method and device for deleting an IPSec SA in data transmission

A technology for data transmission and deletion, applied in the field of data security transmission, which can solve the problems of IPSecSA inconsistency, affecting business operation, and inability to perform IPSecSA deletion operations.

Inactive Publication Date: 2019-05-24
BEIJING QIANXIN TECH
View PDF8 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] The present invention solves the existing problem that the IPSec SA in the initiator and the responder is inconsistent due to the inability to delete the IPSec SA when the IKE SA is aging, which affects the operation of the business

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • method and device for deleting an IPSec SA in data transmission
  • method and device for deleting an IPSec SA in data transmission
  • method and device for deleting an IPSec SA in data transmission

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0025] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

[0026] In general data transmission, if the IKE SA ages, the IKE SA will renegotiate when the aging occurs, so that the aging of the IKE SA will not affect the IPSec SA. However, in practice, there are situations where the initiator or responder actively deletes the IPSec SA due to configuration modification or manual deletion. In this case,...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The embodiment of the invention discloses a method and a device for deleting an IPSec SA in data transmission, which are used for storing the aged IKE SA into an independent new linked list when detecting that the IKE SA is aged and deleted. After the aged IKE SA is aged and deleted, if the notification message needs to be decrypted through the aged IKE SA and the IPSec SA is deleted, the notification message can be decrypted through a new linked list, and the IPSec SA needing to be deleted is found. Through the storage of the aged IKE SA by the new linked list, the deletion of the aged IKE SA does not affect the decryption process of the notification message, so that the IPSec SA deletion failure caused by the fact that the notification message cannot be decrypted due to the deletion ofthe aged IKE SA is avoided, and the normal operation of the service is ensured.

Description

technical field [0001] The embodiment of the present invention relates to the technical field of secure data transmission, and in particular to a method and device for deleting an IPSec SA during data transmission. Background technique [0002] The IPSec (IP Security) protocol was produced during the formulation of IPv6. It is an open standard framework structure that ensures confidential and secure communication on the Internet Protocol (IP) network by using encrypted security services. The IPSec protocol includes a key management protocol called Internet Key Exchange Protocol IKE, which can dynamically authenticate IPSec peers, negotiate security services, and automatically generate shared keys. The security association SA records the policy and policy parameters of each IP security channel. SA is the basis of IPSec and an agreement established by the two parties in communication, which determines the protocol, transcoding method, key and key validity period used to protec...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L29/06
Inventor李小佳
OwnerBEIJING QIANXIN TECH