A security plane isolation method and system based on channel division

Abstract

The invention proposes a channel division-based security plane isolation method and system. The method includes: step S1, channel establishment and parameter negotiation; step S2, after the channel is established, perform plane service security transmission; step S3, after the channel is established, update the bandwidth of the channel; step S4, After the channel is established, the channel is closed based on network management device configuration deletion or device failure; Step S5, after the channel is established, the processing process when the initiator sends a message and the processing process when the receiver sends a message .

Description

technical field [0001] The invention belongs to the field of communication transmission, in particular to a channel division-based security plane isolation method and system. Background technique [0002] In recent years, with the development of network technology, the scope of network attacks has become wider and faster. In order to prevent network attacks from spreading in the network and minimize the impact of attacks, it is necessary to divide the security area of ​​​​the network and isolation. The advantages of plane isolation mainly include two parts. One is to improve the security of the system through plane isolation and avoid the mutual influence between services on different planes. The other is to provide different planes with different service level. [0003] At present, plane isolation can isolate different service flows through different physical networks, virtualization technologies, VLANs, and routing mechanisms, and use additional security mechanisms to st...

AI Technical Summary

Problems solved by technology

When designing network equipment, there is a lack of integrated design of security mechanisms and plane isolation

Images