Patent ID: 8392701

Claim:
An apparatus for ensuring packet transmission security, comprising: a main control board, at least one interface unit and at least one processing board, wherein the at least one interface unit is adapted to forward at least one packet to the main control board; the main control board is adapted to allocate, when receiving a packet forwarded by the at least one interface unit requiring Internet Protocol Security (IPSec) processing, one processing board of the at least one processing board to the packet, and forward the packet requiring the IPSec processing to the allocated processing board, wherein Security Association (SA) information related to an IPSec tunnel for transmitting the packet requiring the IPSec processing is stored in the processing board allocated; and the one of the at least one processing board is adapted to perform the IPSec processing to the packet requiring the IPSec processing received from the main control board according to the stored SA information, wherein the at least one interface unit is configured with at least one IPSec tunnel; and the main control board is further adapted to establish an SA with respect to each IPSec tunnel, and generate a relocation table according to the SA information obtained, wherein the relocation table is used for recording packet characteristic and a processing board identifier corresponding to the packet characteristic; search for, when receiving the packet requiring IPSec processing forwarded by the interface unit, a relocation table which records the same packet characteristic with that of the packet requiring the IPSec processing, and transmit the packet to a processing board identified by the processing board identifier recorded in the found relocation table.