Novel security isolation IPsec VPN processing architecture

Abstract

The embodiment of the invention provides a novel security isolation IPsec VPN processing architecture which comprises a main control panel and a plurality of physical isolation partitions arranged on the main control panel, and the first physical isolation partition is an intranet processing area; the second physical isolation subarea is a password processing area; and the third physical isolation subarea is an external network processing area. According to the novel security isolation IPsec VPN processing architecture, secure and reliable transmission of data among different network nodes is realized, and the data use reliability and the data security of the novel security isolation IPsec VPN processing architecture are guaranteed to the greatest extent.

Description

technical field [0001] The invention belongs to the technical field of communication, and in particular relates to a novel security isolation IPsec VPN processing framework. Background technique [0002] IPSe VPN backup is a general-purpose device based on the IPsec protocol to protect IP network transmission data. It provides security services such as data integrity protection, data source identification, payload confidentiality, and anti-replay attack. It is mainly located at the network border and serves as a border protective function. [0003] My researchers found that the hardware architecture of existing IPSec VPN devices mostly uses CPU processors or uses CPU processors with customized encryption boards to realize VPN functions. However, there is currently no mature solution for the security isolation processing of plaintext and ciphertext data on the internal and external networks. Since the plaintext and ciphertext interactions between the internal network and the...

AI Technical Summary

Problems solved by technology

However, there is currently no mature solution for the security isolation processing of plaintext and ciphertext data on the internal and external networks. Since the plaintext and ciphertext interactions between the internal network and the external network are very frequent, if a higher security isolation cannot be implemented, it will cause serious safety problems

Moreover, the researchers also found that most traditional technologies use CPU processors to directly process interface data and IP protocol analysis. At the same time, because CPU processors often rely on operating systems to run, there is a greater risk and threat of network attacks, which can easily cause Problems such as host program crash or denial of service lead to prominent security problems of IPSec VPN equipment

Images