Centralized safety connection establishing system and method

Abstract

The invention relates to centralized safety connection establishing system and method. The system comprises a terminal device and a connecting device, wherein the terminal device comprises an initiator terminal device and a receiver terminal device, the connecting device comprises a core connecting device, an initiator connecting device and a receiver connecting device, the initiator connecting device is arranged on a link between the initiator terminal device and the core connecting device, and the receiver connecting device is arranged on a link between the receiver terminal device and the core connecting device. The invention ensures that legal nodes of a local network can be flexibly established and keys among the legal nodes are updated for establishing safety connection among the legal nodes. The invention can be used for flexibly establishing the safety connection among the nodes without distributing static key pairs among the nodes of the local network, can ensure that the data among the nodes can be transmitted secretly through the safety connection among the nodes so that an attacker can not obtain real information even if information stolen by accessing into the network is ciphertext information.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a system and method for establishing a centralized secure connection. Background technique [0002] The wired LAN is generally a broadcast network, and the data sent by one node can be received by other nodes. All nodes on the network share the channel, which brings great security risks to the network. As long as the attacker accesses the network to monitor, he can capture all the data packets on the network. [0003] The local area network LAN defined by the existing national standard GB / T 15629.3 (corresponding to IEEE 802.3 or ISO / IEC 8802-3) does not provide data security methods, which makes it easy for attackers to steal key information. In the field of international research, the IEEE 802.1AE standard developed by IEEE provides a data encryption protocol for protecting Ethernet, and adopts hop-by-hop encryption security measures to realize the safe transmis...

AI Technical Summary

Problems solved by technology

This security measure brings a huge computational burden to the switching devices in the LAN, which is easy to cause attackers to attack the switching devices; and the delay of data packets from the sending node to the destination node will also increase, reducing network transmission. efficiency

[0004] The topology of wired LAN is relatively complex, and the number of nodes involved (here, terminals and switching devices are collectively referred to as nodes) is also relatively large, so the data communication in the network is relatively complicated.

If a static key pair is allocated between LAN nodes to establish an end-to-end secure connection, the allocation and update process is extremely complicated

Therefore, the static key pair method is not suitable for establishing an end-to-end secure LAN connection

Images