Abstract: A method for network security management using an Internet key exchange mechanism. A user database is established at a server comprising a plurality of first usernames and a plurality of corresponding first passwords. A second username and corresponding password are embedded into a shared key. A client key value is derived according to the shared key and Internet key exchange mechanism. The first user-names and corresponding first passwords are calculated and obtained for generating a plurality of user key values. The client key value is added into a first message and transferring the first message to the server.

Abstract: A system for actively updating a cryptography module in a security gateway and related method is used in a security gateway, such as a VPN gateway according to an IPSEC protocol, which is connected between at least one user computer system and a network system. The system includes a Web GUI, a module update unit, a defined module unit, and an extended library. A user can easily update or add decryption/encryption modules into the extended library of the gateway through the Web GUI and the module update unit instead of updating the decryption/encryption modules along with the entire kernel firmware. This can reduce the setting time, increase the efficiency of operation, reduce the maintenance cost, and promote the expansion of decryption/encryption modules of the gateway so that network transmission can become much safer.