A VPN multi-party connection method based on ipsec

Abstract

In the present invention, in the IPSec VPN that needs multi-party sessions, by dividing all nodes that need to be connected into key nodes and general nodes, and setting their affiliation, when initiating a multi-party session, the key nodes are forwarded, so that the data Passed between nodes participating in a multiparty session in a secure manner. The invention does not need to use any additional protocol, does not need to repackage and pack the data packets to be sent, and realizes multi-party conversation. Through the establishment of key nodes, it is only necessary to ensure the forwarding performance of key nodes, that is, to achieve multi-party secure connections to other general nodes, so that application environments such as enterprises can obtain efficient and economical operating modes.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a VPN connection method. Background technique [0002] The development of information technology and the widespread use of the Internet, while bringing great convenience to people's life and work, have also made people very worried about the security of communication data and the operation of computer systems on the Internet based on the open protocol platform TCP / IP. safety. At present, a variety of secure communication technologies have been applied to data transmission in the Internet. Among them, the Internet Protocol Security (IPSec) communication protocol implemented at the network layer is completely transparent to the application layer, so it is very suitable for the existing TCP / IP network. By adding IPSec security modules without modifying the settings of application systems and software, a common secure network communication environment is constructed for vario...

AI Technical Summary

Problems solved by technology

[0003] With the development of the network, especially the network economy, the enterprises are expanding day by day, the distribution of customers is becoming wider and wider, and the number of partners is increasing day by day. This situation promotes the increasing benefits of enterprises, and on the other hand, it also highlights the functional defects of traditional enterprise networks. : The private line connection method of the traditional enterprise network based on a fixed physical location has been difficult to meet the needs of modern enterprises. Therefore, enterprises have put forward higher requirements for their own network construction, mainly in the flexibility, security, economy, and scalability of the network. aspect

[0006] Obviously, in the above processing scheme, the multicast data stream needs to be encapsulated and decapsulated twice by GER and IPSec before it can be finally processed. This has a great impact on services that are sensitive to transmission delays, such as voice services, and will also affect video services. cause a large delay

Moreover, the solution requires the central node and branch nodes to support both IPSec and GRE VPN technologies, which increases the operation and maintenance costs of the solution

Images