Patent ID: 8843748

Claim:
A method for establishing a secure network architecture, comprising: 1) constructing a network architecture in which identities of nodes are legal, comprising: discovering a neighboring node; and performing an identity authentication and a shared key negotiation between the neighboring node and a node; and 2) constructing a secure switch device architecture, comprising: establishing a shared key between every two switch devices, the method further comprises: a switch route exploring process, comprising: exploring a first switch device and a last switch device a route from a transmitting source node to a destination node passes; and a secure communication process, comprising: performing a three-stage secure communication through the explored switch route, wherein exploring the first switch device and the last switch device the route from the transmitting source node to the destination node passes comprises: transmitting a switch route exploring request packet to the destination node N Destination by the transmitting source node N Source , wherein the switch route exploring request packet comprises switch route information from the transmitting source node N Source to the destination node N Destination which has been known by the transmitting source node N Source , and the switch route information from the transmitting source node N Source to the destination node N Destination is an identification four-tuple [ID Source , ID SW-first , ID SW-last , ID Destination ], wherein the ID Source represents an identifier of the transmitting source node N Source ; the ID SW-first represents an identifier of the first switch device SW-first the route from the transmitting source node N Source to the destination node N Destination passes; the ID SW-last represents an identifier of the last switch device SW-last the route from the transmitting source node N Source to the destination node N Destination passes; and the ID Destination represents an identifier of the destination node N Destination ; and transmitting a switch route exploring response packet to the transmitting source node N Source upon reception of the switch route exploring request packet, by the destination node N Destination .