Internet Protocol security internet (IPsec) message format processing method, device and equipment, and storage medium

Abstract

The embodiment of the invention discloses an Internet Protocol security internet (IPsec) message format processing method, device and equipment, and a storage medium, wherein the method comprises thesteps of receiving IP message data sent by a media access control (MAC) layer, and reading a destination IP address from the IP message data; obtaining a new source IP address and a new destination IPaddress by matching from a security policy database according to the destination IP address; if the new source IP address and the new destination IP address are not all zeros, querying a security association database according to the new destination IP address to obtain an encryption key; according to the encryption key, performing encryption processing on the IP message data based on an encrypted data format to obtain encrypted message data; generating a new IP header for the IP message data, and adding authentication data processed through a preset authentication data format to the end of the IP message data as new IP message data; and packaging and sending the encrypted message data and the new IP message data. According to the method, the device, the equipment and the storage medium in the application, the IP message data format is subjected to centralized and unified processing so as to adapt to various TCP (UDP) / IP network environments, thereby improving code standardization, and improving IPsec performance.

Description

technical field [0001] Embodiments of the present invention relate to the technical field of IPsec, and in particular, relate to a method, device, equipment, and computer-readable storage medium for processing an IPsec message format. Background technique [0002] The working principle of IPsec (Internet Protocol Security Internet, protocol security) is to encrypt IP-level communication data packets for users. Even if the network data packets are stolen during network transmission, the information cannot be viewed, thus effectively ensuring data security. Security at the transport layer. [0003] However, in the actual application of IPSec technology, in the process of encryption and verification, the bit width of the message required by the encryption and verification algorithm is generally different from that of the TCP / IP network, mac layer, IP layer, and original ip message. , IP packets are packaged into ESP format packets, which need to go through multiple packet form...

AI Technical Summary

Problems solved by technology

[0003] However, in the actual application of IPSec technology, in the process of encryption and verification, the bit width of the message required by the encryption and verification algorithm is generally different from that of the TCP / IP network, mac layer, IP layer, and original ip message. , the IP packet is packaged into an ESP format packet, which requires multiple packet format transformations

Images