VPN (virtual private network) connection method based on IPSec (internet protocol security)

Abstract

Disclosed is a VPN (virtual private network) connection method based on IPSec (internet protocol security). In the VPN connection method, IKE (internet key exchange) negotiation is performed by reading a digital certificate stored in a USBKey during VPN connection based on the IPSec, so that the problem of low safety performance of common key negotiation modes is avoided. For users without the USBKey but having temporary access requests, the digital certificate is acquired by sending requests to other users with the USBKey, so that connection establishment in particular cases is guaranteed, and safety and usability are also taken into consideration.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a VPN connection method. Background technique [0002] The development of information technology and the widespread use of the Internet, while bringing great convenience to people's life and work, have also made people very worried about the security of communication data and the operation of computer systems on the Internet based on the open protocol platform TCP / IP. safety. At present, a variety of secure communication technologies have been applied to data transmission in the Internet. Among them, the Internet Protocol Security (IPSec) communication protocol implemented at the network layer is completely transparent to the application layer, so it is very suitable for the existing TCP / IP network. By adding IPSec security modules without modifying the settings of application systems and software, a common secure network communication environment is constructed for vario...

AI Technical Summary

Problems solved by technology

[0003] With the development of the network, especially the network economy, the enterprises are expanding day by day, the distribution of customers is becoming wider and wider, and the number of partners is increasing day by day. This situation promotes the increasing benefits of enterprises, and on the other hand, it also highlights the functional defects of traditional enterprise networks. : The private line connection method of the traditional enterprise network based on a fixed physical location has been difficult to meet the needs of modern enterprises. Therefore, enterprises have put forward higher requirements for their own network construction, mainly in the flexibility, security, economy, and scalability of the network. aspect

[0006] It can be seen that in the prior art, when performing IKE negotiation, the common key negotiation method is used, which is easy to be cracked and the security is not high.

Images