Message security processing system and method

Abstract

The embodiment of the invention discloses a message security processing system and a method. The message security processing system comprises a processor, a hardware security co-processing module anda network processing module, and the processor is integrated with a software security protocol and a control module; the network processing module is connected with at least one network interface, andsends the message received from the network interface to the hardware security co-processing module for security processing; a message fed back after processing of the hardware security co-processingmodule is completed is sent out through a network interface; and the hardware security co-processing module is used for performing security processing on the received message sent by the network processing module and feeding back the message to the network processing module. According to the system of the embodiment of the invention, through interaction between the hardware security co-processingmodule and the network processing module, the effect that the message security processing does not need to occupy the running memory of the processor is realized, so that the processing performance of the message security characteristic is not limited by the performance of the processor.

Description

technical field [0001] The embodiments of the present invention relate to network communication technologies, and in particular to a message security processing system and method. Background technique [0002] With the rapid development of computer technology, the business processed on the computer has also developed from single-computer-based file processing or internal business processing based on simple connections to enterprise-level computer processing systems based on complex intranets, extranets and the global Internet. Worldwide information sharing and business processing. [0003] The improvement of computer system connection and circulation capabilities has greatly improved its ability in system business processing. At the same time, security issues based on network connections have become increasingly prominent. Once the system is attacked, it will bring huge losses to the enterprise. loss. [0004] In existing network equipment, common security features, such a...

AI Technical Summary

Problems solved by technology

[0003] The improvement of computer system connection and circulation capabilities has greatly improved its ability in system business processing. At the same time, security issues based on network connections have become increasingly prominent. Once the system is attacked, it will bring huge losses to the enterprise. loss

[0004] In existing network equipment, common security features, such as IPSEC, SSL, TLS, DTLS, MACSec, and SRTP, are often implemented in the following ways: First, CPU pure software mode, mainly through the CPU to run security feature software, Realize message security processing; second, the CPU integrated with special security feature-related instruction sets runs security feature software to realize message security processing; third, CPU plus security co-processing module, mainly through the CPU will need to perform security processing The message fragments are sent to the security co-processing module to achieve message security processing, but in the above implementation methods, a part of CPU operating resources and interface bandwidth are required, and the processing performance of security features is limited by CPU performance.

Images