IPSec encryption card and CPU coordinative user plane data processing method

Abstract

The invention proposes an IPSec encryption card and CPU coordinative user plane data processing method, and the method comprises the steps: setting a CPU, an IPSec encryption card and a switch chip for data distribution; enabling the CPU to forbid MAC address learning at an SGMII port, connected with the encryption card, of the switch chip in an initialization process, carrying out the IKE coordination configuration in the encryption card, configuring an ACL rule in the switch chip, filtering a message with an IP protocol field being an ESP at a port, connected with a PHY device, of the switch chip, and carrying out the forced transmitting of the message to the encryption card; and enabling the encryption card to process, encrypt and decryption the message in a process of data returning. According to the technical scheme of the invention, the method can reduce the consumption of resources in the encryption and decryption process of the data on a base station user plane, and improves the performances and universality. Because the separation of the processing of a protocol and data is achieved, the method guarantees the flexibility of the protocol, improves the performance, and avoids the IP / MAC address conflict of the CPU and IPSec encryption card.

Description

technical field [0001] The invention relates to the field of mobile communication, in particular to providing an IPSec encryption card and a CPU cooperative work method for confidential and safe communication. Background technique [0002] With the advancement of wireless communication technology and the continuous upgrading and transformation of wireless network equipment, the requirements for user plane data processing of LTE (3GPP long-term evolution technology) base stations are getting higher and higher. On the other hand, network threats are becoming more and more serious, and user data carried by LTE base stations is becoming more and more important, which requires that user data be encrypted and transmitted in ciphertext. Internet Protocol Security (IPSec) is an open standard framework for ensuring confidential and secure communications over Internet Protocol (IP) networks through the use of encrypted security services. At present, the relatively mature encryption m...

AI Technical Summary

Problems solved by technology

[0046] Aiming at the problems existing in the prior art, the present invention proposes a high-bandwidth data encryption and decryption design method based on a general-purpose CPU and a general-purpose IPSec encryption card. , low encryption and decryption performance and design versatility

Images