A security management and information feedback system based on gdoi protocol

Abstract

The present invention provides a large-scale network security management system based on the GDOI protocol. The security management system is used to collect, classify and manage asset information, and manage and control encryption equipment and key management equipment associated with assets. The configuration information of the management device and the encryption device is managed, the group policy of the key management device and the encryption device is configured, and the status information of the key management device and the encryption device is checked. The encryption equipment and key management equipment associated with the assets are protected; the assets and their encryption equipment can be maintained and monitored at any time, and remedial measures can be taken as soon as any problem occurs. The key management server and group members ( GM)'s group encryption deployment model, the whole network negotiation mechanism (Group SA), uses Group SA to encrypt and decrypt the traffic between nodes, and provides secure communication for any node IP.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a security management and information feedback system based on the GDOI protocol. Background technique [0002] The global Internet has become indispensable in people's work and life, but the threat of network information security is increasing year by year. In the famous "Prism Gate" incident in the field of network security in 2013, the existing network architecture with switches and routers as the core is very easy to be monitored. The flood of information leaking through switches and routers is a wake-up call for all Internet users. [0003] For the Internet of large-scale enterprises or government departments around the world, it often adopts such as figure 1 The network topology shown. The entire network is divided into three layers. The group ring network platform consists of several data centers, and multiple 10G networks form a ring network between the da...

AI Technical Summary

Problems solved by technology

In the famous "Prism Gate" incident in the field of network security in 2013, the existing network architecture with switches and routers as the core is very easy to be monitored

Among them, the security management device (security management center) centrally manages and controls the encryption device and the key management device globally, manages the configuration information of the key management device and the encryption device, and configures the group policy of the key management device and the encryption device. View The status information of key management equipment and encryption equipment, and timely detection of assets or encryption equipment and key management equipment that have problems, and alarm and correction, to ensure that in addition, various distributed computing, voice, video in the Internet and other services need to run between branches anytime and anywhere, the traditional Hub-Spoke and point-to-point IPSec tunnel solutions cannot meet the needs of users

Images