IKE Negotiation Distribution Across Service Cards

The patent divides the IKE negotiation processing function from the main board and segments it into dedicated service cards. Each service card independently handles IKE negotiation for specific data packets, allowing parallel processing of multiple concurrent negotiations. This segmentation resolves the contradiction by distributing the processing load across multiple independent units, thereby increasing negotiation speed without overwhelming a single processing entity.

The patent applies preliminary action by pre-configuring service cards with IKE negotiation capabilities before runtime. When a data packet arrives, the system pre-determines which service card should handle the negotiation based on the packet's characteristics, and the selected service card is already prepared to process it. This eliminates the need for complex real-time coordination between multiple service cards, as each card operates independently with pre-assigned responsibilities, thereby maintaining high efficiency while controlling system complexity.

The patent transitions from a single-dimension centralized processing model (main board handling all negotiations) to a multi-dimensional distributed processing model where multiple service cards operate in parallel. Each service card represents an additional processing dimension, enabling the system to handle multiple concurrent IKE negotiations simultaneously. This dimensional expansion increases overall processing capability while the mapping relationship between data packets and service cards provides a straightforward resource allocation mechanism that prevents excessive complexity.