Routing protocol security alliance management method, device and system

Abstract

The invention discloses a routing protocol security alliance management method, which comprises the following steps that: an agent module for negotiating a routing protocol security alliance is arranged in a network element; the element provided with the agent module and a negotiation initiator of the routing protocol security alliance establish a security alliance; under the protection of the established security alliance, the element provided with the agent module and the negotiation initiator of the routing protocol security alliance negotiate the routing protocol security alliance; and the network element provided with the agent module transmits the negotiated routing protocol security alliance through a preset or set security channel. The invention also discloses a routing protocol security alliance management device and a routing protocol security alliance management system. By the invention, the routing protocol unicast and multicast security alliance can be negotiated, updated and managed, so that the problems that the routing protocol security alliance only can be configured manually and potential safety hazards are large are solved, and routing information is transmitted more safely and reliably.

Description

technical field [0001] The present invention relates to routing protocol security alliance management technology, in particular to a routing protocol security alliance management method, device and system. Background technique [0002] With the continuous expansion of computer network scale and the rapid development of large-scale Internet (such as Internet), routing technology has gradually become a key technology in network technology, and routers have become the most important network equipment. The user's demand for high-speed network data transmission continues to promote the development of routing technology. People are no longer satisfied with sharing information only on the local network, but hope to maximize the use of various types of network resources in various regions of the world. In the current network technology, any computer network with a certain scale (such as enterprise network, campus network, intelligent building network, etc.) cannot do without routers...

AI Technical Summary

Problems solved by technology

[0008] However, IKEv2 does not provide security association negotiation and generation for routing protocols, and because the content of security associations of routing protocols is different from that of ESP and AH, IKEv2 cannot be directly used to negotiate security associations for routing protocols; in addition, IKEv2 only provides The end-to-end (or point-to-point, unicast) security association negotiation mechanism cannot provide security associations for the multicast (multicast) mechanism used by routing protocols; therefore, IKEv2 cannot provide unicast for routing protocols. broadcast security association, and cannot provide multicast security association for routing protocols

Images