Patent ID: 7568099

Claim:
A method for preventing Internet Key Exchange (IKE) process conflict, comprising the steps of: a first gateway sending a first IKE request packet and receiving a second IKE request packet from a second gateway; performing a decision step to determine the first gateway to be one of an initiator and a responder; the decision step comprising: obtaining cookies from a header of the first IKE request packet and a header of the second IKE request packet; and performing a comparison step to determine a responder from the first gateway and the second gateway by comparing the cookies, wherein the comparison step comprises: computing a second digest according to the second IKE request packet; computing a first digest according to the first IKE request packet; comparing the first digest with the second digest; setting the first gateway as the initiator when the first digest is larger than the second digest; and setting the first gateway as the responder when the first digest is smaller than the second digest; the first gateway dropping the second IKE request packet and functioning as the initiator when the first gateway is determined to be the initiator; and the first gateway canceling the first IKE request packet and functioning as the responder when the first gateway is determined to be the responder, the first gateway performing IKE communication in response to the second IKE request packet.