A data branch transmission method, device and system

Abstract

An end data multiplexing transmission method, including: a source device requesting from a security gateway the private network IP addresses of at least two logic tunnels in an Internet protocol security (IPsec) tunnel; the source device obtaining the private network IP addresses of the at least two logic tunnels and information about the correlation between the same and each destination device; the source device mapping the data stream sent to each destination device to the corresponding logic tunnel and transmitting the same to the security gateway according to the correlation information, so that the security gateway sends the received data streams to the corresponding destination devices. The method realizes secure end-to-end data multiplexing transmission.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a data branch transmission method, device and system. Background technique [0002] IPSec (IP Security, Internet Protocol Security) is a three-layer tunnel encryption protocol formulated by IETF to ensure the security and confidentiality of data transmitted on the Internet. IPSec provides security services for IP packets at the IP layer. The IPSec protocol defines how to add fields in IP data packets to ensure the integrity, privacy and authenticity of IP packets, and how to encrypt data packets. Using IPSec, data can be securely transmitted over the public network. [0003] Such as figure 1 Shown is a schematic diagram of the system structure using IPsec in the prior art, the source device, the security gateway and the destination device communicate through the public network IP, and the source device and the security gateway that support the IPsec client proto...

AI Technical Summary

Problems solved by technology

[0004] However, when there is only one interface (physical port or IP address) between the source device and the security gateway, and at least two destination devices, such as destination device 1 and destination device 2, since the data 1 sent by the source device to destination device 1 and the source The data 2 of the destination device 2 sent by the device is transmitted to the security gateway through the IPsec tunnel, and the security gateway cannot identify the whereabouts of data 1 and data 2. At this time, data 1 and 2 can only be sent to one destination device, and cannot be split , that is, for the above application scenarios, end-to-end data isolation cannot be achieved between the source device and multiple destination devices

Images