Network security routing method and system

Abstract

The invention discloses a network security routing method and system, and the method comprises the steps: carrying out the security value initialization processing of each node in each node in a functional domain, and determining the security value of each intra-domain interface corresponding to each node; according to a conventional routing rule, traversing possible paths to the maximum extent in a preset period; carrying out convergence processing on paths participating in security routing on each node according to a preset in-band signaling rule based on the security value to obtain a path security value; and based on the path security value, performing secure routing forwarding on the screened key service traffic according to a routing forwarding strategy. According to the scheme, the path participating in the security routing can be converged to the optimal security degree according to the in-band signaling rule, so that global security routing forwarding optimization is carried out on the screened key service flow, and the scheme can be integrated into most existing networks of users, and is wide in applicability.

Description

technical field [0001] The present invention generally relates to the technical field of network security, and specifically relates to a network security routing method and system. Background technique [0002] With the popularization of the Internet and the continuous development of high-bandwidth services such as multimedia, IP services have shown explosive growth, and the bandwidth resources of IP networks have become more and more tense. In order to make better use of network resources and provide better services It is very important to ensure the security of data transmission in IP networks for many key applications. [0003] At present, the relevant technologies ensure the security of the data transmission process by encrypting the transmitted data packets, verifying the integrity of the data, and verifying the identity of the data signature. When the routing algorithm performs network security routing, the security risk can be added to the routing algorithm. [0004...

AI Technical Summary

Problems solved by technology

[0004] However, authentication of transmitted data packets requires additional end-system cooperation, certain implementation costs and protocol costs, and not all data in the network is applicable, and hop-by-hop paradigm routing cannot select the optimal security path from a macro perspective , the constrained routing used in traffic engineering routing requires the use of complex core network forwarding technology, which not only has extremely high requirements for user technical capabilities and maintenance and operation, but also requires high equipment investment costs, and requires complete interruption of services on the existing network refactor

Images