Bidirectional authentication network management protocol method and system

Abstract

The invention provides a bidirectional authentication network management protocol method and system. The method comprises the following steps: S1, equipment access bidirectional authentication; S2, bidirectional authentication of control operation: a device network manager issues configuration data to a managed device, a port is started / closed, and a message of a terminal is encrypted and transmitted by adopting the key negotiated in the step S1; S3, bidirectional authentication of test operation: the device network manager sends a test command to the managed device or a message of a test result returned by the managed device to a network management system, and the key negotiated in the step S1 is adopted for encrypted transmission; S4, bidirectional authentication of query operation: the device network manager obtains messages of state, configuration and performance data from the managed device, and performs encryption transmission by adopting the secret key negotiated in the step S1; and S5, bidirectional authentication of main report operation: the managed device actively reports a message of an event or a message to the device webmaster, and encrypted transmission is carried out by adopting the key negotiated in the step S1.

Description

technical field [0001] The invention belongs to the field of communication network protocols, in particular to a network management protocol method and system for two-way authentication. Background technique [0002] The most important part of the network management system is the network management protocol, which defines the communication method between the network manager and the network agent, and is the basis for maintaining the normal operation of the network. In recent years, with the rapid development of computer technology and network, network management has been paid more and more attention by people. Generally speaking, network management includes the use, synthesis and coordination of hardware, software and manpower, through which network resources are monitored, tested, configured, analyzed, evaluated and controlled, which is conducive to meeting some network needs at a reasonable price , such as real-time performance, quality of service, etc. Its purpose is to...

AI Technical Summary

Problems solved by technology

While SNMP has the advantages of being simple, easy to implement, and rich in operating experience, it also has certain defects, mainly in that the one-way authentication of SNMP cannot provide high security guarantees, and cannot prevent eavesdropping and man-in-the-middle attacks.

Images