公开(公告)号：US20150135299A1

公开(公告)日：2015-05-14

申请号：US14402749

申请日：2012-07-24

Applicant: Chaocai Liang ,  Junfeng Liao ,  Rui Li

Inventor： Chaocai Liang ,  Junfeng Liao ,  Rui Li

IPC: H04L29/06 ,  H04W76/02

CPC classification number: H04L63/0823 ,  H04L12/6418 ,  H04L63/0485 ,  H04L63/164 ,  H04W12/001 ,  H04W76/11

Abstract: Provided are a method and system for establishing an IPSec tunnel. The method comprises: an base station requesting a first configuration parameter from a configuration server, and requesting a digital certificate from a CA server according to the first configuration parameter which is responded by the configuration server; the base station establishing a temporary IPSec tunnel to a security gateway according to the acquired digital certificate, and requesting a second configuration parameter from a background network management unit through the temporary IPSec tunnel; and after acquiring the second configuration parameter, the base station dismantling the temporary IPSec tunnel, and establishing a permanent IPSec tunnel between itself and the security gateway according to the second configuration parameter.

Abstract translation: 提供了一种建立IPSec隧道的方法和系统。 该方法包括：基站从配置服务器请求第一配置参数，并根据由配置服务器响应的第一配置参数从CA服务器请求数字证书; 所述基站根据获取的数字证书建立到安全网关的临时IPSec隧道，并通过所述临时IPSec隧道从后台网络管理单元请求第二配置参数; 并且在获取第二配置参数之后，基站拆除临时IPSec隧道，并根据第二配置参数在其自身与安全网关之间建立永久IPSec隧道。