Two-stage encryption protection method for switch

Abstract

The invention discloses a two-stage encryption protection method for a switch, and belongs to the technical field of switch security management. According to the two-stage encryption protection method for the switch, the switch is provided with a switching and configuring chip, a single chip computer and an encryption chip, wherein the switching and configuring chip configures and manages a switching chip. The upper-layer encryption authentication is performed between the switching and configuring chip and the single chip computer, and bottom-layer encryption authentication is performed between the single chip computer and the encryption chip. The two-stage encryption protection method for the switch comprises the steps: in an upper-layer encryption authentication process, initiating an authentication request to trigger the bottom-layer encryption authentication; in a bottom-layer encryption authentication process, enabling the upper-layer encryption authentication according to an authentication passing situation, and judging whether the upper-layer encryption authentication succeeds; if the upper-layer encryption authentication succeeds, enabling a switch operating system kernel; if the upper-layer encryption authentication is failed, judging whether the authentication times is larger than a preset value; if the authentication times is larger than the preset value, locking the switch operating system kernel; if the authentication times is less than or equal to the preset value, continuing the encryption authentication. The two-stage encryption protection method for the switch prevents switch programs from being illegally stolen, supports a customized encryption algorithm and has the characteristics of simplicity in implementation and great flexibility.

Description

technical field [0001] The invention discloses a two-level encryption protection method for an exchange, belonging to the technical field of exchange safety management. Background technique [0002] The main functional components of the switch are composed of a switch module and a configuration module. The switch module implements data forwarding of the switch, while the configuration module provides functions such as switch VLAN configuration and SNMP management. With the introduction of technologies such as SDN, the importance of configuration modules has become more prominent. Preventing the program from being illegally stolen and protecting the program on the configuration module is a necessary work for daily maintenance of the configuration module, and using encryption chip technology is a common program protection solution. However, the encryption algorithm used in the existing encryption chip is often solidified in the chip. If the user wants to use other algorithms ...

AI Technical Summary

Problems solved by technology

[0003] The invention provides a two-level encryption protection method for a switch, aiming at the lack of flexibility of the existing switch encryption chip and the corresponding encryption authentication program, and the danger of authentication failure caused by unreliable communication during the encryption authentication process. , to prevent the switch program from being illegally stolen, and supports custom encryption algorithms, which is simple to implement and flexible

Images