Method and device for supporting mobile terminal to perform IPSec VPN message transmission

A technology for mobile terminals and IP packets, which is applied in transmission systems, electrical components, etc., and can solve problems such as insufficient IPSec VPN solutions and security

Active Publication Date: 2016-03-02
成都三零瑞通移动通信有限公司
View PDF5 Cites 21 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0018] The technical problem to be solved by the present invention is: in order to solve the security problem in the data transmission process in the mobile office, and solve the insufficient problem of existing IPSecVPN scheme, the present invention designs and supports mobile terminal to carry out IPSecVPN message transmission device

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for supporting mobile terminal to perform IPSec VPN message transmission
  • Method and device for supporting mobile terminal to perform IPSec VPN message transmission
  • Method and device for supporting mobile terminal to perform IPSec VPN message transmission

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0072] All features disclosed in this specification, or steps in all methods or processes disclosed, may be combined in any manner, except for mutually exclusive features and / or steps.

[0073] Any feature disclosed in this specification (including any appended claims, abstract and drawings), unless expressly stated otherwise, may be replaced by alternative features which are equivalent or serve a similar purpose. That is, unless expressly stated otherwise, each feature is one example only of a series of equivalent or similar features.

[0074] Relevant description of this patent:

[0075] 1. The internal network port refers to the plaintext IP packet interface. The internal network port of the encryption gateway is connected to the internal application server, and the internal network port of the built-in encryption gateway in the mobile terminal is connected to the mobile terminal. The external network port refers to the interface connected to the external network, and the...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The present invention relates to the field of encrypted data transmission, in particular to an IPSec VPN encryption method and device for supporting a mobile terminal. The prior art of the present invention has a problem and provides an encryption method and device. The method and device support tunnel negotiation when an IP address of the mobile terminal is not visual, support verifying the mobile terminal through a certificate or a device identity, and support a tunnel to automatically adapt a new IP address when the IP address of the terminal dynamically changes after the tunnel is established so as to adapt mobile office environment requirements and meet access requirements of the mobile terminal. The method of the present invention comprises: sending an IKE key negotiation request by the mobile terminal with a built-in gateway; after an encryption gateway receiving the negotiation request from the mobile terminal, performing data key negotiation, performing judgement on the plaintext of a negotiation package, and adding the IP of the mobile terminal into an SA data structure; generating an IP message encryption key and a corresponding sequence number (SPI) after the negotiation is completed; and establishing an encryption tunnel between the mobile terminal and the encryption gateway and then performing data transmission.

Description

technical field [0001] The invention relates to the field of encrypted data transmission, in particular to a method and device for supporting mobile terminals to transmit IPSecVPN messages. Background technique [0002] IPSeC (IPSeCurtyProtcol, IP Security Protocol) is a set of open standards that work together to ensure data confidentiality, data integrity, and data authentication between peer devices. A major advantage of IPSec VPN over other remote access solutions is that it uses centralized security and policy management components, which greatly eases maintenance requirements. Therefore, it has been widely used in helping remote users, company branches, business partners and suppliers to establish credible and secure connection solutions within the company's intranet. [0003] 1. Existing solutions of IPSecVPN [0004] IPSecVPN is a secure data transmission protocol between encrypted gateways and encrypted gateways. The network topology, negotiation process, message ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/0272H04L63/0485
Inventor 袁健熊毅吴志臣张智
Owner 成都三零瑞通移动通信有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products