An encrypted tunnel communication method based on hip protocol

Abstract

The invention provides an encrypted tunnel communication method based on a host identity protocol (HIP). Two pieces of equipment not supporting the HIP are separately connected with an HIP switch, andthe two HIP switches are connected via a network; agent functions of APR of the two HIP switches are opened, and a GRW virtual interface tunnel is built on the two HIP switches. According to the encrypted tunnel communication method based on the HIP provided by the invention, matched with the HIP switches and the GRE virtual interface tunnel technologies, the HIP communication can be achieved between the equipment without HIP functions, mobile interconnection networking between the equipment without mobile interconnection functions and mutual networking between the different networks are achieved, and the characteristics of wide application range and high security and confidentiality degree are provided.

Description

technical field [0001] The invention belongs to the field of network communication security, in particular to an encrypted tunnel communication method based on HIP protocol. Background technique [0002] Host Identity HIP (Host Identity Protocol), the host identity protocol introduces a new encrypted namespace, provides a secure host mobile and multi-homing method for the Internet, and makes it easier to authenticate both parties in communication, so as to realize a secure and trustworthy network system . The host identification HIP utilizes the ESP protocol and transmission mode of IPSEC to realize end-to-end secure communication. In the case of mobile Internet, IPv4 and IPv6 mixed networking, it can realize the security of communication data. However, in some networks, there are still traditional and old devices that cannot be transformed by themselves (such as foreign manufacturers). These devices cannot support the host identification HIP protocol themselves, so they c...

AI Technical Summary

Problems solved by technology

However, in some networks, there are still traditional and old devices that cannot be transformed by themselves (such as foreign manufacturers). These devices cannot support the host identification HIP protocol themselves, so they cannot take advantage of the excellent features of the host identification HIP, and thus cannot be integrated into throughout the network

Images