Patent ID: 8713663
Filing Date: 2014-04-29
Classification: H04L

Abstract:
1. A primary security processing device in an extended security system, wherein the extended security system further comprises at least one secondary security processing device connected with the primary security processing device, and the primary security processing device comprises a primary control module, an interface module and a connection module, wherein the primary control module is configured to, when receiving a request of processing an external packet and the external packet is a first packet of a traffic flow, select a security processing device for processing the traffic flow corresponding to the first packet according to processing capabilities of the primary security processing device and the at least one secondary security processing device, wherein the selected security processing device is one of the primary security processing device and the at least one secondary security processing device; and further configured to, when a secondary security processing device is selected, generate instruction information for instructing the interface module to send the received first packet to the selected secondary security processing device via the connection module, and instruct the interface module to record information that the secondary security processing device selected by the primary control module is used to process the traffic flow corresponding to the first packet; the interface module is connected respectively with the connection module and the primary control module, and is configured to receive the first packet, send the request of processing the first packet to the primary control module, send the first packet to the secondary security processing device selected by the primary control module via the connection module, and record the information that the secondary security processing device selected by the primary control module is used to process the traffic flow corresponding to the first packet; and further configured to receive a subsequent packet of the traffic flow, search for the secondary security processing device for processing the first packet from the information recorded in the interface module, and send the subsequent packet to the secondary security processing device for processing the first packet via the connection module; and the connection module is connected respectively with the interface module and the secondary security processing device, and is configured to send the received first packet to the secondary security processing device selected by the primary control module and send the subsequent packet to the secondary security processing device for processing the first packet; wherein the primary control module, the interface module and the connection module are implemented by one or more hardware processors.