Method and device for DH (Diffie-Hellman) algorithm negotiation based on IKEv2

An algorithm and technology for negotiating packets, applied in the field of communication, can solve problems such as reduced negotiation efficiency

Active Publication Date: 2017-05-31
HANGZHOU DPTECH TECH
View PDF4 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] In view of this, this application provides an IKEv2-based DH algorithm negotiation method and device to solve the situation in the prior art that the n...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for DH (Diffie-Hellman) algorithm negotiation based on IKEv2
  • Method and device for DH (Diffie-Hellman) algorithm negotiation based on IKEv2
  • Method and device for DH (Diffie-Hellman) algorithm negotiation based on IKEv2

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0047] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present invention, and to make the above-mentioned purposes, features and advantages of the embodiments of the present invention more obvious and understandable, the following describes the existing technical solutions and the present invention in conjunction with the accompanying drawings. The technical solutions in the embodiments of the invention are described in further detail.

[0048] In the existing technology, the DH algorithm negotiation based on IKEv2 is that the initiator device of the DH algorithm sends an IKEv2 negotiation message to the responder device; wherein, the IKEv2 negotiation message carries the algorithm proposal provided by the initiator device for the DH algorithm, the The DH algorithm in the algorithm proposal is the identifier of the DH algorithm supported by the initiator device. Since key generation based on the DH algorithm re...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a method and a device for DH (Diffie-Hellman) algorithm negotiation based on IKEv2. The method comprises the following steps of enabling initiator equipment to judge whether the equipment supports multiple algorithms in the DH algorithm or not; when the equipment supports multiple algorithms in the DH algorithm, sending an IKEv2 negotiation message to responder equipment, wherein the IKEv2 negotiation message carries identifications of multiple locally-supported DH algorithms, and initiator key generation parameters correspond to the multiple DH algorithms; receiving a response message which is returned by the responder equipment and corresponds to the IKEv2 negotiation message; obtaining the identification of the target DH algorithm carried in the response message, and the responder key generation parameters, so as to complete the DH algorithm negotiation. The method solves the problem of decreasing of negotiation efficiency caused by additional one-time message interaction between the initiator equipment and the responder equipment in case of negotiation failure in the prior art.

Description

technical field [0001] The present application relates to the field of communication technologies, and in particular to a method and device for negotiating a DH algorithm based on IKEv2. Background technique [0002] IKE (Internet Key Exchange, key management protocol) is a protocol for negotiating public keys between network devices. The negotiation of IKE is divided into two stages. Key, the second stage is used to negotiate the key to protect data and protect the network segment. [0003] IKEv2 is the second version of IKE. During IKEv2 negotiation, the IKEv2 negotiation packet sent by the initiator device to the responder device carries the identifiers of several DH (Diffie-Hellman key exchange) algorithms supported locally and the corresponding The initiator key generation parameters of the DH algorithm; after receiving the IKEv2 negotiation packet, the responder device matches the DH algorithm carried in the IKEv2 negotiation packet with the local supported DH algorit...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L9/08
CPCH04L9/0841
Inventor 张鹤岭
Owner HANGZHOU DPTECH TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products