Message security processing system and method

Abstract

The embodiment of the invention discloses a message security processing system and a method. The message security processing system comprises a processor, a hardware security co-processing module anda network processing module, and the processor is integrated with a software security protocol and a control module; the network processing module is connected with at least one network interface, andsends the message received from the network interface to the hardware security co-processing module for security processing; a message fed back after processing of the hardware security co-processingmodule is completed is sent out through a network interface; and the hardware security co-processing module is used for performing security processing on the received message sent by the network processing module and feeding back the message to the network processing module. According to the system of the embodiment of the invention, through interaction between the hardware security co-processingmodule and the network processing module, the effect that the message security processing does not need to occupy the running memory of the processor is realized, so that the processing performance of the message security characteristic is not limited by the performance of the processor.

Description

technical field

[0001] The embodiments of the present invention relate to network communication technologies, and in particular to a message security processing system and method. Background technique

[0002] With the rapid development of computer technology, the business processed on the computer has also developed from single-computer-based file processing or internal business processing based on simple connections to enterprise-level computer processing systems based on complex intranets, extranets and the global Internet. Worldwide information sharing and business processing.

[0003] The improvement of computer system connection and circulation capabilities has greatly improved its ability in system business processing. At the same time, security issues based on network connections have become increasingly prominent. Once the system is attacked, it will bring huge losses to the enterprise. loss.

[0004] In existing network equipment, common security features, such a...

Examples

Embodiment 1

[0021] figure 1 It is a schematic structural diagram of a message security processing system in Embodiment 1 of the present invention. The technical solution of this embodiment is applicable to the case of message security processing through a hardware security co-processing module and a network processing module. The message security processing The system includes a processor 1 , a hardware security co-processing module 2 and a network processing module 3 , and the processor 1 is integrated with a software security protocol and a control module 4 .

[0022] The processor 1 is connected to the hardware security co-processing module 2 and the network processing module 3 respectively through a control management bus 5; the hardware security co-processing module 2 and the network processing module 3 are connected to each other through a message processing bus 6 connected.

[0023] In this embodiment, the processor 1 is respectively connected to the hardware security co-processin...

Embodiment 2

[0039] figure 2 A schematic structural diagram of a message security processing system provided by Embodiment 2 of the present invention. This embodiment is further refined on the basis of the above embodiments, providing a processor 1, a hardware security co-processing module 2 and a network processing module 3 specific functions. Combine below figure 2 A message security processing system provided in Embodiment 2 of the present invention is described:

[0040] The message security processing system includes: a processor 1 , a hardware security co-processing module 2 and a network processing module 3 , and the processor 1 is integrated with a software security protocol and a control module 4 .

[0041] The processor 1 is connected to the hardware security co-processing module 2 and the network processing module 3 respectively through a control management bus 5; the hardware security co-processing module 2 and the network processing module 3 are connected to each other throu...

Embodiment 3

[0072] image 3 It is a flow chart of a message security processing method in Embodiment 3 of the present invention. The technical solution of this embodiment is applicable to the case of message security processing through a hardware security co-processing module and a network processing module. The execution of the document security processing system specifically includes the following steps:

[0073] Step 110 , when a secure session is established or a session state needs to be refreshed, the processor runs the software security protocol and the control module, and configures the hardware security co-processing module and the network processing module.

[0074] Wherein, configuring the hardware security co-processing module and the network processing module includes configuring the security session table and the module control table in the hardware security co-processing module, and configuring the switching and forwarding table and the security session diversion table in t...

technical field

[0001] The embodiments of the present invention relate to network communication technologies, and in particular to a message security processing system and method. Background technique

[0002] With the rapid development of computer technology, the business processed on the computer has also developed from single-computer-based file processing or internal business processing based on simple connections to enterprise-level computer processing systems based on complex intranets, extranets and the global Internet. Worldwide information sharing and business processing.

[0003] The improvement of computer system connection and circulation capabilities has greatly improved its ability in system business processing. At the same time, security issues based on network connections have become increasingly prominent. Once the system is attacked, it will bring huge losses to the enterprise. loss.

[0004] In existing network equipment, common security features, such a...

Examples

Embodiment 1

[0021] figure 1 It is a schematic structural diagram of a message security processing system in Embodiment 1 of the present invention. The technical solution of this embodiment is applicable to the case of message security processing through a hardware security co-processing module and a network processing module. The message security processing The system includes a processor 1 , a hardware security co-processing module 2 and a network processing module 3 , and the processor 1 is integrated with a software security protocol and a control module 4 .

[0022] The processor 1 is connected to the hardware security co-processing module 2 and the network processing module 3 respectively through a control management bus 5; the hardware security co-processing module 2 and the network processing module 3 are connected to each other through a message processing bus 6 connected.

[0023] In this embodiment, the processor 1 is respectively connected to the hardware security co-processin...

Embodiment 2

[0039] figure 2 A schematic structural diagram of a message security processing system provided by Embodiment 2 of the present invention. This embodiment is further refined on the basis of the above embodiments, providing a processor 1, a hardware security co-processing module 2 and a network processing module 3 specific functions. Combine below figure 2 A message security processing system provided in Embodiment 2 of the present invention is described:

[0040] The message security processing system includes: a processor 1 , a hardware security co-processing module 2 and a network processing module 3 , and the processor 1 is integrated with a software security protocol and a control module 4 .

[0041] The processor 1 is connected to the hardware security co-processing module 2 and the network processing module 3 respectively through a control management bus 5; the hardware security co-processing module 2 and the network processing module 3 are connected to each other throu...

Embodiment 3

[0072] image 3 It is a flow chart of a message security processing method in Embodiment 3 of the present invention. The technical solution of this embodiment is applicable to the case of message security processing through a hardware security co-processing module and a network processing module. The execution of the document security processing system specifically includes the following steps:

[0073] Step 110 , when a secure session is established or a session state needs to be refreshed, the processor runs the software security protocol and the control module, and configures the hardware security co-processing module and the network processing module.

[0074] Wherein, configuring the hardware security co-processing module and the network processing module includes configuring the security session table and the module control table in the hardware security co-processing module, and configuring the switching and forwarding table and the security session diversion table in t...

Images