An embedded power security protection terminal encryption device

Abstract

The invention discloses an embedded electric power safety protection terminal encryption device which comprises an IKE processor and an ESP processor, wherein the IKE processor and the ESP processor conduct communication and synchronization through a double-chip communication drive program, and two commercial cipher SOC chips are adopted for the IKE processor and the ESP processor respectively. An application program comprises an ESP module, a secret key negotiation program body, an SAD module, an SPD module, an initializer, a PPP dial program body, a network packet filtering program body, a TCP protocol stack, a local / remote management system, a certificate module and a log system. According to the encryption device, through division of labor and cooperative work of double CPUs, the device is made to have higher handling capacity and stability; meanwhile non operating system design is adopted, and the required related protocol stack is achieved autonomously, so that the risk that other people attack the device through related loopholes of an operating system is avoided; through the related protocol stack achieved according to the requirements, the software of the device is greatly simplified, and the device operation speed is greatly increased compared with other devices.

Description

technical field [0001] The invention relates to an embedded electric power safety protection terminal encryption device. Background technique [0002] A virtual private network (Virtual Private Network, referred to as VPN) refers to the technology of establishing a private network on a public network. The reason why it is called a virtual network is mainly because the connection between any two nodes of the entire VPN network does not have the end-to-end physical link required by the traditional private network, but is structured on the network provided by the public network service provider. Platforms, such as logical networks on the Internet, ATM (Asynchronous Transfer Mode), Frame Relay (Frame Relay), etc., user data is transmitted in logical links. It covers encapsulation, encryption and identity across shared or public networks Expansion of the private network that verifies the link.VPN mainly adopts tunnel technology, encryption and decryption technology, key manageme...

AI Technical Summary

Problems solved by technology

Since the device needs to run the linux operating system, it needs a higher hardware configuration, resulting in a larger volume and higher cost of the VPN product, but the performance is not necessarily high

Coupled with some security loopholes in the open source Linux operating system, it increases the risk of VPN being attacked by others

Images