An Efficient and Universal Security Architecture of Implementing IPSec in Broadband Router

With the demand of providing data security and integrity, IPSec is implemented in hardware of router to accelerate processing speed. After analyzing advantages and disadvantages of two traditional security architectures, look-aside architecture and flowthrough architecture, we propose parallel security processing architecture to achieve better time efficiency. This parallel security architecture adopts mechanism of processing IP packets and IPSec packets simultaneously, which optimizes the processing flow and improves the processing efficiency. The design of parallel security architecture is based on universal architecture of broadband, thus requires minimal change of hardware architecture when implemented in broadband router. Testing results based on SRI 880s routers demonstrate that the proposed parallel security architecture is efficient and satisfies the security need of broadband networks.