Unlock instant, AI-driven research and patent intelligence for your innovation.

Security socket protocol unloading method and device, storage medium and electronic equipment

A secure socket and protocol technology, applied in the field of communication, can solve problems that affect network performance, affect firewall encryption and decryption performance, and CPU is busy.

Active Publication Date: 2021-01-12
NEW H3C SECURITY TECH CO LTD
View PDF9 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

In the existing SSL proxy, a tunnel with its own cipher suite will be established between each client and the firewall and between the firewall and the server. There are a large number of channels under too many cipher suites, which seriously affects the encryption and decryption of the firewall. performance, resulting in low throughput performance of the entire device and busy CPU, which further affects the performance of the overall network

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Security socket protocol unloading method and device, storage medium and electronic equipment
  • Security socket protocol unloading method and device, storage medium and electronic equipment
  • Security socket protocol unloading method and device, storage medium and electronic equipment

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0055] The following description and drawings illustrate specific embodiments of the invention sufficiently to enable those skilled in the art to practice them.

[0056] It should be clear that the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

[0057] When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary examples do not represent all implementations consistent with the present invention. Rather, they are merely examples of apparatuses and methods consistent with aspects of the invention as recited in the appended claims.

[0058] In the descriptio...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a security socket protocol unloading method and device, a storage medium and electronic equipment, wherein the method comprises the steps: enabling a firewall to receive a message transmitted by a client, enabling the message to support at least one encryption suite, transmitting the message to a server, receiving the message returned by the server, and enabling the returned message to support a first encryption suite; if the first encryption suite belongs to one of the at least one encryption suite, taking the first encryption suite as an encryption suite among the client, the firewall and the server; and if the first encryption suite does not belong to one of the at least one encryption suite, taking the first encryption suite as the encryption suite between the firewall and the server, and taking one of the at least one encryption suite as the encryption suite between the firewall and the client. Therefore, by adopting the embodiment of the invention, the same encryption suite is used when different clients access the destination server address, and the number of the encryption suites on the firewall is reduced, so that the throughput performance of the firewall is improved, and the CPU occupancy rate is reduced.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a secure socket protocol unloading method, device, storage medium and electronic equipment. Background technique [0002] The secure socket protocol SSL (Secure Sockets Layer, Secure Sockets Protocol) is between the application layer and the transport layer. The application layer data is no longer directly transmitted to the transport layer, but to the SSL layer. The data received by the layer is encrypted, which ensures the security of the communication between the client and the server and prevents it from being monitored and tampered with. However, the SSL protocol does not prevent the application-layer content attacks between the client and the server, such as web attacks, and because the content is encrypted, the security device between the client and the server cannot normally detect the content and identify the attack, so The SSL offloading function came into being...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/02H04L63/18H04L63/168
Inventor 李永波
Owner NEW H3C SECURITY TECH CO LTD