A method and system for the security service in the internet service provider network including distributed network resources

摘要

PURPOSE: A security service system of an Internet service provider network including distributed security resources is provided to determine a next hop to which a marked packet moves by using address information of distributed security resources, and to transmit the packet to the determined hop, thereby supplying differentiated security services to customers by using distributed network security resources. CONSTITUTION: A packet analyzer(100) checks whether security information is a marked packet, and analyzes marking information if the security information is the marked packet. A security functional entity(110) performs a security function corresponding to the security information. A marking transformer(120) converts the security information, so that the same security function cannot be performed any more for the security information where the security function is carried out. A path decision unit(130) determines a next hop to which the packet moves by using address information of security resources, transmits the packet to the determined hop if the security information is the marked packet, and transmits the packet to the next hop according to routing information if the information is not the marked packet.