System and method for realizing VPN protocol at application layer

Abstract

The invention discloses a system and method for implementing VPN protocol at application layer, relating to a network communication packing method, and especially relating to a method for implementing IPSec protocol packing at system application layer; and the method can prevent IPsec message being blocked by other programs at system kernel layer, thus assuring the IPSec message smoothly passes through the system and implementing safety communication. And the system comprises VPN card module, network protocol stack module, IKE module and IPSec module, connected in series in order, where the IKE module and the IPSec module call each other, so do the IKE module and the network protocol stack module, and so do the network protocol stack module and the VPN card module. And the method encrypt and decrypt VPN message at the system application layer, thus improving the adaptability of VPN client-end system to network environments, applied to making VPN system development in Windows and Unix operating systems.

Description

technical field [0001] The present invention relates to a method for network communication encapsulation, in particular to a method for implementing IPSec protocol encapsulation at the system application layer; the method can prevent IPSec messages from being blocked by other programs at the system core layer, thereby ensuring that IPSec messages pass through the system smoothly , to achieve secure communication. Background technique [0002] With the development of the Internet, network security issues are becoming more and more prominent, especially how to use the Internet for private communication has become a hot issue. Currently, VPN technology is mainly used to solve this problem. The current mainstream VPN products will follow the standard IPSec to implement, because IPSec is a global security standard, only when IPSec strictly follows various protocol specifications can the intercommunication between VPN products of different manufacturers be realized. The IPSec pr...

AI Technical Summary

Problems solved by technology

In this case, if the user host has already installed these conflicting software and then installs the VPN client software, it is easy to cause multiple programs to compete for kernel space and modify each other's network protocol stacks, resulting in conflicts, while the core layer Conflicts often cause system crashes or even crashes

[0004] What kind of terminal device the VPN client will be installed on is often not known in advance, and the specific users who use the VPN client, according to their actual work needs and personal preferences, do not know what other security tools they have installed. Therefore, if the IPSec protocol is implemented at the core layer of the system according to the conventional thinking, it will inevitably conflict with other programs, which will have an extremely adverse impact on the application environment adaptability of the VPN client.

Images