robustness. The IKEv2 protocol greatly improves the interoperability of different IPsec systems through the minimum specification of core functions and default encryption algorithms. [0003] The negotiation process of IKEv2 is as follows: [0004] IKEv2 establishes a pair of IPSec_SA (Security Associati...

AI Technical Summary

Problems solved by technology

[0011] The negotiated IPSec tunnel for carrying services is an encrypted tunnel. When carrying services through this encrypted tunnel, it is required to perform encryption and decryption processing and / or consistency check on user data streams with different algorithms, which will increase the transmission delay of packets. High requirements on the processing capabilities of user equipment and packet gateway equipment, and high equipment costs

Images