A message security processing system and method

Abstract

The embodiment of the invention discloses a message security processing system and method. Among them, the message security processing system includes: a processor, a hardware security co-processing module and a network processing module, the processor is integrated with a software security protocol and a control module; the network processing module is connected to at least one network interface, and receives The message sent to the hardware security co-processing module for security processing; the message fed back after the hardware security co-processing module is processed is sent out through the network interface; the hardware security co-processing module is used to send the received network processing module After the sent message is processed safely, it is fed back to the network processing module. The technical solution of the embodiment of the present invention realizes the effect that message security processing does not need to occupy the running memory of the processor through the interaction between the hardware security co-processing module and the network processing module, so that the processing performance of the message security feature is not affected by the performance of the processor. limit.

Description

technical field [0001] The embodiments of the present invention relate to network communication technologies, and in particular to a message security processing system and method. Background technique [0002] With the rapid development of computer technology, the business processed on the computer has also developed from single-computer-based file processing or internal business processing based on simple connections to enterprise-level computer processing systems based on complex intranets, extranets and the global Internet. Worldwide information sharing and business processing. [0003] The improvement of computer system connection and circulation capabilities has greatly improved its ability in system business processing. At the same time, security issues based on network connections have become increasingly prominent. Once the system is attacked, it will bring huge losses to the enterprise. loss. [0004] In existing network equipment, common security features, such a...

AI Technical Summary

Problems solved by technology

[0003] The improvement of computer system connection and circulation capabilities has greatly improved its ability in system business processing. At the same time, security issues based on network connections have become increasingly prominent. Once the system is attacked, it will bring huge losses to the enterprise. loss

[0004] In existing network equipment, common security features, such as IPSEC, SSL, TLS, DTLS, MACSec, and SRTP, are often implemented in the following ways: First, CPU pure software mode, mainly through the CPU to run security feature software, Realize message security processing; second, the CPU integrated with special security feature-related instruction sets runs security feature software to realize message security processing; third, CPU plus security co-processing module, mainly through the CPU will need to perform security processing The message fragments are sent to the security co-processing module to achieve message security processing, but in the above implementation methods, a part of CPU operating resources and interface bandwidth are required, and the processing performance of security features is limited by CPU performance.

Images