VPN security gateway

Abstract

The invention provides a VPN security gateway, comprising an internal network communication unit, an external network communication unit, an encryption and decryption unit and a management unit, wherein the internal network communication unit is used for transmitting internal network data to the encryption and decryption unit and transmitting decrypted data that is transmitted from the encryption and decryption unit to an internal network; the external network communication unit is used for transmitting external network data to the encryption and decryption unit and transmitting encrypted data that is transmitted from the encryption and decryption unit to an external network; the encryption and decryption unit is used for correspondingly processing the corresponding data information transmitted from the internal network communication unit and the external network communication unit; and the management unit is used for uniformly managing the internal network communication unit, the external network communication unit and the encryption and decryption unit, and is used for monitoring the working states of the internal network communication unit, the external network communication unit and the encryption and decryption unit. According to the VPN security gateway provided by the invention, the isolation performance of the VPN security gateway can be improved.

Description

technical field [0001] The invention relates to the field of security gateways, in particular to a VPN security gateway. Background technique [0002] With the rapid development of modern network technology, network interconnection has become an irresistible trend, but this interconnection method is extremely vulnerable to various attacks, resulting in illegal access to internal networks and information leakage. How to ensure that the user's information is transmitted safely on the network, and that it will not be eavesdropped or destroyed by malicious people is an important topic and development direction that the security community is currently facing. [0003] VPN technology is a technology that expands the communication distance of the LAN by building an encrypted tunnel in the public network. This technology can realize the communication between the network-network (site-site) and the host-network (terminal-site), which greatly facilitates the sharing of information wi...

AI Technical Summary

Problems solved by technology

[0004] However, at present, there are still relatively large risks in applying VPN technology to the transmission of sensitive information: first, there is a risk of the host being controlled in the communication mode of forwarding data by a single host; The isolation of the area cannot prevent illegal data packets from entering the trusted network; the third is the inability to perform mutual authentication between terminals using VPN

In view of the existence of the above-mentioned problems, the isolation performance of the VPN security gateway is not ideal, which is the deficiency of the prior art

Images