Method for safety packaging network message

Abstract

The present invention discloses a network message security package method. It contains generating application layer message; package head generating one random numbers as initial sequence number, serial number added 1 in transmitting one message, using serial number and message length bytes as package head added to message top; load filling its finally bytes meaning filling length; ciphering message; message authentication code message authenticating code calculation; transmitting security packaged signaling message package IP /UDP or TCP head. The present invented method adopts application layer package mode therefore being not related to network address translation equipment NAT, enhancing security.

Description

technical field [0001] The invention relates to a message encapsulation method, in particular to a method for implementing secure encapsulation of network messages. Background technique [0002] In various business network architectures based on packet networks such as NGN and IP Multimedia Subsystem IMS, message security is a basic requirement, and there should be a means to provide source authentication, integrity, Security features such as confidentiality and anti-replay. These features are generally obtained by using various signature, hash, and encryption security algorithms, but the combination of these basic security algorithms can achieve the best security and meet specific application environments, which is not disclosed in the prior art. [0003] At present, there are generally two methods for secure encapsulation of network packets: network layer security technology IPsec and transport layer security technology TLS technology; but their applications have certain ...

AI Technical Summary

Problems solved by technology

[0003] At present, there are generally two methods for secure encapsulation of network packets: network layer security technology IPsec and transport layer security technology TLS technology; but their applications have certain limitations, especially in NGN and IMS and other packet-based In the service network of the network, the following will be described respectively, so that the defects of the prior art can be seen at a glance

[0012] However, the IPsec of the prior art has the following defects: its application has a serious problem of friendliness with NAT, and there are ma...

Images