| Currently, the Internet has been developing greatly. Computer network not only has become indispensable part of people’s work and life, but has a significant impact on the management and operation of the enterprise, and the enterprise’s information level has become one of the criteria as a measure of whether a company is excellent. Meanwhile, the rapid development of computer network also brings two problems:firstly, IPv4address has been exhausted, in order to solve the problem of shortage of IP addresses, and the deployment of next-generation networks IPv6have already started; secondly, network security issues are various, such as persons and business’ information leak, especially corporate secrets leaked on the computer network will cause a huge loss to enterprises.This paper focuses on the scene that the enterprise’s nodes communicate each other in the IPv6network environment. In order to transport information securely on the Internet, the corporation requires using IPsec protocol and digital certificates to encrypt the transmission information; Meanwhile, in order to control the spread of harmful information which leaks corporate trade secrets and harms the interests of individual employees, the corporation needs to filter the harmful information.The paper focuses on IPsec protocol. When the parties have the key negotiation by the IKE protocol and authentication by digital signatures, combining with the management of the enterprise for a digital certificate, the method based on middleman key negotiation is presented. When the two parties have a key negotiation, the gateway establishes the keys respectively and forwards the related packets, so gateway becomes the communication bridge. On this basis, the harmful information filtering system is implemented, which can detect IPsec connections containing harmful information in the IPv6network and take appropriate measures. In addition, given that the mass encryption and decryption operations in the IPsec communications have a greater influence on the systems’ performance, the loading balance is introduced into the filtering system. Aimed at the IPsec protocol’s specificity, the complexity and performance lost brought to the system, an effective load scheduling strategy is proposed, which makes the data handled parallelly.At the last, the related experiments verify the effectiveness of the system and prove that the enterprise can secure information and filter harmful information in the IPv6network environment by the combination of management. The experiment results show that the system can detect harmful information and take the appropriate filtering measures in its application scenarios; the introduction of parallel processing can process the date correctly, thereby improving the system’s processing capacity. |
