Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

IPSec VPN system based on many-core processor and encryption and decryption processing method

A technology of many-core processors and encryption systems, applied in the field of network security, can solve the problem of IPSecVPN system lacking the real-time processing capability of 10 Gigabit high-speed network traffic, and achieve the effect of satisfying the real-time online processing capability

Inactive Publication Date: 2017-01-18
XI'AN POLYTECHNIC UNIVERSITY
View PDF3 Cites 24 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide a kind of IPSec VPN system based on many-core processors, solve the problem that the existing IPSec VPN system lacks the real-time processing ability to 10 Gigabit high-speed network traffic

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • IPSec VPN system based on many-core processor and encryption and decryption processing method
  • IPSec VPN system based on many-core processor and encryption and decryption processing method
  • IPSec VPN system based on many-core processor and encryption and decryption processing method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0026] The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments, but the present invention is not limited to these embodiments.

[0027] Below take the TCP message of source IP address 10.0.0.1 source port 1-1023, destination IP address 40.55.28.112, destination port 1-1024, and packet length 128B as an example, to the IPSec VPN system based on many-core network processor of the present invention For a detailed introduction, the entire processing flow is as follows figure 1 shown.

[0028] The IPSec VPN system based on many-core processors of the present invention includes an encryption system and a decryption system, and the hardware of the system is composed of a main processor chip and an encryption and decryption coprocessor chip.

[0029] The main processing chip is a many-core network processor with a total of 36 cores, which are divided to process control plane and data plane services. Among...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses an IPSec VPN system based on a many-core processor. The system comprises an encryption system and a decryption system. A message receiving module, a speed limit module, an inlet firewall module, an IPSec strategy retrieval module, an IPSec plus packaging module, an encryption module, a decryption module, an outlet firewall, a decapsulation and Ethernet head adding module, a repackaging module, an IP data packet forwarding module, a message sending module and the like are included. The invention also discloses an encryption method and a decryption method which adopt an IPSec VPN encryption and decryption system. By using the IPSec VPN system, safety of data transmission between connected users can be guaranteed and a real-time on-line processing capability of a high speed network flow can be satisfied. An identification system of the invention can be applied to various kinds of many-core processors and a purpose of safely transmitting the high speed network flow can be realized.

Description

technical field [0001] The present invention belongs to the technical field of network security, and in particular relates to an IPSec VPN system (network security system for high-speed network data traffic transmission) based on many-core processors, and also relates to a method for encrypting and decrypting high-speed network traffic using the above-mentioned IPSec VPN system . Background technique [0002] With the wide application of network technology, the security problems exposed by the TCP / IP network protocol itself directly threaten the security of IP data packets transmitted on the open Internet, and become an important reason for restricting the development of future network applications. Network security issues mainly include two aspects: on the one hand, the TCP / IP network protocol itself does not provide reliable authentication and encryption technology, and cannot guarantee the integrity of data during transmission; on the other hand, the TCP / IP network protoc...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L29/06
CPCH04L63/0272H04L63/0485
Inventor 陈亮孟进王建
Owner XI'AN POLYTECHNIC UNIVERSITY
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com