Method and interface device for access of secure socket layer protocol entity to discontinuous internal storage

Abstract

Disclosed are a method and interface device for access of an SSL protocol entity to discontinuous internal storage. The interface device comprises an abstract IO interface and a discontinuous internal storage IO interface. The corresponding method comprises the steps that when the SSL protocol entity creates a connection, the discontinuous internal storage IO interface is called by the abstract IO interface to create a writing data chain and a reading data chain, and the connection is bound with the writing data chain and the reading data chain; when the SSL protocol entity sends to-be-sent data of the connection in an SSL processing region to a lower-layer protocol entity, the discontinuous internal storage IO interface is called by the abstract IO interface, the data to be sent are borne in a data unit, and the writing data chain is inserted; when the data, sent by the lower-layer protocol entity, of the connection, are received by the SSL protocol entity, the discontinuous internal storage IO interface is called by the abstract IO interface, and the data borne by the data unit in the reading data chain are read out and written in the SSL processing region. The access of the SSL protocol entity to the discontinuous internal storage can be achieved.

Description

technical field [0001] The present invention relates to Internet communication, more specifically, to a method for accessing discontinuous memory by SSL (Secure Sockets Layer: Secure Sockets Layer) in encrypted transmission of Internet data and a corresponding interface device. Background technique [0002] At present, the 7-layer encryption protocol such as SSL is based on the TCP protocol, and most of the 7-layer encryption and decryption applications must rely on the socket interface (SOCKET) of the TCP layer as its data entry and exit. That is, the association between the SSL protocol stack and the underlying protocol stack is realized through SOCKET. The SSL application needs to bind a SOCKET so that the data received by the TCP layer can be sequentially transmitted to the SSL protocol entity (referring to the entity that executes the SSL protocol function), and at the same time The output of the SSL protocol entity also depends on SOCKET to finally send the data out. ...

AI Technical Summary

Problems solved by technology

For the traditional TCP protocol stack, its functions are relatively complete, and the interface to the upper layer is also very rich. However, the special TCP protocol stack used by some network devices is optimized and tailored on the basis of the traditional protocol stack, from the function and external interface It is not as rich as the traditional protocol stack

In addition, a major feature of the dedicated TCP protocol stack is that the processing unit and external output are generally scattered data packets, and lack SOCKET

Images