Method and system for establishing safe connection between nodes

Abstract

The invention discloses a method for establishing safe connection between nodes, which comprises that: 1) a transmitting source node NSource transmits a key request packet to switching equipment SWFirst; 2) the switching equipment SWFirst transmits a temporary key announcement packet to switching equipment SWLast; 3) the switching equipment SWLast transmits the key announcement packet to a destination node NDestination; 4) the destination node NDestination transmits a key announcement response packet to the switching equipment SWLast; 5) the switching equipment SWLast transmits a temporary key announcement response packet to the switching equipment SWFirst; 6) the switching equipment SWFirst transmits a key response packet to the transmitting source node NSource; and 7) the transmitting source node NSource receives the key response packet. The establishing and updating process is flexible, and shared static keys are not needed to be deployed between every two nodes in a total network by an administrator.

Description

technical field [0001] The invention relates to the field of wired local area network security application in information security technology, in particular to a method and system for establishing a secure connection between nodes. Background technique [0002] The wired LAN is generally a broadcast network, and the data sent by one node can be received by other nodes. All nodes on the network share the channel, which brings great security risks to the network. As long as the attacker accesses the network to monitor, he can capture all the data packets on the network. The local area network LAN defined by the existing national standard GB / T 15629.3 (corresponding to IEEE 802.3 or ISO / IEC 8802-3) does not provide data security methods, which makes it easy for attackers to steal key information. [0003] In the wired LAN, the standard organization IEEE realizes the security of the link layer by enhancing the security of IEEE 802.3. IEEE 802.1AE provides a data encryption pr...

AI Technical Summary

Problems solved by technology

However, this security measure requires the switching device to decrypt, encrypt, and then forward each data packet that needs to be forwarded, which undoubtedly brings a huge computational burden to the switching device in the LAN, and it is easy to cause attackers to attack the switching device. attack; and the delay of the data packet from the sending node to the destination node will also increase, reducing the network transmission efficiency

[0004] The topology of the wired LAN is relatively complex, and the number of nodes involved is relatively large, so the data communication in the network is relatively complicated.

If a static key pair is assigned between LAN nodes to establish a secure connection between nodes, the distribution and update process is extremely complicated

Images