Embedded electric power safety protection terminal encryption device

Abstract

The invention discloses an embedded electric power safety protection terminal encryption device which comprises an IKE processor and an ESP processor, wherein the IKE processor and the ESP processor conduct communication and synchronization through a double-chip communication drive program, and two commercial cipher SOC chips are adopted for the IKE processor and the ESP processor respectively. An application program comprises an ESP module, a secret key negotiation program body, an SAD module, an SPD module, an initializer, a PPP dial program body, a network packet filtering program body, a TCP protocol stack, a local / remote management system, a certificate module and a log system. According to the encryption device, through division of labor and cooperative work of double CPUs, the device is made to have higher handling capacity and stability; meanwhile non operating system design is adopted, and the required related protocol stack is achieved autonomously, so that the risk that other people attack the device through related loopholes of an operating system is avoided; through the related protocol stack achieved according to the requirements, the software of the device is greatly simplified, and the device operation speed is greatly increased compared with other devices.

Description

Technical field [0001] The invention relates to an embedded power safety protection terminal encryption device. Background technique [0002] Virtual Private Network (Virtual Private Network, VPN for short) refers to a technology for establishing a private network on a public network. It is called a virtual network mainly because the connection between any two nodes of the entire VPN network does not have the end-to-end physical link required by a traditional private network, but is based on a network provided by a public network service provider Platforms, such as logical networks on the Internet, ATM (Asynchronous Transfer Mode), Frame Relay, etc., user data is transmitted in logical links. It covers encapsulation, encryption and identity across shared networks or public networks The extension of the private network to verify the link. VPN mainly adopts tunnel technology, encryption and decryption technology, key management technology and user and device identity authenticatio...

AI Technical Summary

Problems solved by technology

Since the device needs to run the linux operating system, it needs a higher hardware configuration, resulting in a larger volume and higher cost of the VPN product, but the performance is not necessarily high

Coupled with some security loopholes in the open source Linux operating system, it increases the risk of VPN being attacked by others

Images