Method for realizing safety coalition synchronization

Abstract

The invention discloses a method to realize synchronization for security league. Wherein, the primary deice sends opposite information of self-built security league to standby device; the latter builds itself security league according to received information. This invention backups the information of security league in primary and standby devices to avoid negotiate again and build new security league, and can update information of security league after switching in time without effect to security league.

Description

A Method for Realizing Security Association Synchronization technical field The invention relates to Internet security technology, in particular to a method for realizing security alliance synchronization. Background technique To meet the security needs of the Internet, the Internet Engineering Task Force (IETF) promulgated the security standard IPSec at the IP layer. The IPSec protocol family performs high-intensity security processing on data packets at the IP layer, and can provide services including access control, connectionless integrity control, data source authentication, anti-replay protection, and confidentiality. And the protection of the upper layer protocol. IPSec implements data encryption and verification at the network layer and provides an end-to-end network security solution. Since encrypted data packets are still general IP data packets, this structure can be well applied on the Internet. The components of IPSec include security protocol Authenticatio...

AI Technical Summary

Problems solved by technology

However, at present, these communication devices that provide IPSec functions cannot provide the backup function of IPSec security services. Therefore, when the above-mentioned devices that provide IPSec functions fail, and the data communication is switched to the backup device for processing, the communication between devices It cannot provide continuous IPSec protection, that is, after switching, communication devices need to renegotiate to establish a security association

During the negotiation, all upper-layer data packets will be discarded, which will cause interruption of upper-layer services to a certain extent

Images