System and method for establishing session key between nodes

Abstract

The invention provides a system and a method for establishing a session key between nodes. In the method, a key can be flexibly established and updated between LAN (local area network) legal nodes so as to establish secure connection therebetween. The system comprises a terminal device and a connection device, wherein the terminal device comprises an initiator terminal device and a receiver terminal device; and the connection device comprises a core connection device, an initiator connection device on a link between the initiator terminal device and the core connection device and a receiver connection device on a link between the receiver terminal device and the core connection device. The establishing process is flexible, the establishment of the session key between the nodes can be realized without configuration participation of a user, and the confidentiality of communication between subsequent nodes is guaranteed.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a system and method for establishing session keys between nodes. Background technique [0002] The wired LAN is generally a broadcast network, and the data sent by one node can be received by other nodes. All nodes on the network share the channel, which brings great security risks to the network. As long as the attacker accesses the network to monitor, he can capture all the data packets on the network. [0003] The local area network LAN defined by the existing national standard GB / T 15629.3 (corresponding to IEEE 802.3 or ISO / IEC 8802-3) does not provide data security methods, which makes it easy for attackers to steal key information. In the field of international research, the IEEE 802.1AE standard developed by IEEE provides a data encryption protocol for protecting Ethernet, and adopts hop-by-hop encryption security measures to realize the safe transmission ...

AI Technical Summary

Problems solved by technology

This security measure brings a huge computational burden to the switching devices in the LAN, which is easy to cause attackers to attack the switching devices; and the delay of data packets from the sending node to the destination node will also increase, reducing network transmission. efficiency

[0004] The topology of wired LAN is relatively complex, and the number of nodes involved (here, terminals and switching devices are collectively referred to as nodes) is also relatively large, so the data communication in the network is relatively complicated.

If a static key pair is allocated between LAN nodes to establish an inter-node session key, the allocation and update process is extremely complicated

Therefore, the static key pair method is not suitable for establishing session keys between nodes

Images