Security management and information feedback system based on GDOI protocol

Abstract

The invention provides a large-scale network security management system based on a GDOI protocol. The security management system is used for managing and controlling information acquisition, classification and management of properties and encryption equipment and key management equipment associated with the properties, managing configuration information of the key management equipment and the encryption equipment, configuring group policies of the key management equipment and the encryption equipment, and checking state information of the key management equipment and the encryption equipment. According to the large-scale network security management system disclosed by the invention, security protection of the properties and the encryption equipment and the key management equipment associated with the properties is carried out through a property management module and a configuration management module; therefore, the properties and the encryption equipment thereof can be maintained, monitored and checked at any time; if there is a problem, a remedial measure can be taken at first time; a group encryption and deployment model of a key management server and a group member (GM) and a whole network consultation mechanism (Group SA) are provided; the flow among nodes is encrypted and decrypted by using the Group SA; and security communication is provided for the IP of any node.

Description

Technical field [0001] The invention belongs to the technical field of information security, and particularly relates to a security management and information feedback system based on the GDOI protocol. Background technique [0002] The global Internet has been indispensable in people's work and life, but the threat of network information security is increasing year by year. In the famous "Prism Gate" incident in the field of network security in 2013, the existing network architecture with switches and routers as the core is very easy to be monitored. A large amount of information leaked through switches and routers, sounding a wake-up call for all network users. [0003] For the Internet of large-scale enterprises or government departments around the world, it often uses such as figure 1 The network topology shown. The entire network is divided into three layers. The group ring network platform is composed of several data centers. Between the data centers, multiple 10G networks ...

AI Technical Summary

Problems solved by technology

In the famous "Prism Gate" incident in the field of network security in 2013, the existing network architecture with switches and routers as the core is very easy to be monitored

Among them, the security management device (security management center) centrally manages and controls the encryption device and the key management device globally, manages the configuration information of the key management device and the encryption device, and configures the group policy of the key management device and the encryption device. View The status information of key management equipment and encryption equipment, and timely detection of assets or encryption equipment and key management equipment that have problems, and alarm and correction, to ensure that in addition, various distributed computing, voice, video in the Internet and other services need to run between branches anytime and anywhere, the traditional Hub-Spoke and point-to-point IPSec tunnel solutions cannot meet the needs of users

Images