关键词: 核心路由器, 安全机制, IPSec协议, 加密芯片

Abstract: Rethinking the requirements of next generation trustworthy network, this paper uses the idea of separate policy management from data processing for reference, and puts forward a design of security mechanism based on specific chips with distributed implementation and centralized management for high-performance core router. System test proves the correctness and feasibility of this design. It provides security protection with high performance on the foundation of high reliability, and meets the basic requirements of real-time encryption/decryption in next generation backbone.

Key words: core router, security mechanism, IPSec, cipher chip